This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
File:                     D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft (raw, json)
Hash identifier:          GpnkF0jokX7xtMuRHRKOJyWkS3XA6UCUjN4HnHluDdI=
Subject key identifier:   97:B4:19:D0:1B:68:52:98:0B:CC:51:97:15:3A:C5:10:8F:A0:72:11
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Certificate issuer:       /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial:       45418F5E6A48EE582A9953C93A231C54CC99CB57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
Manifest number:          012D
Signing time:             Sat 20 Dec 2025 10:13:27 +0000
Manifest this update:     Sat 20 Dec 2025 10:08:27 +0000
Manifest next update:     Sun 21 Dec 2025 11:43:27 +0000
Files and hashes:         1: 323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (hash: vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=)
                          2: D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl (hash: xRtJa8pK8c9A81+kvWPPLx+9FdmJoxvqk9u77he47nA=)
                          3: 3230302e33362e3231322e302f32322d3234203d3e20323731333833.roa (hash: uYfQM6YKSgvOOW9mte5IfDz0qPNh0BQj/v17JCn1X+c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:41:8f:5e:6a:48:ee:58:2a:99:53:c9:3a:23:1c:54:cc:99:cb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
        Validity
            Not Before: Dec 20 10:08:27 2025 GMT
            Not After : Dec 21 11:43:27 2025 GMT
        Subject: CN=97B419D01B6852980BCC5197153AC5108FA07211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:81:8e:2b:3f:ef:59:88:30:81:65:d8:18:
                    6e:ff:0b:c1:54:1e:12:a5:c4:d0:55:95:2f:9d:53:
                    32:2e:8f:0d:8b:1e:2d:5a:85:1c:00:2b:8e:5f:63:
                    88:98:8f:93:12:42:40:f6:5a:65:08:82:42:47:44:
                    54:8f:93:9f:71:91:00:67:dc:1b:e2:d5:10:37:78:
                    9e:c2:80:a4:f2:62:04:b2:f7:01:57:a5:42:79:32:
                    06:3b:3b:bb:16:7a:13:f5:db:e3:9e:2a:9d:4a:a5:
                    eb:e8:06:70:c1:29:63:68:dd:63:ad:40:ae:79:e8:
                    ab:3d:2e:c8:99:0e:7f:5a:75:a5:76:03:42:b2:38:
                    9b:f6:63:62:9d:e5:b6:d8:99:13:bc:94:0b:f4:2b:
                    7d:83:d2:45:b0:ce:8e:b9:d0:6b:af:b8:92:37:d5:
                    69:a2:39:64:20:02:0c:99:02:1d:42:82:04:91:2e:
                    bd:6b:c9:33:87:af:4d:b0:ff:a4:c1:6f:d6:4b:9c:
                    cf:6d:cd:63:66:31:cd:da:d9:0e:a0:5b:e5:ab:fe:
                    2b:cf:96:c7:d2:f3:e2:17:6f:6f:e5:e3:d0:eb:5d:
                    57:69:14:79:eb:a2:3f:88:1a:9b:ad:7e:58:86:3f:
                    b1:b1:31:0b:52:43:bd:5b:c1:8f:33:c2:2f:c0:0d:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:19:D0:1B:68:52:98:0B:CC:51:97:15:3A:C5:10:8F:A0:72:11
            X509v3 Authority Key Identifier:
                keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e2:6c:a0:ba:32:cf:1e:27:cb:71:d0:d3:a1:87:4d:d6:b4:
         6c:60:9d:9e:0d:0d:c5:55:a6:f8:40:a5:fd:e0:58:79:69:73:
         79:54:0f:59:60:e9:92:ff:fd:4e:cb:81:35:5f:6f:69:83:01:
         1c:58:0b:a9:9d:f5:03:31:4e:a5:31:f9:02:e1:1b:34:30:f9:
         da:08:7a:f3:fc:fe:bf:01:b7:04:21:10:21:b6:06:54:87:23:
         1f:26:63:ae:61:9c:c0:e1:5a:21:87:8c:5a:02:23:07:f8:29:
         49:59:50:a4:4b:2e:be:f5:4b:31:3f:e0:35:89:e1:87:8f:fc:
         a2:bc:22:8e:32:58:e7:1d:2f:7f:a2:b8:e3:59:51:5c:35:85:
         0a:19:5c:24:38:41:47:32:b9:d6:bd:49:5f:9b:51:59:34:81:
         87:b3:8a:fc:d8:ed:a2:0c:0a:26:91:c8:15:c6:88:f5:cd:d4:
         3e:70:2d:b7:af:15:a9:85:77:b1:df:f2:0c:e3:f3:2a:ba:c5:
         c8:57:5f:c3:40:c2:54:4f:09:7f:99:10:e6:8e:ef:35:7a:37:
         af:71:36:fa:d0:5f:f2:ab:66:e1:bd:75:79:57:a2:e4:58:40:
         04:55:e9:e7:70:35:80:9a:40:c5:2b:50:76:8c:1a:cc:b6:2b:
         aa:aa:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:00:11 2025 by rpki-client