This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft
File:                     4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json)
Hash identifier:          ZjPrkWXC9FvsgGYO2G21kToRzEyFa+794Ng7JEc3eSQ=
Subject key identifier:   9E:92:E2:D9:09:4E:8C:F7:94:26:D7:E9:9F:EE:02:8B:26:E3:EA:19
Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42
Certificate issuer:       /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
Certificate serial:       0B1A7C0B867010BBABA54F52C7802D39B5E27E0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft
Manifest number:          0344
Signing time:             Sun 21 Dec 2025 08:00:01 +0000
Manifest this update:     Sun 21 Dec 2025 07:55:01 +0000
Manifest next update:     Mon 22 Dec 2025 09:56:01 +0000
Files and hashes:         1: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: xsPWu5Oyc8zYvFSpUQl6AyPy98auaRdocgkmpbAT+rI=)
                          2: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: 7k+z6bK6slQNnxYkwksFm0iquc84Caxgdubw0juqlok=)
                          3: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: 0afFfPJistXXEZlrXlXusI1hM5eNaq3t1i5SVTRNels=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl
                          rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:7c:0b:86:70:10:bb:ab:a5:4f:52:c7:80:2d:39:b5:e2:7e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
        Validity
            Not Before: Dec 21 07:55:01 2025 GMT
            Not After : Dec 22 09:56:01 2025 GMT
        Subject: CN=9E92E2D9094E8CF79426D7E99FEE028B26E3EA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:26:2d:38:9e:bf:c2:40:f9:d6:85:98:36:
                    b9:4b:01:bc:f4:b7:97:9f:46:4e:15:0e:10:84:13:
                    a8:d4:3d:b6:5f:6e:89:4d:db:ff:7d:ba:55:47:c1:
                    61:1f:b6:91:3c:2a:23:db:e5:64:de:d8:93:f7:d4:
                    dd:fb:50:a8:90:8e:05:79:68:cf:3d:a5:61:87:13:
                    2c:1f:37:3a:3c:a5:e6:b4:e7:bf:ca:d1:6e:27:7e:
                    91:5e:d0:dc:dc:dd:df:c4:29:d1:b5:5a:d1:d8:81:
                    f6:9b:30:72:d9:f8:5a:59:42:58:ab:f8:10:b1:5f:
                    3f:13:2e:90:eb:f3:6f:4a:38:e5:47:25:da:66:28:
                    a6:ad:c5:38:f7:79:b2:f1:0b:63:9e:11:7e:46:eb:
                    1a:31:22:9e:80:17:e4:20:7a:b9:ac:37:a9:35:b4:
                    ee:24:70:4f:a2:a6:f7:ed:6b:82:12:6a:f5:4b:25:
                    06:b3:a4:55:b4:85:75:28:48:1e:e5:e6:7e:11:a1:
                    5d:0b:69:d3:d5:0b:c7:4e:1a:77:35:61:b8:b2:61:
                    85:28:9f:75:59:14:50:0e:5c:3c:43:95:e3:a7:a5:
                    47:3c:e1:08:99:18:2a:7d:9f:22:ba:a4:70:23:e4:
                    58:d4:df:01:87:21:8a:e7:c4:e5:56:cb:8e:72:13:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:92:E2:D9:09:4E:8C:F7:94:26:D7:E9:9F:EE:02:8B:26:E3:EA:19
            X509v3 Authority Key Identifier:
                keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:73:d2:94:00:43:ea:ba:65:7d:d5:1a:b2:0f:97:7a:db:
         71:40:01:21:af:2b:db:4e:8c:fc:31:87:97:67:0b:94:cf:df:
         da:63:cc:68:86:25:b5:d5:20:8b:95:33:1e:17:39:8e:f1:18:
         8a:df:31:9a:31:9a:f6:e6:44:5c:46:4f:17:7d:7f:ff:9b:33:
         fe:70:9b:81:08:fc:e2:06:fe:6c:d0:d6:52:37:14:f2:47:45:
         4f:66:79:b0:d2:18:d7:8f:d4:bd:9c:88:bc:37:b3:c0:0f:40:
         96:c4:bc:d0:e9:fb:2e:d5:b2:8c:b7:a4:51:89:99:23:4a:46:
         1d:af:aa:9e:3c:a7:2b:92:38:1f:e1:18:08:4c:d5:64:01:a8:
         b1:f2:61:da:c8:f1:df:8a:2a:37:29:d1:35:bb:f9:5d:4d:cc:
         80:f3:72:d7:a1:3b:8f:f1:3a:4d:7b:2a:fe:61:d3:cb:1f:36:
         d6:18:93:c9:cd:d1:a8:b7:bd:b9:32:1f:64:79:a5:01:2d:1d:
         2e:74:4c:9a:c3:14:90:fd:a0:da:c9:45:8d:92:16:a7:b5:be:
         29:36:ab:50:37:ea:ba:b9:0c:e3:97:d0:42:65:51:db:ab:8f:
         d9:61:20:81:77:34:bf:58:84:8f:b5:56:4d:b7:2e:56:31:f0:
         e8:9d:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:20:22 2025 by rpki-client