This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
File:                     4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft (raw, json)
Hash identifier:          8JQi07yzZrQS0dhHQWRTlIhzhJJGFohsFSbdpZz72Ag=
Subject key identifier:   29:D9:78:26:BA:84:EC:FC:24:FF:39:80:A2:96:3F:3C:B8:86:EC:C2
Authority key identifier: 4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48
Certificate issuer:       /CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
Certificate serial:       6235654127C120C0506BE839E49787EC4AEA37B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
Manifest number:          3C
Signing time:             Sat 20 Dec 2025 01:20:39 +0000
Manifest this update:     Sat 20 Dec 2025 01:15:39 +0000
Manifest next update:     Sun 21 Dec 2025 03:17:39 +0000
Files and hashes:         1: 4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl (hash: HRUO8ynY7Su63xBByzuoQ0KKCw9M7jRoVPT6/yY+Lqc=)
                          2: 323830313a38313a3135303a3a2f34382d3438203d3e20323734353234.roa (hash: Hm8EMh3DzK2NLsiIRm/hU3HlDg4zv4H+2EaEfFd2hfo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl
                          rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:35:65:41:27:c1:20:c0:50:6b:e8:39:e4:97:87:ec:4a:ea:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
        Validity
            Not Before: Dec 20 01:15:39 2025 GMT
            Not After : Dec 21 03:17:39 2025 GMT
        Subject: CN=29D97826BA84ECFC24FF3980A2963F3CB886ECC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:15:ef:f9:3c:82:de:66:d7:5f:05:71:d2:
                    a2:8f:46:ca:33:11:bf:90:5d:2e:ff:b5:d6:16:1b:
                    4e:0d:72:00:b8:e6:97:bf:d5:9e:59:6c:dd:92:19:
                    e2:89:33:38:b0:ba:81:43:f4:15:de:3a:9b:3b:5e:
                    54:fa:8c:f6:f5:c2:46:92:06:48:28:74:98:07:cb:
                    dd:53:20:08:76:95:88:df:0c:81:b8:98:c7:17:85:
                    2a:90:fd:fa:77:c2:f8:ce:cf:b6:65:1d:c3:b0:d2:
                    6a:2c:8b:7f:9e:f9:f7:e2:70:3a:7f:98:9e:5d:a6:
                    55:68:ff:ea:2c:c5:0c:21:3b:0d:44:c1:46:70:64:
                    37:c3:f7:f1:b5:ae:0b:22:ae:c8:ab:b8:b9:73:6c:
                    ad:d0:cf:bf:10:c6:80:25:a7:21:a6:be:6d:42:7a:
                    0c:b3:7f:04:9e:9e:8b:50:51:2a:98:8b:c0:20:a2:
                    21:77:99:ad:16:de:4a:20:d2:a5:7f:89:ca:7f:57:
                    ab:db:ff:9b:d5:80:91:f7:96:c6:a0:28:6e:71:6f:
                    eb:b6:64:61:77:81:33:c7:8f:f1:f7:b2:e5:4c:86:
                    33:be:a5:1a:2a:6a:c8:91:de:ca:76:9e:0a:71:dd:
                    cb:d9:a7:58:02:ae:01:6b:7d:2b:ac:19:36:ba:f9:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:78:26:BA:84:EC:FC:24:FF:39:80:A2:96:3F:3C:B8:86:EC:C2
