This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
File:                     C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json)
Hash identifier:          FyMGYYdyX0w4C0nSeY2RKtdWY77rdpQGQv47b77a8pg=
Subject key identifier:   37:DA:A2:99:50:30:0F:6B:D2:C3:9C:9D:E2:99:13:8C:A5:A7:B1:9D
Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10
Certificate issuer:       /CN=C952C93A676BA611AEC114DD4983F2B03168FE10
Certificate serial:       3D2AC91F2E465332B48DD3B9446B417A98BDE217
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
Manifest number:          C6
Signing time:             Wed 24 Dec 2025 12:02:41 +0000
Manifest this update:     Wed 24 Dec 2025 11:57:41 +0000
Manifest next update:     Thu 25 Dec 2025 14:18:41 +0000
Files and hashes:         1: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: CinqX1j3jyRc5maom4CkOjawfLigGHk+YxdzO16vL9s=)
                          2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: FX7CxEwMe77oGVOke0pJc/KWM5ZKvh54JurYKVnN8TM=)
                          3: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: PvP6qfjDSD7z+wzdZO9P8PgrLMyV3HJoTmMfTYb0qm0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl
                          rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 14:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2a:c9:1f:2e:46:53:32:b4:8d:d3:b9:44:6b:41:7a:98:bd:e2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10
        Validity
            Not Before: Dec 24 11:57:41 2025 GMT
            Not After : Dec 25 14:18:41 2025 GMT
        Subject: CN=37DAA29950300F6BD2C39C9DE299138CA5A7B19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:9e:90:15:c3:3b:95:0d:c1:f7:34:54:4a:
                    6a:ae:b2:a5:f7:1a:fe:5c:9e:f3:49:d1:09:e2:1b:
                    71:fa:8b:30:ef:03:d9:a7:d5:6f:6d:10:76:14:40:
                    99:08:95:69:38:02:2f:8b:84:b6:9b:e7:61:bd:78:
                    3e:6d:77:dd:f3:a6:9c:a5:3e:6b:69:24:7d:3f:44:
                    05:07:2b:9d:26:b3:dd:90:c8:d5:82:bd:fe:66:2e:
                    75:62:23:9a:9e:23:f1:2c:c0:39:66:68:0d:2b:d3:
                    f7:96:d8:7b:8d:c8:94:99:ac:db:65:41:15:61:f6:
                    f7:8a:33:cb:14:ba:f8:cc:fc:0c:e6:68:22:13:17:
                    d6:bf:03:58:a2:62:6d:94:34:2a:69:79:5b:7d:49:
                    e2:3a:78:83:72:14:3a:a1:9a:71:3a:0c:fe:fa:f7:
                    60:96:34:b1:37:6b:54:de:36:91:3c:3a:af:63:55:
                    4c:8f:8e:f3:3d:1e:50:30:3d:8e:22:ee:b2:13:03:
                    e0:07:6e:88:82:41:83:e8:e6:7b:8e:ed:77:b5:ae:
                    6f:f8:ce:c3:b2:cd:b6:dd:3d:77:e0:03:9e:81:aa:
                    57:aa:82:dd:f1:fa:97:f7:9b:1b:9b:b1:79:4a:f5:
                    27:4d:48:66:d2:26:85:c5:1e:c0:4d:53:ab:6d:7f:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:A2:99:50:30:0F:6B:D2:C3:9C:9D:E2:99:13:8C:A5:A7:B1:9D
            X509v3 Authority Key Identifier:
                keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:7b:e5:41:77:ef:59:a5:4d:bb:dd:db:c4:cf:07:e2:4d:
         ef:c5:5b:c2:c1:7e:49:aa:11:2a:7c:48:58:65:0a:2c:7a:33:
         5b:2d:1f:e9:0b:95:cb:fd:94:b3:7c:c0:95:77:e9:be:ee:53:
         8d:6b:8f:41:ca:52:4e:a0:1a:73:d4:99:e4:f6:b2:0b:3a:77:
         44:c3:7e:70:65:ba:05:52:1f:c2:a6:b1:3d:46:46:57:72:88:
         ea:52:6b:dd:f7:0e:77:33:12:60:05:92:60:07:03:96:e1:80:
         bf:07:73:a9:05:28:18:c2:01:f4:01:eb:cd:62:ba:dc:9d:03:
         2c:2a:96:2a:30:0e:7f:98:4a:e6:a2:67:cb:98:6c:4a:b5:83:
         82:06:2a:57:be:d1:8c:cf:13:2a:4d:72:e4:53:3f:13:37:48:
         ef:d9:39:76:50:65:44:0e:a6:65:81:a4:97:d6:db:00:72:92:
         27:f2:58:6b:f9:91:bd:2b:52:ce:4c:04:e2:74:2f:8d:7c:9a:
         e6:24:64:14:fe:d6:02:2c:e9:c8:cd:7e:cf:23:e1:6c:af:45:
         54:00:56:f5:47:fd:1a:15:b1:6a:d4:bf:2e:2e:f9:87:94:6c:
         5f:47:16:23:44:9b:1d:29:41:84:0d:8b:1d:67:43:71:e2:96:
         59:68:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:04:49 2025 by rpki-client