This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
File:                     D8683D560654AD562BAFEB400C4C97282B65EB8D.mft (raw, json)
Hash identifier:          miJm/PCICvAS0wQEq15Gbr0aBsx/rwW3qG0FDvE1i+g=
Subject key identifier:   F5:6E:FE:95:26:46:B7:10:B8:D3:BA:47:55:C9:B1:51:CE:53:DB:37
Authority key identifier: D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D
Certificate issuer:       /CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
Certificate serial:       57E232F82B8EF0CFB58695D2D5F85BFABBFD51F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
Manifest number:          0345
Signing time:             Sat 20 Dec 2025 15:13:37 +0000
Manifest this update:     Sat 20 Dec 2025 15:08:37 +0000
Manifest next update:     Sun 21 Dec 2025 16:07:37 +0000
Files and hashes:         1: 323830343a376262383a3a2f33322d3438203d3e20323731343530.roa (hash: y4KnppT1mGj4RW0OtPChkXMD7Bd2MZRk12SVx2UDn+E=)
                          2: D8683D560654AD562BAFEB400C4C97282B65EB8D.crl (hash: ENKhvzXnGWD78dkEQZbwcsHNR4jr10ypQsD7HFK4vjY=)
                          3: 3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa (hash: vbLfRY8132503Kg5fgBxwlCePnPcCsL+EQe8oJSr1vY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl
                          rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 16:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e2:32:f8:2b:8e:f0:cf:b5:86:95:d2:d5:f8:5b:fa:bb:fd:51:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
        Validity
            Not Before: Dec 20 15:08:37 2025 GMT
            Not After : Dec 21 16:07:37 2025 GMT
        Subject: CN=F56EFE952646B710B8D3BA4755C9B151CE53DB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:71:46:71:d1:db:f7:11:d3:bb:dd:b7:43:
                    cd:24:ee:c6:0b:48:e1:56:1d:bd:1a:65:63:8b:f1:
                    db:02:39:00:05:12:d7:3a:bd:e9:12:bc:18:35:fe:
                    85:7b:ae:a3:ec:05:6c:1e:1d:9e:2c:15:90:cc:7c:
                    bb:42:5e:ce:32:5e:db:53:24:f6:00:f0:37:e2:ff:
                    24:78:65:57:26:7b:1e:39:bb:4d:e8:d0:d1:ea:c6:
                    a2:a0:4d:21:a5:a6:98:bc:35:60:50:26:f7:6b:86:
                    08:7e:e7:cd:39:62:4c:b0:73:43:99:27:db:0f:3b:
                    fa:59:58:7f:f2:0f:b6:c3:ee:16:0a:3c:d8:e0:fa:
                    5d:f2:5b:85:86:d1:08:a1:b5:e2:99:06:55:90:84:
                    f5:65:7c:96:18:33:c2:cb:f2:61:1d:c8:68:11:47:
                    53:08:2e:a1:d2:e1:ee:fc:21:a9:98:93:3f:f8:f4:
                    43:02:6c:b4:24:ec:ec:e7:85:c7:70:48:15:43:29:
                    86:f1:1d:60:9f:3d:cf:90:13:44:3c:67:92:3e:cc:
                    1a:a0:f1:e9:21:d9:b5:af:30:68:64:10:99:2b:e4:
                    46:78:63:4e:0a:11:cc:3f:9f:44:1a:80:4c:7a:05:
                    53:65:76:3c:1e:27:02:09:aa:e6:ac:78:52:bf:79:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:FE:95:26:46:B7:10:B8:D3:BA:47:55:C9:B1:51:CE:53:DB:37
            X509v3 Authority Key Identifier:
                keyid:D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:da:fd:29:09:21:ff:1a:60:5d:73:c0:28:25:2c:91:37:
         b8:c8:f0:5e:96:2a:8c:23:87:99:35:da:87:6f:ee:42:1c:7a:
         37:ed:1d:a6:9b:63:00:26:1b:80:71:0d:ad:e5:59:0b:1b:58:
         ff:21:79:67:41:7d:06:c7:53:b9:87:73:bc:be:c0:47:3f:32:
         4b:9e:b6:6c:f0:17:bf:0e:89:d6:83:f0:0f:ad:c3:fa:17:59:
         d3:3a:96:76:c5:8d:74:af:0d:9f:07:8a:a3:2d:68:1b:d3:b8:
         87:00:d0:47:13:05:88:5e:a2:69:e2:8f:9e:90:67:4a:51:eb:
         90:0e:36:c5:9b:90:72:81:36:0c:e4:f8:14:12:c6:df:06:16:
         42:b2:54:3b:b6:6b:79:ca:08:6a:ea:5f:c6:14:d2:b4:82:2d:
         19:af:c6:ce:12:70:2a:a5:86:96:a7:44:3a:58:bd:dc:56:ec:
         e3:e2:69:ff:a0:ae:5b:c5:12:67:8c:35:2d:6f:44:d2:9c:3d:
         f2:a1:77:84:4a:7d:30:b1:d2:97:8b:e3:ff:e2:62:20:25:74:
         c1:ce:fa:3e:28:77:d4:dc:97:a9:77:05:96:68:9e:73:07:39:
         ef:75:09:03:c9:18:c9:9b:b9:10:73:88:6e:b2:36:f4:b7:ea:
         d8:3e:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:00:24 2025 by rpki-client