This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
File:                     488C735907C82A33DD56871CC305A21B88A9B353.mft (raw, json)
Hash identifier:          WCkmLiBFhpSuswdT/VIpzFQebXKWznWzQMjjleNUE3U=
Subject key identifier:   BD:4F:37:6C:9A:87:6B:FD:E8:D0:90:2C:52:9C:02:41:DC:5B:76:F4
Authority key identifier: 48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53
Certificate issuer:       /CN=488C735907C82A33DD56871CC305A21B88A9B353
Certificate serial:       23D2343E0136B81D9ADD517F35BA5B3508608E6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
Manifest number:          013F
Signing time:             Sun 21 Dec 2025 01:46:27 +0000
Manifest this update:     Sun 21 Dec 2025 01:41:27 +0000
Manifest next update:     Mon 22 Dec 2025 02:28:27 +0000
Files and hashes:         1: 488C735907C82A33DD56871CC305A21B88A9B353.crl (hash: LlAhWdmYBlFBDzAHqiRyNkmpgoll4Q4Y5x7Giy9/ETc=)
                          2: 323830343a343135383a383030303a3a2f34382d3438203d3e20323637343237.roa (hash: kEbYwX6ubwpVbliWP2dioxhOYIbnOqlJyYSTACXJ6eg=)
                          3: 3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa (hash: xhBmFJWH0UyCao0JVPKBeLZ55Y1hgXWtHZaxt2MGicM=)
                          4: 323830343a343135383a3a2f33322d3335203d3e20323637343237.roa (hash: OHZNU2eDNxMQfQjVOabRdBgG+UX/Gf6cZGEnAvl9rqU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl
                          rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 02:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d2:34:3e:01:36:b8:1d:9a:dd:51:7f:35:ba:5b:35:08:60:8e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488C735907C82A33DD56871CC305A21B88A9B353
        Validity
            Not Before: Dec 21 01:41:27 2025 GMT
            Not After : Dec 22 02:28:27 2025 GMT
        Subject: CN=BD4F376C9A876BFDE8D0902C529C0241DC5B76F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b0:c9:a8:73:63:7b:48:8c:ef:8b:bd:48:9e:
                    96:ca:38:03:02:50:5d:ed:56:43:ad:0f:3f:e8:2c:
                    4f:5c:90:1b:62:f6:5d:bf:ee:e4:63:39:c1:e2:f5:
                    34:7e:a3:da:a0:71:6e:d3:24:0d:19:4f:98:43:96:
                    d2:23:11:39:e2:15:5e:b7:65:85:ab:9d:e1:d5:aa:
                    f3:95:73:7e:ac:a1:d0:27:dd:e4:49:5a:ec:a7:24:
                    8c:f6:0c:01:5f:9d:2a:ec:63:44:20:f1:81:35:cc:
                    a5:69:b6:a8:5e:5a:71:b1:3f:95:2e:48:6f:e4:79:
                    d6:81:9c:70:fa:98:32:ab:c2:d5:c6:d6:8c:6f:2c:
                    e6:6e:7d:8b:a7:5a:67:e1:32:e0:95:d4:73:89:26:
                    3f:72:2f:f0:89:ba:7f:b0:52:36:1a:10:24:59:72:
                    e3:49:df:0b:0f:10:cf:62:49:fc:fa:63:4b:f9:02:
                    bf:7c:51:f8:5f:a0:8d:06:b8:85:d3:b2:25:67:d7:
                    68:ee:5f:a2:dc:f0:b9:6f:96:69:4a:cd:7e:56:1d:
                    6a:8d:f6:d5:89:12:31:0b:3f:10:03:0f:8c:b9:d6:
                    d0:b8:38:48:b8:46:6e:92:41:5a:c4:94:ca:32:d9:
                    23:3c:99:ee:28:e1:78:38:dd:98:a7:22:b2:a7:94:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4F:37:6C:9A:87:6B:FD:E8:D0:90:2C:52:9C:02:41:DC:5B:76:F4
            X509v3 Authority Key Identifier:
                keyid:48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:ed:48:fd:7e:7d:23:df:81:c8:43:f2:6b:03:81:55:a1:
         48:9f:c0:ef:dc:51:a9:aa:ea:29:db:33:20:01:e6:5d:1c:cc:
         f6:00:d5:c8:eb:03:3c:92:4d:6a:25:7c:7a:a4:e7:a4:d7:a4:
         ed:81:38:c0:29:64:31:f1:e1:12:23:53:cb:f6:db:3e:37:67:
         6e:6f:3c:59:69:84:95:a7:a6:d8:04:d6:2a:88:70:05:dc:22:
         70:c6:1c:f7:66:b9:36:3c:09:e1:12:b9:01:7c:a0:e1:09:80:
         4a:47:01:37:d0:b3:17:18:a1:ae:3a:ae:a5:1d:62:70:b7:d1:
         45:9c:fa:e1:66:29:11:f5:e0:7d:31:0d:3d:53:fa:81:a5:c9:
         2b:e7:0b:5e:63:58:67:b6:93:a2:5e:58:b9:09:0c:b2:a0:32:
         2c:e1:81:8b:36:68:a2:24:c5:54:26:6f:10:46:aa:e2:33:16:
         e2:40:82:44:f5:88:2e:cd:e6:49:b1:7c:79:a7:9d:93:6d:1f:
         20:66:bb:69:35:6c:43:10:1e:8e:01:14:9d:1f:58:ba:5c:db:
         93:32:56:06:25:aa:d4:b1:1d:80:63:bb:20:a3:ee:db:87:bd:
         5e:e5:97:67:cb:99:6d:5b:81:0c:53:2e:c3:f2:15:f4:6b:24:
         1c:ad:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:43:21 2025 by rpki-client