            X509v3 Authority Key Identifier:
                keyid:4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a6:c4:58:b2:d0:d0:b6:8e:5f:49:cc:63:86:d2:40:0f:d7:
         5e:7a:22:6b:1c:5f:ef:f1:99:46:70:4b:70:4f:41:96:7d:67:
         7a:dd:64:27:63:56:73:c6:7b:7e:cd:b4:ca:09:09:75:72:b5:
         93:b3:3b:ca:7b:15:28:a0:7d:e0:10:da:a8:92:ac:2b:60:17:
         1b:78:7f:17:b2:f2:6d:4f:13:03:c8:37:21:bf:4b:c6:ae:8f:
         d2:7c:0d:52:97:16:31:21:76:99:0e:0e:96:76:2c:a9:b2:04:
         16:03:a6:98:b6:e8:b8:f8:d7:b1:8a:b8:4b:f9:39:c1:27:6e:
         63:ef:44:b9:72:b6:39:d9:55:14:2a:c8:03:a9:df:6c:67:f2:
         78:a3:71:fb:46:c3:73:99:3f:a8:1a:0d:3f:d6:30:29:f1:33:
         55:56:30:72:14:43:82:80:a8:00:f1:83:67:6b:41:03:85:7c:
         cf:c2:e8:fa:24:02:71:d5:50:ee:68:79:98:e1:f5:e5:8e:7a:
         22:2b:78:d8:40:89:1f:cd:f6:6a:eb:e1:6a:c2:cd:b5:8a:b5:
         a6:4c:a2:c3:66:f6:6e:fa:e5:2a:8b:6e:51:b9:3c:3b:73:84:
         2c:d8:7b:43:b5:0d:f7:b9:d0:8b:97:76:4e:17:00:c6:13:59:
         bb:69:10:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYjVlQSfBIMBQa+g55JeH7ErqN7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFCNUEzQkQ5RkRCNzUxQTNEODIyNzE5RDU4MzlDQUE5
OTRFQTk0ODAeFw0yNTEyMjAwMTE1MzlaFw0yNTEyMjEwMzE3MzlaMDMxMTAvBgNV
BAMTKDI5RDk3ODI2QkE4NEVDRkMyNEZGMzk4MEEyOTYzRjNDQjg4NkVDQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlBXv+TyC3mbXXwVx0qKPRsoz
Eb+QXS7/tdYWG04NcgC45pe/1Z5ZbN2SGeKJMziwuoFD9BXeOps7XlT6jPb1wkaS
BkgodJgHy91TIAh2lYjfDIG4mMcXhSqQ/fp3wvjOz7ZlHcOw0mosi3+e+fficDp/
mJ5dplVo/+osxQwhOw1EwUZwZDfD9/G1rgsirsiruLlzbK3Qz78QxoAlpyGmvm1C
egyzfwSenotQUSqYi8AgoiF3ma0W3kog0qV/icp/V6vb/5vVgJH3lsagKG5xb+u2
ZGF3gTPHj/H3suVMhjO+pRoqasiR3sp2ngpx3cvZp1gCrgFrfSusGTa6+aobAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKdl4JrqE7Pwk/zmAopY/PLiG7MIwHwYDVR0j
BBgwFoAUSrWjvZ/bdRo9gicZ1YOcqplOqUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tQS0RVWkpyVmtNNUs1VURtSHFhb0RTbXVhVTFSUUViQ2RCWTk0Vkw2
N1ovMC80QUI1QTNCRDlGREI3NTFBM0Q4MjI3MTlENTgzOUNBQTk5NEVBOTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBQjVBM0JEOUZEQjc1MUEz
RDgyMjcxOUQ1ODM5Q0FBOTk0RUE5NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0tQS0RVWkpyVmtNNUs1VURtSHFhb0RTbXVhVTFSUUViQ2RCWTk0Vkw2N1ovMC80
QUI1QTNCRDlGREI3NTFBM0Q4MjI3MTlENTgzOUNBQTk5NEVBOTQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWabEWLLQ0LaOX0nMY4bSQA/XXnoiaxxf7/GZRnBLcE9Bln1net1kJ2NWc8Z7
fs20ygkJdXK1k7M7ynsVKKB94BDaqJKsK2AXG3h/F7LybU8TA8g3Ib9Lxq6P0nwN
UpcWMSF2mQ4OlnYsqbIEFgOmmLbouPjXsYq4S/k5wSduY+9EuXK2OdlVFCrIA6nf
bGfyeKNx+0bDc5k/qBoNP9YwKfEzVVYwchRDgoCoAPGDZ2tBA4V8z8Lo+iQCcdVQ
7mh5mOH15Y56Iit42ECJH832auvhasLNtYq1pkyiw2b2bvrlKotuUbk8O3OELNh7
Q7UN97nQi5d2ThcAxhNZu2kQWg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:01:28 2025 by rpki-client