This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft
File:                     AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft (raw, json)
Hash identifier:          yCqMVscblegoQ0sXYSLKoqgSuwlWvVajKXgD+zHRAz0=
Subject key identifier:   49:22:B5:36:FB:A8:4E:16:66:F1:33:36:D3:94:72:70:BC:0D:FE:FE
Authority key identifier: AE:A2:13:50:39:13:E7:D9:4B:B4:83:BA:7B:3A:98:B1:4D:40:C6:7D
Certificate issuer:       /CN=AEA213503913E7D94BB483BA7B3A98B14D40C67D
Certificate serial:       56987326B33DC48C177DE018C370A4B5AE31605A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft
Manifest number:          0153
Signing time:             Tue 11 Nov 2025 07:22:20 +0000
Manifest this update:     Tue 11 Nov 2025 07:17:20 +0000
Manifest next update:     Wed 12 Nov 2025 07:31:20 +0000
Files and hashes:         1: AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl (hash: cWMtok3zOJWUAXizlBhQYiS/NOWnnRjUJwqmVqdSU18=)
                          2: 323830343a363964343a3a2f33322d313238203d3e20323730323934.roa (hash: WS5Te1IwLS+Y6MtkZQws3QYNT2v+ie5YPdd9CMaVNW4=)
                          3: 3230312e37372e3130302e302f32322d3332203d3e20323730323934.roa (hash: 3T1d/cTDzxczVMlj8StrY+SRfiGkFzbw2CCqJrtn8DE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:98:73:26:b3:3d:c4:8c:17:7d:e0:18:c3:70:a4:b5:ae:31:60:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA213503913E7D94BB483BA7B3A98B14D40C67D
        Validity
            Not Before: Nov 11 07:17:20 2025 GMT
            Not After : Nov 12 07:31:20 2025 GMT
        Subject: CN=4922B536FBA84E1666F13336D3947270BC0DFEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:0a:31:21:f2:1b:c6:a4:19:a2:f8:a2:4f:
                    e3:d1:95:a1:f7:74:a1:f9:dd:e4:c3:c5:68:91:14:
                    2e:98:ee:6d:ff:96:a0:dd:1e:67:f9:d2:cc:cc:66:
                    44:a9:ce:17:ce:e9:6b:26:e8:e9:bb:62:ac:84:c4:
                    62:5a:b0:00:7f:35:c8:b0:ed:3d:ca:68:81:1f:96:
                    64:1e:0e:5e:21:14:1b:db:c7:49:63:96:be:7e:5c:
                    6f:55:65:76:85:c0:c5:9d:d8:e8:9a:44:c9:52:e9:
                    3f:a7:e5:e7:b0:45:60:54:f3:16:ec:d2:95:ca:9c:
                    10:af:07:8b:07:df:b4:fb:da:e3:dc:85:df:35:02:
                    2f:38:db:47:c8:15:bb:c9:fe:3b:19:af:c4:21:8d:
                    93:c5:b9:6f:ed:32:88:64:49:8c:c5:66:1d:ba:a3:
                    9e:49:21:83:1e:af:54:1a:27:98:e0:c1:3e:b3:52:
                    67:b2:dc:47:65:e1:76:0d:d0:02:76:a5:65:3e:f4:
                    23:36:7f:33:b2:5f:5d:a3:03:7c:d9:09:fd:32:71:
                    1f:8c:6a:c3:68:0f:da:15:cf:6e:e5:08:a2:f8:d5:
                    26:64:ec:36:cc:2d:47:c2:08:88:ba:1b:79:07:40:
                    92:9c:b0:0a:c1:5d:5f:c2:30:17:80:64:e8:97:9f:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:B5:36:FB:A8:4E:16:66:F1:33:36:D3:94:72:70:BC:0D:FE:FE
            X509v3 Authority Key Identifier:
                keyid:AE:A2:13:50:39:13:E7:D9:4B:B4:83:BA:7B:3A:98:B1:4D:40:C6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:4a:48:d4:13:9b:76:f6:c5:ea:c2:b4:03:5e:03:5d:aa:
         e4:b1:64:e0:a2:ee:ed:be:a6:03:7c:c2:01:47:36:16:68:22:
         e6:c7:8f:d4:ec:0d:9f:94:59:20:b7:ea:db:87:98:a8:72:3b:
         25:76:fa:c1:c7:1c:f4:7b:3b:ab:3c:be:bf:69:6e:f6:35:8b:
         37:d5:a5:00:29:b9:7d:61:7d:9f:52:2e:cb:36:48:db:a9:f8:
         08:6a:e6:fb:63:7a:ec:ad:40:59:1e:9a:b2:08:9e:87:cc:51:
         79:2b:97:d4:24:83:e8:72:dc:55:e8:9c:bf:e3:b8:2f:84:ce:
         13:21:f2:72:85:2a:b0:e7:ef:57:d5:2f:20:b8:12:2d:91:32:
         b1:51:54:4f:37:fd:d0:89:12:15:44:91:28:f3:f0:57:fd:f5:
         99:58:6f:d2:2a:7e:28:1b:ad:e4:4a:3f:da:41:dd:be:d0:b7:
         b8:36:96:df:ea:23:fa:50:58:38:70:b2:d2:d3:3a:e2:a3:bc:
         6e:24:9e:a6:c7:8a:82:09:38:25:32:3b:f8:8c:3b:9f:5a:21:
         b0:22:5a:da:05:ac:18:fa:03:af:25:d5:f8:18:b5:17:7b:32:
         7b:29:57:5d:72:42:05:42:73:57:c0:61:05:c4:89:04:24:bf:
         ea:45:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----