This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
File:                     057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft (raw, json)
Hash identifier:          5LNwE6X4cSZR/qL0eur3kYOVpWZvD5qlJ9YHvktFI5g=
Subject key identifier:   43:63:C7:4C:99:0C:8B:24:8B:E4:2E:62:44:59:C3:73:00:F1:DF:93
Authority key identifier: 05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92
Certificate issuer:       /CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
Certificate serial:       482B32537B1627E178E25946C9CAD21421B456AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
Manifest number:          01AD
Signing time:             Tue 23 Dec 2025 09:34:53 +0000
Manifest this update:     Tue 23 Dec 2025 09:29:53 +0000
Manifest next update:     Wed 24 Dec 2025 09:43:53 +0000
Files and hashes:         1: 323830343a343161633a3a2f33322d3333203d3e20323637343439.roa (hash: HgZU+Pll+tQJkWRhF65OLlaCYkkoIV1k5H+FgGnItKM=)
                          2: 057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl (hash: BI1sJxwC5USdmM7yj/SpnXiW/YBf01s6SHPGZtAi9uY=)
                          3: 3138312e3139312e3232382e302f32322d3234203d3e20323637343439.roa (hash: nSRNKvNDl/hwkalX2TxE07srB5dDHYCqYUf+heau96s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl
                          rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 09:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2b:32:53:7b:16:27:e1:78:e2:59:46:c9:ca:d2:14:21:b4:56:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
        Validity
            Not Before: Dec 23 09:29:53 2025 GMT
            Not After : Dec 24 09:43:53 2025 GMT
        Subject: CN=4363C74C990C8B248BE42E624459C37300F1DF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:a7:df:5c:7e:a5:ea:49:ea:b0:f8:17:36:
                    a7:8d:f9:0e:6b:6a:5b:64:14:eb:fd:12:23:d2:b4:
                    bf:3e:bf:3c:59:27:25:23:4e:f1:1a:dc:28:a7:21:
                    1f:bf:16:21:9c:d2:c6:0d:85:1e:7b:5d:bd:a2:3e:
                    fd:d3:fc:90:be:8e:f1:ca:b0:a4:4f:a0:9c:ec:b5:
                    6a:89:e1:2a:89:ac:51:52:88:61:87:48:ea:b8:4c:
                    6a:4f:54:4d:0f:7a:e2:47:4d:76:3f:f6:f3:ff:19:
                    6b:3e:c3:d7:15:a5:80:ec:3a:dc:26:81:9f:8d:64:
                    2f:ca:a7:fc:de:9d:e6:3b:24:5a:0b:51:71:4b:9c:
                    92:c9:c5:f7:0b:a5:aa:4b:73:6d:75:f8:5a:01:da:
                    f3:ca:65:9e:25:e4:47:0f:e4:f1:ed:27:2c:63:20:
                    ea:24:16:30:d9:d8:61:98:54:29:d2:1b:4b:6d:00:
                    9b:e0:db:9c:a8:b0:71:b3:ef:f8:50:a1:2a:c3:e4:
                    db:55:d7:21:33:62:54:86:97:5f:d2:df:9f:78:d1:
                    e8:6f:64:5a:d5:d2:a0:ce:45:c7:e6:1a:f3:07:c9:
                    76:41:33:87:de:4a:cc:98:b1:6d:be:71:b8:61:54:
                    23:2b:ee:bb:6c:06:77:53:28:3e:4e:0e:1b:07:d2:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:63:C7:4C:99:0C:8B:24:8B:E4:2E:62:44:59:C3:73:00:F1:DF:93
            X509v3 Authority Key Identifier:
                keyid:05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:a0:56:2e:9c:7f:33:11:b8:4e:7b:ca:3a:59:35:37:6f:
         e6:34:f8:9c:f3:a6:83:6b:f7:ab:31:2e:38:6e:c1:0a:27:57:
         22:9b:23:0c:84:20:3a:54:55:2e:77:6b:a1:90:f5:7a:ea:fc:
         9f:5c:77:56:8b:10:05:1a:ac:2d:37:7b:83:9f:16:65:91:05:
         1c:bc:22:71:6d:63:56:27:1d:70:b7:40:18:ca:dc:33:95:41:
         3d:dc:01:dc:47:57:89:51:c9:93:39:15:c1:18:21:a9:99:41:
         52:15:85:aa:82:56:4e:ec:aa:db:0c:6e:d2:f2:16:5d:bf:bd:
         dc:ad:1e:34:62:63:09:6a:45:51:c1:30:91:9a:07:88:e1:9f:
         9a:02:61:d6:c2:f4:db:b7:5b:b2:c3:ee:e3:92:98:47:13:42:
         d1:85:5f:af:98:7d:da:55:61:86:2c:cd:c9:c1:ae:a1:41:42:
         ad:c6:62:2f:e8:64:dc:be:11:5c:05:c1:d9:7f:f1:5d:5b:76:
         b9:e0:9f:9f:21:e0:2e:0f:41:c6:90:34:e4:54:ba:c4:6a:04:
         9e:94:3e:72:d9:58:8a:d0:7e:3e:b5:5a:62:53:b0:5d:e2:1e:
         6c:75:d7:13:dd:7b:4a:36:ae:f9:13:1d:6f:6b:c8:87:8a:a2:
         7f:43:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:55:13 2025 by rpki-client