This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.mft
File:                     16D59541EC6814ABD32D2385C29E7A64CA2E012A.mft (raw, json)
Hash identifier:          /8UGG2+fNQWn9yn0/rfGJELLxmoJ9Fw5qG7xl98xtwk=
Subject key identifier:   07:C3:B7:4D:C1:CF:79:3C:A0:6D:34:1F:E2:BD:03:F7:8A:4B:72:56
Authority key identifier: 16:D5:95:41:EC:68:14:AB:D3:2D:23:85:C2:9E:7A:64:CA:2E:01:2A
Certificate issuer:       /CN=16D59541EC6814ABD32D2385C29E7A64CA2E012A
Certificate serial:       2AE5760630D827F6683DAF9BB4A52F5FC28DA2C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16D59541EC6814ABD32D2385C29E7A64CA2E012A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.mft
Manifest number:          73
Signing time:             Fri 19 Dec 2025 01:51:36 +0000
Manifest this update:     Fri 19 Dec 2025 01:46:36 +0000
Manifest next update:     Sat 20 Dec 2025 04:09:36 +0000
Files and hashes:         1: 323830343a316437633a3a2f33322d313238203d3e20323634333733.roa (hash: OIEDiP2yguoQemr/E5C8mS+rz10cSxxc2lzVOAwOXqc=)
                          2: 3133312e3136312e37362e302f32322d3332203d3e20323634333733.roa (hash: nPhvOYkSQUrDIi88Mrab9aBVod2JVSn0xK3HzuNd94k=)
                          3: 16D59541EC6814ABD32D2385C29E7A64CA2E012A.crl (hash: HaE+rjM2FK/XBjF9EEqFth0SDzLQZ7C2e+mWkc7eCuo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.crl
                          rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16D59541EC6814ABD32D2385C29E7A64CA2E012A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e5:76:06:30:d8:27:f6:68:3d:af:9b:b4:a5:2f:5f:c2:8d:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D59541EC6814ABD32D2385C29E7A64CA2E012A
        Validity
            Not Before: Dec 19 01:46:36 2025 GMT
            Not After : Dec 20 04:09:36 2025 GMT
        Subject: CN=07C3B74DC1CF793CA06D341FE2BD03F78A4B7256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:ca:ec:6f:ad:36:9d:a3:e5:b9:4b:c7:52:
                    a7:85:f1:f4:78:68:5e:c3:06:a1:f5:14:14:fa:03:
                    88:a2:3b:7c:17:a4:83:93:b2:93:c9:0e:5c:3f:40:
                    3d:c8:d3:f4:e2:41:41:16:5d:76:e0:a4:a3:e6:1e:
                    33:59:5f:21:1c:39:12:a7:2b:98:0c:f6:25:83:3c:
                    11:24:4e:26:87:15:b5:38:be:45:3d:7b:36:c6:1e:
                    6b:15:b2:52:52:34:2d:3e:cc:36:86:aa:3a:27:8a:
                    c5:df:55:38:fb:5a:3a:bc:28:70:50:56:6a:28:1d:
                    ae:06:b8:06:c5:11:3a:94:08:11:e8:0b:a2:fb:b1:
                    17:5b:fb:e8:40:aa:f6:24:da:0b:0b:ae:43:60:ae:
                    ca:d3:f7:a5:4e:e8:68:da:81:8f:83:91:49:1d:b5:
                    73:e3:67:19:b2:2b:e2:3b:ab:21:18:cf:de:a1:de:
                    cf:db:f1:c2:1b:b9:37:75:00:6e:1f:47:75:74:46:
                    1a:3d:ab:41:1d:06:9b:c7:8d:6e:f8:4a:4e:5c:18:
                    d7:a5:fc:c7:b7:91:0f:00:7d:62:1a:f0:59:d5:1a:
                    26:72:cb:c5:b1:a0:2a:91:f5:04:60:6e:90:e0:c1:
                    cc:10:d7:94:c8:dd:2e:2a:bd:a3:6f:e0:b3:5a:66:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:B7:4D:C1:CF:79:3C:A0:6D:34:1F:E2:BD:03:F7:8A:4B:72:56
            X509v3 Authority Key Identifier:
                keyid:16:D5:95:41:EC:68:14:AB:D3:2D:23:85:C2:9E:7A:64:CA:2E:01:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16D59541EC6814ABD32D2385C29E7A64CA2E012A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:85:e1:ee:9e:13:b2:45:33:34:89:a3:53:6b:fe:67:b6:
         5c:8c:9c:fd:76:ea:b2:19:4a:89:39:2e:ea:6b:94:0e:45:34:
         37:3c:b5:a7:2b:79:4b:29:77:eb:b1:e2:d0:0a:64:55:2d:e9:
         79:73:7b:97:5e:b7:ef:14:52:f2:a2:ad:15:2b:70:67:ad:e9:
         99:7c:e9:fa:f9:2d:fe:21:80:b0:12:2d:fe:4b:4a:9c:5a:00:
         a3:82:2d:d8:56:b6:de:75:06:4d:2e:fe:23:8f:7f:f3:52:e4:
         a2:45:0a:88:ea:ba:d0:25:57:8a:0a:89:fe:9b:77:b5:5b:bd:
         22:15:1f:98:19:94:2e:21:52:c1:6e:91:cc:d0:58:8a:29:31:
         f9:16:3a:8a:d5:a8:97:71:ec:c1:3d:b8:36:38:04:67:27:b9:
         5d:81:5f:8b:7f:5e:18:5a:a2:f9:f6:b3:4a:45:15:b0:de:4c:
         ae:1e:a8:ea:ae:e4:e2:9c:77:c8:e0:fd:31:af:b0:e4:94:0f:
         e0:7a:65:bf:f4:be:a3:ef:1d:c3:b1:c9:d0:e0:49:d6:22:3b:
         76:ae:8f:4f:0b:d0:e6:ac:0f:b1:de:60:ee:2a:b3:bb:bb:b5:
         a4:11:a2:5f:db:c3:49:2d:95:06:d3:14:d5:db:41:c5:6c:61:
         d5:cb:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:30:19 2025 by rpki-client