This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
File:                     020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft (raw, json)
Hash identifier:          DHrH1eJJTQRFXD8aeFB7+AT8iyoa3dsItphc2nF+gHY=
Subject key identifier:   56:BA:64:63:28:D9:79:BF:C9:81:5A:78:EB:8C:3A:B4:09:4B:A1:35
Authority key identifier: 02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03
Certificate issuer:       /CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
Certificate serial:       6650D9EE0D545184FC63570DCDFA24EE70CA4DFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft
Manifest number:          0119
Signing time:             Mon 10 Nov 2025 05:24:35 +0000
Manifest this update:     Mon 10 Nov 2025 05:19:35 +0000
Manifest next update:     Tue 11 Nov 2025 06:22:35 +0000
Files and hashes:         1: 020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl (hash: H3SnDlVkdH6Bz/EbBeOrvQe0TOPoVR7egU2/dVd9Eo4=)
                          2: 323830343a376462383a3a2f33322d313238203d3e20323731353738.roa (hash: QV4bak4yJbutgIlmji9b6+UXVDaNSeP7XojS+orZIb4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:d9:ee:0d:54:51:84:fc:63:57:0d:cd:fa:24:ee:70:ca:4d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020B6025D315CBAEB1AA6B20873494F4BD2ED003
        Validity
            Not Before: Nov 10 05:19:35 2025 GMT
            Not After : Nov 11 06:22:35 2025 GMT
        Subject: CN=56BA646328D979BFC9815A78EB8C3AB4094BA135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:15:22:0f:be:a0:87:07:0f:df:95:cc:6b:
                    4b:78:10:ec:6e:ba:3e:47:c2:c3:f1:15:1d:97:e6:
                    67:03:cd:3b:3d:a7:15:b3:e7:a4:87:b8:4b:40:5c:
                    1b:0e:70:79:0b:05:5d:99:80:37:72:a3:a3:7f:39:
                    5e:86:9e:88:6d:f3:68:0d:b0:1e:ae:de:03:8c:31:
                    11:05:dc:e2:e3:44:0f:9d:b5:82:48:54:ce:c3:c7:
                    76:5d:7c:0d:2c:b0:dd:c3:3f:f3:c5:95:19:1d:08:
                    e9:0a:04:43:5c:45:33:18:e7:46:2b:eb:32:aa:44:
                    4f:a2:28:59:5c:36:d5:6d:03:b0:07:4e:d7:92:0b:
                    12:9e:0b:49:32:14:ad:49:c0:59:28:d9:89:6e:da:
                    de:2c:bb:2d:f1:b1:28:8d:a0:76:80:07:33:52:c0:
                    c8:62:50:48:72:c8:ea:96:f5:4e:8d:39:af:db:26:
                    7b:09:1f:09:ab:a6:83:2f:55:90:94:dd:a8:1e:1b:
                    46:ad:09:58:2c:63:87:c3:1d:0d:80:dc:fe:ff:ae:
                    af:2e:9b:45:86:ea:5e:81:60:a6:90:cf:2c:1b:b8:
                    00:88:ce:c8:34:ef:15:9f:60:40:87:5d:25:f5:75:
                    35:db:df:4e:1d:25:1d:7c:47:06:e6:d5:3b:2d:d8:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BA:64:63:28:D9:79:BF:C9:81:5A:78:EB:8C:3A:B4:09:4B:A1:35
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:25:D3:15:CB:AE:B1:AA:6B:20:87:34:94:F4:BD:2E:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020B6025D315CBAEB1AA6B20873494F4BD2ED003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/020B6025D315CBAEB1AA6B20873494F4BD2ED003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e3:6c:93:9a:04:1f:92:ae:d0:29:fd:6d:b2:22:44:c5:c5:
         50:23:9c:69:7f:30:0f:27:8c:02:3f:be:5e:42:3f:7c:4c:df:
         6b:bc:ef:ad:44:20:10:77:b9:00:87:c1:e0:2b:65:1b:de:b4:
         80:c0:ee:8b:ba:0a:ed:73:97:15:1b:85:5d:b1:42:1f:bd:65:
         03:bb:61:5c:3b:77:c9:a3:95:30:4a:6c:22:30:07:e3:d8:1d:
         97:a0:fe:53:27:f2:a5:f7:89:6d:60:ca:2a:22:75:ce:f0:b1:
         bd:b9:c8:ca:d6:ad:ef:fd:41:0a:dc:57:5e:ce:34:18:92:ce:
         d3:e2:58:42:e2:9b:31:b0:b3:4e:5f:e9:34:09:81:08:96:fc:
         91:bd:21:3a:85:01:70:59:41:4f:e7:c7:c0:16:5a:69:93:4b:
         80:3f:26:11:86:22:9f:eb:04:92:b9:bc:d3:bb:8c:93:d8:e3:
         72:ca:fa:0f:c4:17:9f:49:fe:04:a5:64:1e:90:af:31:66:d3:
         d1:94:33:10:68:72:04:40:68:62:9f:6e:9b:bd:3e:13:2a:0f:
         2d:89:06:e6:ed:32:67:8c:2b:a2:4a:ab:ff:8a:18:a5:1b:a1:
         84:6b:bc:32:63:21:19:57:e5:7a:73:df:c1:87:d2:93:bb:49:
         c3:26:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----