This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
File:                     2ED5E473D72A6D301514B818C3D2A94A5E387474.mft (raw, json)
Hash identifier:          OVtJZke9zSRWiv9CdgP4aKIH3UF7V80q9f/3lklPPc0=
Subject key identifier:   92:7A:8C:F8:0C:01:74:0F:90:29:DA:9F:D9:49:E6:17:EA:33:BA:8B
Authority key identifier: 2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Certificate issuer:       /CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
Certificate serial:       46C18B398B36554DDB3C5E1F309219699C838194
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
Manifest number:          0343
Signing time:             Mon 22 Dec 2025 05:22:20 +0000
Manifest this update:     Mon 22 Dec 2025 05:17:20 +0000
Manifest next update:     Tue 23 Dec 2025 05:29:20 +0000
Files and hashes:         1: 2ED5E473D72A6D301514B818C3D2A94A5E387474.crl (hash: aSAhCph4TLqMhMxJ/ia5dFcF5Jc69wRs0vHSBEWlk5c=)
                          2: 34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa (hash: vh37LS+azGK1lNilgZpjLA+LMtV8gz1C3+2xSFAbMyM=)
                          3: 323830343a343931343a3a2f33322d3438203d3e20323637313633.roa (hash: eq0PcSeiO5odYM2D6uiUlk4JYMLbb/z82YD2kS4iIxk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl
                          rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 05:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c1:8b:39:8b:36:55:4d:db:3c:5e:1f:30:92:19:69:9c:83:81:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Validity
            Not Before: Dec 22 05:17:20 2025 GMT
            Not After : Dec 23 05:29:20 2025 GMT
        Subject: CN=927A8CF80C01740F9029DA9FD949E617EA33BA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:20:68:b9:aa:4f:c4:04:84:1a:5f:92:58:
                    f9:d5:37:bc:28:1e:41:dd:8d:d7:bf:26:8c:3b:3f:
                    7b:9f:0b:71:9c:68:48:85:e5:31:49:f9:55:78:c5:
                    c2:36:d7:c5:1b:0e:03:91:6c:a8:03:8a:1c:43:25:
                    e5:af:75:c7:99:01:6a:ef:b1:3c:75:47:d9:55:a0:
                    d5:f7:b8:7a:be:05:f0:4d:c8:3e:e9:73:a6:20:50:
                    d8:7f:81:63:de:25:68:a4:96:cb:58:ff:27:b7:dd:
                    59:2d:a9:70:4b:cb:25:9a:7d:ab:8d:3f:59:15:cd:
                    c1:4b:51:04:f3:28:f8:58:a5:b6:ad:ab:e7:26:8d:
                    63:8a:44:5d:d7:e0:a6:1d:e0:56:1d:68:b5:9e:eb:
                    67:d1:08:9d:e4:39:bd:e6:c9:61:f7:d4:90:c9:96:
                    6c:f0:a1:2e:80:a4:89:5a:b3:09:6c:94:df:89:1b:
                    e8:83:74:d4:f6:e8:29:42:a1:b4:de:ed:c2:3f:39:
                    2c:a1:f7:88:c6:b4:b1:b0:6a:ed:3f:04:ce:16:f1:
                    59:ca:6e:9a:7c:92:da:31:3a:3d:e3:46:d0:d6:d5:
                    9c:39:3a:6c:32:88:e0:71:d5:dc:f3:87:a5:cd:46:
                    7d:59:58:ca:df:5f:fd:8c:c6:28:f2:4f:09:00:30:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7A:8C:F8:0C:01:74:0F:90:29:DA:9F:D9:49:E6:17:EA:33:BA:8B
            X509v3 Authority Key Identifier:
                keyid:2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:de:0c:c1:85:b8:fc:80:fd:cd:4b:ab:42:2a:90:c4:da:3d:
         98:c6:bf:3b:cc:4a:40:35:a4:7b:69:5a:c0:b9:2d:f2:94:3b:
         4e:2c:a7:42:d0:a9:7b:ca:89:91:71:ce:44:68:10:bf:bd:e5:
         34:09:af:2a:07:04:6f:5a:15:63:6a:20:c8:6b:a8:07:d8:93:
         61:6a:3d:cb:1d:ab:9f:63:3c:97:c6:cb:1d:ac:11:fb:3f:7b:
         1a:28:49:8a:2f:5e:df:b1:38:bc:d1:7c:12:21:aa:10:37:a7:
         2e:e6:1e:7f:37:45:46:8a:6b:ea:99:d3:e5:d3:c0:b1:0f:2f:
         bd:db:a3:eb:27:e5:b4:6e:8e:6b:66:ee:d8:c9:65:44:0c:42:
         b1:58:f5:79:41:9a:c9:96:c0:d9:68:bf:27:95:f0:2f:48:2b:
         ab:49:da:dd:ef:83:38:ef:91:13:fa:7c:d7:58:ee:39:f7:8b:
         16:50:f3:db:b8:30:f3:a3:52:2f:2b:80:a5:65:f0:8f:35:d5:
         79:05:23:c6:95:c9:bc:a5:ed:56:ee:9d:01:91:5f:4f:b9:25:
         22:2d:86:62:76:a7:99:f8:d7:6d:04:b1:2f:53:81:66:25:35:
         66:b2:b1:a7:75:b2:0c:5a:ea:7d:2f:60:77:9f:d7:21:38:c7:
         a3:f0:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:06:01 2025 by rpki-client