This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.mft
File:                     7F20B42329826F61A48F5EB8314D3EFEE070F8A3.mft (raw, json)
Hash identifier:          8f7wi66gngSIKEI/3lKyn5mjwQqyYIE77WXg5LXSX00=
Subject key identifier:   8B:DD:E0:57:83:5B:81:D8:20:19:8C:E8:CD:2C:02:78:BD:D6:7D:83
Authority key identifier: 7F:20:B4:23:29:82:6F:61:A4:8F:5E:B8:31:4D:3E:FE:E0:70:F8:A3
Certificate issuer:       /CN=7F20B42329826F61A48F5EB8314D3EFEE070F8A3
Certificate serial:       492A0F4ACC347A0219B8BCEDADD8F0495D74786C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.mft
Manifest number:          2D
Signing time:             Sun 14 Dec 2025 18:51:03 +0000
Manifest this update:     Sun 14 Dec 2025 18:46:03 +0000
Manifest next update:     Mon 15 Dec 2025 22:02:03 +0000
Files and hashes:         1: 3136382e3139352e3137382e302f32342d3234203d3e20323635343337.roa (hash: S2kOgkO1nnBQM+XgdrAqH7Qp3dB4WWjanyJywoHQqlI=)
                          2: 7F20B42329826F61A48F5EB8314D3EFEE070F8A3.crl (hash: oWSTe4zfn21GUtz5w9nU9ZbslaX9Z6jBN4eAWTzvJFk=)
                          3: 3136382e3139352e3137372e302f32342d3234203d3e20323635343337.roa (hash: UF+G5xTzic7dMuh3ZqVzfwf7saRfzXFgYgO8hXwGRCg=)
                          4: 3136382e3139352e3137362e302f32332d3233203d3e20323635343337.roa (hash: /u2Q7bHBtvfeD+4zggKUusb97pll0d6DIBxaEVHLJeA=)
                          5: 3136382e3139352e3137362e302f32322d3232203d3e20323635343337.roa (hash: n7u8FVxXGX+26m1ss1nucHnzRa/MEG7y6EifyUxBlDc=)
                          6: 323830343a333432303a3a2f33322d3334203d3e20323635343337.roa (hash: n2MvJ7muUTaOw0NvFZ425IdSk1urBrCvZ+YMZszGqfM=)
                          7: 3136382e3139352e3137392e302f32342d3234203d3e20323635373337.roa (hash: A2ax1DXHwskCdkVWmst+seI9gDOcqpP071f6BUA2/vo=)
                          8: 3136382e3139352e3137382e302f32332d3233203d3e20323635343337.roa (hash: 4X3dbCPk45rDoM6rBu8T+yB39o/f7pumX1bYVBYWFUU=)
                          9: 3136382e3139352e3137362e302f32342d3234203d3e20323635343337.roa (hash: AXrq1jGAAM2PHCy+eb/L9+p3OW6P5dyol9yi7qdeFZA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.crl
                          rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 22:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2a:0f:4a:cc:34:7a:02:19:b8:bc:ed:ad:d8:f0:49:5d:74:78:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F20B42329826F61A48F5EB8314D3EFEE070F8A3
        Validity
            Not Before: Dec 14 18:46:03 2025 GMT
            Not After : Dec 15 22:02:03 2025 GMT
        Subject: CN=8BDDE057835B81D820198CE8CD2C0278BDD67D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:4a:b7:1b:b0:fa:ea:b5:36:7b:33:bf:b2:
                    e6:4b:4f:b5:a1:28:ac:82:bb:07:0e:77:10:a2:e4:
                    14:50:a4:1b:7c:d8:0e:c4:f1:99:42:9f:e7:49:cd:
                    0c:39:bd:b1:7c:40:70:e0:71:bb:97:28:6e:de:f1:
                    ed:61:47:ab:b4:1d:4d:c4:dc:61:08:b5:bb:ac:1b:
                    dd:53:6f:c9:aa:a5:9e:6c:31:0b:a2:f5:33:50:f7:
                    f9:d6:7d:e4:42:c5:07:4f:30:0e:20:80:09:fe:c6:
                    f7:b6:9d:b1:e7:28:3e:a0:e8:fa:d7:1d:7c:25:ab:
                    c1:20:60:c8:4a:b0:ce:a4:9d:9c:2c:1e:ed:0b:0a:
                    24:f2:a3:ce:61:b2:ca:68:59:9a:e3:75:c9:90:26:
                    f7:67:5c:25:94:6a:2d:6d:07:32:73:55:1f:eb:52:
                    c1:0e:0e:d7:69:a4:1d:a0:fd:78:c3:4a:a1:5d:aa:
                    b2:6f:6b:58:e0:64:1b:7f:7c:45:55:ad:33:96:12:
                    b0:05:94:01:37:4e:93:2d:f6:8d:46:8c:c0:d0:db:
                    7e:39:a2:de:bf:33:f5:73:a5:f9:69:29:64:94:73:
                    d2:d6:db:4f:ed:2c:fa:2f:bb:d6:2d:f7:f7:fe:38:
                    df:9e:e4:1d:77:61:c3:86:fc:7a:ef:9b:5e:33:e3:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DD:E0:57:83:5B:81:D8:20:19:8C:E8:CD:2C:02:78:BD:D6:7D:83
            X509v3 Authority Key Identifier:
                keyid:7F:20:B4:23:29:82:6F:61:A4:8F:5E:B8:31:4D:3E:FE:E0:70:F8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C6Amcnbx5NuDzbgD977znWbf1NcR2oqqZdNLUYQmRtme/0/7F20B42329826F61A48F5EB8314D3EFEE070F8A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:03:96:90:96:b9:bc:01:b2:cb:b9:6e:cc:01:35:49:1c:
         5f:5f:00:ee:fd:3e:19:05:2b:f0:e4:18:22:10:77:97:b0:96:
         e5:ca:68:38:96:91:99:3e:51:0f:1a:d9:dd:0b:03:f9:11:17:
         bc:4b:fb:29:5b:7f:9f:fb:24:3f:ad:c4:b3:0a:ea:92:13:78:
         4d:67:ed:9f:2c:14:b6:54:b7:6b:11:c9:1d:f9:ff:3f:44:0e:
         09:b3:52:4e:d3:63:b1:2a:fb:d6:a6:12:00:a4:4e:2e:01:54:
         ce:3d:9e:c7:27:ff:fa:45:57:f4:75:cf:f9:c6:9a:28:1c:11:
         11:60:60:bd:b2:0a:8a:a0:22:67:b7:b9:47:7e:00:0f:15:99:
         27:95:38:ee:6b:9e:06:98:e3:1e:a8:7c:51:09:5f:df:10:04:
         e6:1e:bb:f2:2b:f2:8b:1c:1b:4e:0e:72:25:8c:33:6d:53:45:
         86:e6:52:12:aa:01:ce:4e:f9:05:cf:35:52:dd:d7:bb:b3:a7:
         15:0f:39:91:da:4e:01:57:55:17:12:d6:cd:a3:88:30:36:61:
         9d:46:5d:5f:80:a8:0c:56:3b:a6:ad:5c:36:57:01:a8:f3:3e:
         b9:19:6c:e6:c8:5a:3b:76:60:7c:51:b3:a0:33:a4:2a:ff:8e:
         6f:1e:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 15:19:53 2025 by rpki-client