This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft
File:                     0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft (raw, json)
Hash identifier:          NyW366Xw0azmebU5YQKLMZodKooBgqgsYD5LxBEY7PA=
Subject key identifier:   44:AF:F0:63:59:6B:DB:44:91:F7:F2:5E:E1:60:B3:57:79:7A:7F:B4
Authority key identifier: 0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0
Certificate issuer:       /CN=0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0
Certificate serial:       1887949CDB4E499CDEF2954AA1E962ED68A24032
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft
Manifest number:          0342
Signing time:             Tue 23 Dec 2025 04:38:57 +0000
Manifest this update:     Tue 23 Dec 2025 04:33:57 +0000
Manifest next update:     Wed 24 Dec 2025 05:55:57 +0000
Files and hashes:         1: 323830313a38303a316266303a3a2f34382d3438203d3e203532363038.roa (hash: tLpyIYhair/2kGsbwiXQ4+44Mw3Cp2QvCw+qdfv3Dds=)
                          2: 0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.crl (hash: ZVorR2Ma3vfVJKmpi3NxC1aog4iJwBhSsRu+pIXGNCM=)
                          3: 3137372e38362e3134332e302f32342d3234203d3e203532363038.roa (hash: jDuM1NQLgppgGzZQRvBtmve10jev6ljQMs+AwKToPko=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.crl
                          rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 05:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:87:94:9c:db:4e:49:9c:de:f2:95:4a:a1:e9:62:ed:68:a2:40:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0
        Validity
            Not Before: Dec 23 04:33:57 2025 GMT
            Not After : Dec 24 05:55:57 2025 GMT
        Subject: CN=44AFF063596BDB4491F7F25EE160B357797A7FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:23:1d:50:ef:15:d7:b0:7d:d9:0e:7e:93:
                    1d:dd:e2:c8:ad:0a:a5:32:17:66:0f:8b:aa:2d:37:
                    79:06:d8:36:1e:bb:09:a8:85:24:af:f6:e3:b2:eb:
                    d5:09:a2:17:8b:6f:15:1a:56:c4:f2:eb:83:93:11:
                    95:47:2c:c2:8b:48:c3:f9:6c:1b:db:92:d4:48:18:
                    95:c9:37:72:93:52:3e:05:2b:ef:e1:0c:a2:b5:10:
                    4a:d0:d8:23:4a:db:6f:25:92:94:ec:02:c5:32:41:
                    2c:b3:d9:8b:3c:ff:88:8b:34:e6:3a:7a:6d:be:f7:
                    21:81:ea:e7:54:c4:b6:7f:e3:f3:c7:38:b5:36:66:
                    1e:de:7f:32:27:a6:95:c7:db:86:42:6f:2a:6f:4b:
                    4d:25:2a:18:a6:db:40:f8:fa:fa:ab:53:6d:5e:66:
                    31:13:90:fb:d6:31:07:1e:44:24:8b:16:1f:db:6d:
                    ae:76:c7:f2:63:1b:fd:b6:0e:fe:f2:7f:7e:64:08:
                    07:af:a3:4b:f3:b8:1d:bd:7d:78:2e:fd:72:0a:27:
                    d8:ac:e1:8d:7f:da:d9:c6:19:3e:80:de:51:93:9a:
                    4d:f2:e6:88:e3:7b:6d:50:46:c0:db:5a:1d:2d:d9:
                    f8:8b:85:11:fd:88:57:46:7d:55:de:b6:27:e4:12:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AF:F0:63:59:6B:DB:44:91:F7:F2:5E:E1:60:B3:57:79:7A:7F:B4
            X509v3 Authority Key Identifier:
                keyid:0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:71:86:4f:c9:4c:43:b9:b1:89:63:26:d4:9c:22:c6:9d:
         28:f7:2a:7c:f4:64:1b:c0:1a:80:9d:30:08:60:55:d7:fc:1f:
         21:fa:8a:8e:f9:b5:5b:bc:99:c6:89:e6:10:a3:82:43:40:47:
         ae:5c:38:70:3d:9c:e1:7e:74:da:19:81:b4:99:cf:a7:52:2e:
         62:81:0d:64:de:c6:15:4c:31:fc:15:9c:55:0b:aa:b7:cc:0e:
         17:e0:42:4c:69:b4:51:cf:3f:2d:10:33:db:8e:66:37:7c:93:
         47:f0:e5:42:4b:38:c7:54:f9:ea:b6:eb:db:51:70:a1:6e:de:
         54:da:92:86:ef:7e:b5:9b:f4:39:66:95:ea:96:86:2b:51:93:
         99:fd:6a:b5:88:01:c5:ef:30:a6:cb:df:18:b6:83:75:6a:18:
         42:21:1c:dd:f0:98:f5:53:95:c3:bf:08:2c:0a:db:8c:36:b4:
         7b:db:53:ed:3f:ed:fc:e9:3b:54:0d:d1:28:af:7a:94:f9:3f:
         bc:33:e4:2a:e8:ab:1a:ff:28:4d:14:4f:a2:71:39:40:36:99:
         e9:41:10:cc:d3:5b:1e:d2:09:6d:20:fc:83:e3:fa:8e:11:38:
         c2:34:a3:ba:70:fb:ea:83:27:d1:de:b8:21:7e:37:af:14:c5:
         19:d6:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:42:48 2025 by rpki-client