This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
File:                     30749C5E57A887A5B2B8370496E94AA79DC8B198.mft (raw, json)
Hash identifier:          P65GRMLxigLqWg+7Q/kYleqn+8g2iQzlUwUgOPkFHlY=
Subject key identifier:   4C:92:20:1F:EC:1A:68:9B:CE:6A:14:D1:57:DB:D8:2E:70:6C:56:AF
Authority key identifier: 30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98
Certificate issuer:       /CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
Certificate serial:       2D1B4076FC70486A3587DF925C3216A9463549AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
Manifest number:          01AC
Signing time:             Sat 20 Dec 2025 16:13:58 +0000
Manifest this update:     Sat 20 Dec 2025 16:08:58 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:58 +0000
Files and hashes:         1: 323830343a336438343a3a2f33322d313238203d3e20323636353336.roa (hash: 3+Vcp9+KbSc+CbeDpwEMUPExHyjcdFyKoqQ2cpwGm24=)
                          2: 30749C5E57A887A5B2B8370496E94AA79DC8B198.crl (hash: mdEFovJsyujgyQYtt8RPFgo0/qIeortQvkhfkSfCspY=)
                          3: 34352e36352e3138342e302f32322d3332203d3e20323636353336.roa (hash: RHm0PcArhnbmQYw/ae2IQd1YtzX9Gi4ngB+4UtRSuOk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl
                          rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1b:40:76:fc:70:48:6a:35:87:df:92:5c:32:16:a9:46:35:49:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
        Validity
            Not Before: Dec 20 16:08:58 2025 GMT
            Not After : Dec 21 18:01:58 2025 GMT
        Subject: CN=4C92201FEC1A689BCE6A14D157DBD82E706C56AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:97:39:b7:b0:fd:a8:75:b9:3a:30:8b:6c:
                    56:40:d8:9a:a1:b2:c4:82:da:35:ec:ab:c1:69:65:
                    b8:e2:5b:8e:89:23:21:94:d4:db:ff:37:3a:0a:a2:
                    7a:ae:75:e7:67:b7:22:f6:08:ed:9a:10:6e:9f:bc:
                    f8:14:43:aa:85:c1:b9:ea:4b:83:f9:c8:38:5d:66:
                    6a:d2:cf:f8:0a:85:51:84:63:f5:ab:5a:7f:9b:50:
                    7a:a3:34:e7:92:ee:bf:c8:dd:68:8f:9b:37:a6:a6:
                    39:d6:f4:e6:ef:a7:51:fb:52:b7:41:d0:cf:58:7f:
                    51:09:43:ad:84:4a:f3:70:0a:e5:a7:a3:93:0c:6d:
                    26:88:f1:7c:6d:32:d1:0f:d5:e1:c4:30:9b:6e:7e:
                    d8:28:56:32:fd:56:b6:93:93:34:18:68:d0:25:db:
                    c5:6e:53:8a:07:15:27:8c:d2:48:63:a1:12:fe:95:
                    3e:c1:6e:dc:e2:a1:2e:6a:cc:d5:07:10:60:21:47:
                    b2:fc:4e:ae:ae:1c:34:fe:91:39:08:ed:d8:61:a8:
                    7d:73:a2:a1:a2:ff:08:dd:80:a5:c5:1b:03:fd:f3:
                    31:b3:54:86:73:2d:4c:a2:85:86:4b:c6:1d:91:6f:
                    9a:ec:56:47:2f:24:64:7f:4b:7c:99:d9:bf:c2:4c:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:20:1F:EC:1A:68:9B:CE:6A:14:D1:57:DB:D8:2E:70:6C:56:AF
            X509v3 Authority Key Identifier:
                keyid:30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:d0:a1:21:c6:84:9a:e2:3b:9c:28:e0:be:c5:66:f4:8e:
         9e:75:77:b3:cf:22:c8:c3:01:22:a5:05:dc:62:82:65:a6:97:
         89:84:f5:a4:8a:c7:6d:d5:ea:c7:a9:db:e4:2a:91:2f:a3:f8:
         4a:49:27:06:2c:7f:13:6c:bd:d8:04:15:68:b6:13:2e:12:c1:
         83:e4:11:eb:c2:84:77:db:e9:d5:4d:cc:64:9f:e7:91:76:f2:
         6c:42:55:c1:3e:75:5f:fc:cc:40:43:2a:38:49:1f:93:c1:b8:
         9d:8f:e3:97:4b:c7:58:89:70:47:8f:1b:86:0c:1d:81:7a:6b:
         0a:c5:ac:9d:45:e6:37:f9:ee:e5:f3:66:93:18:f2:04:b0:de:
         22:a5:13:e1:58:6b:a1:23:41:94:f5:94:04:4d:b7:37:cf:c2:
         9f:d7:7a:2d:40:12:3f:e8:ff:29:a0:7e:b4:32:d2:ec:76:dc:
         3b:2a:30:fb:ac:c2:1e:0e:14:b6:96:ad:81:ad:1a:95:b6:b3:
         af:82:fb:06:8a:28:2b:38:b5:33:e9:47:5d:2f:b8:39:65:7e:
         39:27:91:40:54:d4:be:51:6a:4c:47:a9:8b:b0:88:b6:12:11:
         7b:7f:5e:b7:e6:0c:24:20:cf:b3:56:61:93:ab:4d:3d:9a:84:
         d5:05:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:48:26 2025 by rpki-client