This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json)
Hash identifier:          9GXNXfJQbR9Qwkj4xLLEbq3Wy4mdt50fIYSYFLqwP0o=
Subject key identifier:   F4:81:4F:37:74:D7:7F:D2:BD:D2:3D:93:EB:2D:AC:A3:24:FB:4F:9E
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       196C866F7D732AA62DF369BC207998B95E978247
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
Manifest number:          01D7
Signing time:             Thu 18 Dec 2025 17:46:59 +0000
Manifest this update:     Thu 18 Dec 2025 17:41:59 +0000
Manifest next update:     Fri 19 Dec 2025 19:51:59 +0000
Files and hashes:         1: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: N0IcTOYFU5ZMMu+cgyyvQqnzYkGJv2HWossKq/fnmK8=)
                          2: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: mPcgWOQP3Yfaj4II6jjlLcd9TZ991tq6OUlMO7aXDKs=)
                          3: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: LpZUFdp5QtcnhG/XEq0FRx2E8yWn4lVSq4AvIB5A+RQ=)
                          4: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: r+Ce4bAI52p7w4milCYkcttrWEjX2kGjkA82VJ3Espc=)
                          5: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: keXIpMElmj/p1Ii/+at+te+ilCZkFZnEutXTtt+hJ0U=)
                          6: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: 5CvYIXSp8u4NpKdHHhfdgyG8JfFc+Zv/m7gyDCofurM=)
                          7: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: 2ZOwE2PR0CMiaImusRVey0Ti2u141VZv3wxhLAy74xo=)
                          8: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: 84h5WIrRdNIuOAKxo5jqkxy4MZCfgun5O5sJhst6mPo=)
                          9: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: 17+u0HNFwo8Q2gdhCBAuIkj02jj+cd6wojbAGTJYvRE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6c:86:6f:7d:73:2a:a6:2d:f3:69:bc:20:79:98:b9:5e:97:82:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Dec 18 17:41:59 2025 GMT
            Not After : Dec 19 19:51:59 2025 GMT
        Subject: CN=F4814F3774D77FD2BDD23D93EB2DACA324FB4F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:c4:a1:de:83:ef:1a:b2:da:fc:08:07:16:
                    7e:76:fc:d1:51:4d:6d:11:03:92:0a:15:15:ff:c1:
                    89:ec:ca:08:eb:03:9c:d8:55:75:cf:d1:d6:99:aa:
                    e2:cb:44:d4:d9:e1:6a:4b:46:16:78:60:8d:3b:60:
                    ed:ee:33:ec:7b:7d:5e:e3:af:49:d1:61:71:30:53:
                    da:79:1d:12:c7:e5:f5:df:65:a3:70:70:42:24:f3:
                    8a:71:56:9b:dc:98:6a:07:71:a7:e2:7e:e0:1f:2e:
                    4e:58:38:97:8f:f3:76:b6:60:a9:7d:6b:49:6f:35:
                    e6:0d:2e:6b:14:15:e9:d4:98:d3:cb:ae:74:e8:5f:
                    17:9f:7a:c8:91:fd:03:7b:62:ce:e8:b6:23:21:e4:
                    c2:e3:7b:8f:56:35:77:36:d6:e8:3b:2a:64:e4:5a:
                    4f:fe:29:59:f5:64:3f:3d:0c:07:38:56:a3:68:19:
                    da:b9:b6:67:56:1b:c9:50:fd:54:49:d2:e5:36:2b:
                    7e:a9:a0:fa:24:12:29:14:1d:45:a4:c5:66:39:59:
                    7e:0b:b8:37:38:51:df:4f:44:ab:19:0a:ac:3e:ad:
                    10:09:5e:8c:97:c6:bf:24:b4:c0:f6:5b:1a:9d:b8:
                    dc:7c:6d:f5:16:cb:3d:25:b2:7e:b4:d9:ec:9d:c6:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:4F:37:74:D7:7F:D2:BD:D2:3D:93:EB:2D:AC:A3:24:FB:4F:9E
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:34:05:16:0f:90:7e:0c:c7:d9:bc:57:81:9f:4f:1f:8f:07:
         64:6b:fa:d3:88:04:1d:fd:56:4c:83:18:87:13:c7:fb:51:3f:
         cf:f3:6a:e2:12:0e:7e:3d:ce:71:72:3e:98:fb:4a:79:cc:df:
         d0:a7:13:9a:21:3b:f1:b7:ab:8f:ce:3a:30:82:7f:c3:08:28:
         e7:b0:8f:7b:1f:6f:ea:6a:fc:dd:fe:c0:7e:84:d6:93:2f:30:
         fc:bd:17:fb:0a:59:65:a8:62:70:e1:cd:bb:08:4e:de:9b:fe:
         45:35:6d:20:46:b9:99:1f:b5:59:3b:be:bc:d9:8e:3e:39:4d:
         99:67:eb:6a:cc:73:d0:91:4a:6a:dd:ef:84:6a:0b:56:e4:f8:
         bf:d7:59:a9:f1:e7:e3:56:56:26:d8:63:5d:60:6f:90:89:f5:
         50:85:bd:59:06:11:04:b6:c3:be:35:52:1b:d2:03:76:75:b1:
         96:d3:80:f0:a7:de:44:fa:ae:86:62:1e:3e:23:36:4f:c6:6f:
         91:d4:30:61:e2:f3:c7:a2:75:24:39:66:6b:92:45:7d:ef:e2:
         5e:19:2b:25:b8:93:6d:52:01:ad:de:e1:b3:e4:53:49:89:7f:
         4a:9f:00:37:47:ac:6e:dc:80:19:da:8d:2a:fb:da:c9:e6:d0:
         44:8b:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:24:31 2025 by rpki-client