This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft
File:                     F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft (raw, json)
Hash identifier:          bOgSY11LYuhk/a0qprHdl4y4KpWNXiC9MslrIXieDTw=
Subject key identifier:   D5:48:11:CC:79:6E:C2:DA:C1:96:1F:DB:47:82:71:1B:96:63:F7:45
Authority key identifier: F1:03:2A:8A:64:5D:69:24:D6:71:2A:3A:9A:17:E2:FA:3F:B1:F2:9F
Certificate issuer:       /CN=F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F
Certificate serial:       1DCEF813549DE143BB20782E10C9B9FE009094D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft
Manifest number:          01CC
Signing time:             Sun 28 Sep 2025 21:56:11 +0000
Manifest this update:     Sun 28 Sep 2025 21:51:11 +0000
Manifest next update:     Tue 30 Sep 2025 00:12:11 +0000
Files and hashes:         1: F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.crl (hash: VPnJzACTCXGZHiB2fbTXwY7Utsrz2M6vYsVcO3r/Yn8=)
                          2: 323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (hash: KSeK4lhYmOTdbJQOlr7X8q333VSMjL2Wv4gSWrJVW14=)
                          3: 323830343a383337633a3a2f33322d3332203d3e20323732323031.roa (hash: QksT/OsKq1rSmDwq86szP+CffD4iUMl3k2/XiRivlJ8=)
                          4: 3137392e34382e3133392e302f32342d3234203d3e20323732323031.roa (hash: YoENuY/MT91H/XYvPyN8iSbHEQzqu3e1l+HpJyH9TFs=)
                          5: 323830343a383337633a383030303a3a2f33332d3333203d3e20323732323031.roa (hash: qjfT/KEO7UFfq2OMlgCZnXzlqOrA9JTzFiRXHfoLtys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ce:f8:13:54:9d:e1:43:bb:20:78:2e:10:c9:b9:fe:00:90:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F
        Validity
            Not Before: Sep 28 21:51:11 2025 GMT
            Not After : Sep 30 00:12:11 2025 GMT
        Subject: CN=D54811CC796EC2DAC1961FDB4782711B9663F745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:00:09:d2:56:89:55:ed:e5:2e:16:80:75:
                    a8:ab:a4:32:6e:68:23:0c:ad:a8:74:cb:65:6e:ac:
                    cd:75:8c:c4:1a:8c:d5:8b:90:cd:97:9f:fe:0e:5c:
                    72:46:9d:5d:99:de:34:24:87:13:9d:3d:cd:44:8d:
                    a2:d1:ba:45:d8:42:bd:b0:9e:9e:f9:3b:61:fc:ef:
                    cd:ab:f6:cc:d6:c3:12:a9:45:70:a7:98:46:9d:90:
                    ef:2b:65:67:7f:d2:78:cf:fa:bb:6d:a7:e3:f1:85:
                    fd:cb:2b:57:11:20:97:1e:7a:80:a1:91:a6:df:c8:
                    6a:2e:81:d5:82:74:8d:57:3a:25:7f:45:97:a0:8b:
                    63:13:1c:7e:b2:de:2e:6a:9f:0d:f8:04:85:45:26:
                    41:a3:61:e1:a8:16:14:54:6b:52:18:55:5a:45:bb:
                    58:d8:53:b3:19:2b:91:33:ad:f7:0f:91:dc:3a:db:
                    97:27:13:e8:d2:bb:7b:1f:12:30:02:62:16:9d:4d:
                    3b:52:ee:69:d7:55:35:e6:19:e5:44:6a:ca:26:4e:
                    7d:d6:40:41:4e:7d:f6:76:ba:75:f9:28:61:ed:9e:
                    a5:07:3c:cf:4d:5c:c0:67:3b:b0:b9:28:bb:fa:e6:
                    5e:84:4f:d5:28:36:11:b4:c1:17:59:8e:9a:32:a6:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:48:11:CC:79:6E:C2:DA:C1:96:1F:DB:47:82:71:1B:96:63:F7:45
            X509v3 Authority Key Identifier:
                keyid:F1:03:2A:8A:64:5D:69:24:D6:71:2A:3A:9A:17:E2:FA:3F:B1:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:9c:3a:55:35:fc:5b:b3:68:8f:07:c3:c1:bf:46:4c:cb:8c:
         3b:24:9e:17:c4:23:91:f9:81:18:e1:1b:67:91:a9:d1:f8:77:
         a4:78:96:11:f3:be:04:1a:04:39:1b:e4:df:a0:55:fe:ef:e3:
         45:ab:1f:ee:bc:44:a3:04:8e:bd:0c:3a:8d:c4:6b:b2:12:b0:
         08:d4:da:b8:7e:a8:e1:3c:55:ea:e9:46:ec:51:e0:76:3a:ba:
         7b:f0:6c:b0:7f:22:a6:eb:ca:86:43:9a:7f:6f:f1:ee:8c:39:
         00:41:f7:65:09:a1:76:5f:93:aa:f0:23:58:c5:b8:75:fb:be:
         f0:d4:97:bb:7d:12:a8:c0:fe:5f:b4:08:d9:f5:a7:88:50:3d:
         9d:ec:3a:3d:72:bc:b4:b9:76:34:91:47:5e:16:5b:3e:28:5d:
         4a:9c:ff:8d:6c:62:96:c0:06:59:27:8c:ef:e2:1b:0d:93:14:
         74:84:96:db:d2:94:84:4f:79:6f:4a:b0:a1:ee:43:29:b2:2a:
         4d:d9:b7:b0:24:c9:1c:f3:9f:be:fb:1b:11:20:5a:6f:95:d8:
         70:ff:be:0c:8c:e7:b2:33:7a:91:a9:b5:5c:a8:f7:3d:d5:9b:
         37:ec:ea:75:6a:c6:05:a1:27:85:36:8e:c7:2e:b6:dc:6f:23:
         69:f7:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:18:05 2025 by rpki-client