This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
File:                     BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft (raw, json)
Hash identifier:          EnVxT5Mj2AjgkqC3UFw+BHFfpzZ/AXinJBqfKVXjsg8=
Subject key identifier:   A4:1D:00:15:06:F5:1F:48:D5:47:A6:A1:2A:75:62:E1:66:56:6F:B7
Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Certificate issuer:       /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Certificate serial:       7E4EE289E8623A508CB0B68EEEE1EA9B106896BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
Manifest number:          29
Signing time:             Fri 19 Dec 2025 23:39:34 +0000
Manifest this update:     Fri 19 Dec 2025 23:34:34 +0000
Manifest next update:     Sat 20 Dec 2025 23:43:34 +0000
Files and hashes:         1: 323830343a33343a3a2f33322d3438203d3e203238333036.roa (hash: pLZaekLmmHpU0JO1ZeK8kS7V8K+kqvULpE4f37fCc6s=)
                          2: BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl (hash: bkTx8O3Scb9yltDZfmLGGeNbbPXV2SuoK07k7dPFx5o=)
                          3: 323830343a33343a3a2f33322d3336203d3e203238333036.roa (hash: UfgSXCcDRkH/UopnwWnfUdGag8dEKjdsp2XJJe4h4d8=)
                          4: 3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (hash: w1mDqY1V2KrVhYJfzYOhPE7wjeBij2IPBT/+At9fI10=)
                          5: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (hash: IiVDGigZQjG4RbD51dKXqDMZp37q1FdaC3TRMM/Srcg=)
                          6: 3138372e39342e38302e302f32302d3234203d3e203238333036.roa (hash: cUu4an7UcFYu/rekWMOi0nXgtcrJp/JBcXY8LjOSIOc=)
                          7: 3137372e3230302e39362e302f32302d3234203d3e203238333036.roa (hash: fCMfenxTExIWmso8nskVgu4zw5TV+Yy4ago17EhssFw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4e:e2:89:e8:62:3a:50:8c:b0:b6:8e:ee:e1:ea:9b:10:68:96:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
        Validity
            Not Before: Dec 19 23:34:34 2025 GMT
            Not After : Dec 20 23:43:34 2025 GMT
        Subject: CN=A41D001506F51F48D547A6A12A7562E166566FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:85:78:2b:cd:02:06:19:11:2b:38:0d:24:
                    88:7c:92:f0:c1:a7:d0:dc:75:09:9d:a3:08:2b:0b:
                    cd:fe:67:91:f8:d8:40:f8:2c:45:dc:81:63:62:44:
                    48:0f:ea:78:3a:23:7d:31:20:52:11:ce:48:88:45:
                    ac:de:62:d7:98:ce:5e:50:4e:64:05:27:2a:14:40:
                    35:8d:60:26:cd:84:e3:d4:ed:94:96:72:c5:c8:fd:
                    3f:d3:52:00:18:e3:e8:6a:9a:a3:78:fb:87:dd:0e:
                    f6:4c:90:ea:ab:e0:c2:75:09:10:35:71:53:33:b6:
                    7c:f0:9e:de:31:d6:e2:2c:13:2a:2d:5b:f2:d7:ce:
                    87:16:5f:54:51:ba:bc:8b:11:39:db:0f:72:39:be:
                    59:bf:9a:74:dc:c8:11:df:02:1a:50:74:93:8f:eb:
                    87:f8:e5:10:27:cc:f6:7b:31:3f:f9:4f:6c:ec:9d:
                    c5:56:70:53:b3:bb:8c:48:78:e9:3a:b9:fd:50:b5:
                    15:fd:b0:2e:eb:41:1c:c3:60:d0:c9:76:8d:08:e0:
                    13:c6:53:e2:dc:41:7a:80:19:1f:46:ea:16:0a:5e:
                    be:e8:71:b8:2d:eb:30:31:3e:c3:af:00:ce:a6:05:
                    e6:42:92:31:bc:e2:86:bb:89:f5:51:6b:16:48:71:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1D:00:15:06:F5:1F:48:D5:47:A6:A1:2A:75:62:E1:66:56:6F:B7
            X509v3 Authority Key Identifier:
                keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:10:6b:58:d4:11:a0:21:ad:97:ba:50:35:ec:1f:74:02:16:
         e6:05:8e:30:d9:7f:e0:55:51:74:5b:c4:9c:ef:e5:09:41:18:
         ac:71:76:cc:5c:ee:9a:80:7b:6b:3a:5a:fa:7e:36:05:d5:22:
         ae:16:e0:31:19:ff:cc:89:0c:c6:21:b9:9c:48:42:99:fe:f7:
         46:fd:97:2f:01:b8:1f:73:5d:ab:ad:4f:a2:29:c7:fd:2b:54:
         d2:4d:04:82:46:40:20:bc:af:c5:9a:a0:4a:2d:b1:10:86:d8:
         c8:43:bd:a7:e0:46:99:b0:39:ef:36:2a:31:1a:d6:6a:d3:1e:
         9a:7d:88:d3:bf:6f:08:43:a4:b8:0c:a2:ac:63:81:d8:13:c3:
         22:9b:6b:4d:af:81:6c:42:0d:c2:e1:a6:c9:ef:be:2b:98:b5:
         3f:96:a6:5d:66:dd:41:b1:46:64:73:ee:a5:ac:31:d5:5a:64:
         54:e8:80:06:b5:67:71:74:ed:bc:33:f6:9d:81:72:85:6b:ce:
         43:24:c5:8b:f9:aa:cb:0a:25:14:ec:30:c1:aa:24:59:c3:d0:
         1c:5c:76:72:9d:55:3f:af:86:ce:07:64:f2:ec:3e:1b:9d:79:
         2e:27:e0:2e:98:f2:c8:db:6e:35:dd:86:62:c5:6c:b1:cc:30:
         3e:86:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:44:07 2025 by rpki-client