This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File:                     8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier:          2PR6/LF7a4X5nq9melMATmjFBJF/ZBubAaCCNOSJ7G8=
Subject key identifier:   2E:DF:48:E7:28:1E:C9:98:C0:59:65:E1:67:8B:92:09:71:11:D7:25
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer:       /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial:       7A77E91F112DBC05928F840F3D2EBE62AF5283D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number:          02D1
Signing time:             Sat 20 Dec 2025 10:40:38 +0000
Manifest this update:     Sat 20 Dec 2025 10:35:38 +0000
Manifest next update:     Sun 21 Dec 2025 13:41:38 +0000
Files and hashes:         1: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: /02W0MeQbHpyCAaZLSENooDm7Q6/cQG4TZ0qLVZ3ol0=)
                          2: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: 4yngCd7rMrm1N5h7XLUwcr/v6nWiYlH0k6Z0RNslBIQ=)
                          3: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: 77sbwDIGbovm49Uz1CbjaTsotT0crY29M41hoNa1dlQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
                          rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 13:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:77:e9:1f:11:2d:bc:05:92:8f:84:0f:3d:2e:be:62:af:52:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
        Validity
            Not Before: Dec 20 10:35:38 2025 GMT
            Not After : Dec 21 13:41:38 2025 GMT
        Subject: CN=2EDF48E7281EC998C05965E1678B92097111D725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:fd:b1:20:72:38:e3:d3:90:b9:72:ed:8f:
                    0f:85:0b:63:4a:d3:ef:de:e1:5d:df:33:c4:e6:5f:
                    5e:f8:54:d1:ca:4c:d4:18:ff:72:75:c5:9d:b9:23:
                    1c:fb:2d:d2:90:12:82:3a:df:24:69:3a:3c:51:d2:
                    52:4e:d2:c9:60:fb:50:3f:a6:b7:0c:c7:b2:3b:14:
                    fa:49:d4:4e:e8:3e:1e:02:40:03:5d:63:cf:b6:57:
                    4a:7c:55:a2:7d:c8:70:57:75:9a:d1:79:88:32:2d:
                    21:d7:4b:f0:8f:1b:36:05:16:41:ba:93:7d:e3:75:
                    54:7b:b1:e8:97:8b:95:a3:12:9d:35:2a:79:46:6b:
                    2f:e8:6c:8c:44:07:56:3a:81:79:46:90:28:d5:18:
                    63:8e:12:78:ca:e5:83:be:7e:db:52:88:15:5c:8b:
                    85:f0:a0:50:e0:e0:f6:d6:f5:e0:f9:bf:d3:9b:e0:
                    02:c2:83:62:ee:5d:5d:93:a1:46:97:ab:bd:76:5a:
                    78:4a:46:dc:1d:9f:d7:b4:c4:13:00:7c:d0:1e:ca:
                    f3:c0:e7:bf:bf:e1:14:12:e8:73:23:04:e4:51:b5:
                    fd:ee:e1:dd:8a:19:61:ec:50:68:df:21:7a:e8:12:
                    49:49:ac:eb:b7:62:8b:34:3f:68:eb:13:12:c0:ab:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DF:48:E7:28:1E:C9:98:C0:59:65:E1:67:8B:92:09:71:11:D7:25
            X509v3 Authority Key Identifier:
                keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:fe:f9:91:07:39:33:cf:4f:14:ba:02:81:e4:eb:31:e9:
         9f:85:48:f5:4c:0c:09:d5:42:9b:03:f5:25:11:b4:9c:a5:a5:
         7e:f3:ee:13:97:57:f0:bb:93:a3:dc:f9:07:41:e9:6b:43:bf:
         99:c6:dc:cd:8d:40:29:b2:73:67:1c:63:f1:ea:00:16:09:4c:
         eb:77:02:37:fc:57:ff:d1:94:ca:00:6f:1f:f4:f8:88:78:6f:
         7e:6d:e5:74:db:03:5c:65:ac:dc:7b:24:bc:19:8f:83:a3:60:
         04:44:64:c0:fa:09:1f:c2:17:1f:8c:4c:7e:18:b6:03:fa:f7:
         39:a4:a3:a3:71:8d:09:27:e8:ed:81:15:14:83:5c:b4:4e:23:
         63:51:7b:46:97:23:b3:6c:01:d3:90:43:41:fd:ab:e2:70:e4:
         b4:2c:8b:7b:44:48:ac:77:cd:25:d0:f6:5f:db:80:95:c6:50:
         fd:8a:ed:d3:a5:2a:53:63:af:7d:a4:ca:a6:33:8a:de:56:2b:
         8e:55:2b:a0:e4:35:98:9c:85:8a:63:e7:00:6d:a8:aa:b6:5f:
         8b:19:6b:16:b9:bb:89:0a:d8:0e:75:ba:92:3a:ad:5a:c9:a2:
         81:d4:a9:32:12:eb:13:4a:b4:ed:6d:6b:00:85:e6:1c:2a:bd:
         06:2f:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:15:29 2025 by rpki-client