This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
File:                     0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft (raw, json)
Hash identifier:          g327/JLMcKoWYcAqFbbFvbpDZG796FW3GYYaI9R8Spk=
Subject key identifier:   26:07:23:53:83:E7:56:36:DD:F1:83:A3:DC:30:7E:D8:25:CE:11:74
Authority key identifier: 0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2
Certificate issuer:       /CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
Certificate serial:       0E44B3F0A713D00F981B01383D8B1C08A03BC75F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
Manifest number:          D7
Signing time:             Thu 25 Dec 2025 15:31:03 +0000
Manifest this update:     Thu 25 Dec 2025 15:26:02 +0000
Manifest next update:     Fri 26 Dec 2025 16:09:02 +0000
Files and hashes:         1: 0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl (hash: 4+JBF+TEQlIeDWCMOMtwterwp4ABNfqOZJxGuhazXLk=)
                          2: 323830343a383366383a3a2f33362d3438203d3e20323732323331.roa (hash: SJ/9XRh/S3JcAR+UzZfvI9vhztzX1uE4KCpPNvs90PA=)
                          3: 323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa (hash: aiI8DugfocV6kV6BYnXN8XhAl68QsUvS6ajv1n2dvbo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl
                          rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 16:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:44:b3:f0:a7:13:d0:0f:98:1b:01:38:3d:8b:1c:08:a0:3b:c7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
        Validity
            Not Before: Dec 25 15:26:02 2025 GMT
            Not After : Dec 26 16:09:02 2025 GMT
        Subject: CN=2607235383E75636DDF183A3DC307ED825CE1174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:3e:07:5a:51:a0:84:db:4c:ef:de:48:57:
                    d0:4c:26:92:dd:72:f3:c1:f0:2c:6f:fb:e1:4b:5e:
                    79:d0:ad:65:45:a9:ea:4f:c4:64:08:fa:40:b5:91:
                    b4:ba:9a:d3:9b:19:8d:5f:15:39:0e:73:bc:1c:d4:
                    c3:1c:7c:2d:4b:ae:24:0d:52:92:cb:11:39:6f:a9:
                    d5:37:35:cb:40:8a:67:9b:b5:5d:6a:78:c2:d9:29:
                    2d:93:59:30:17:da:7d:3c:03:85:5f:5b:08:10:f7:
                    dc:0d:fd:57:da:1a:76:a5:e3:eb:c7:fb:cf:79:bc:
                    f9:6c:c1:53:fd:fa:59:5f:db:7f:d1:0f:f5:83:62:
                    c4:da:a2:c5:43:ac:6e:05:f6:02:03:c9:2c:41:ae:
                    f2:4c:ed:62:18:40:06:34:2f:90:24:7c:a2:5c:08:
                    93:2c:b6:c5:32:9e:99:e7:b3:c2:85:2a:c9:2c:1f:
                    42:69:8a:af:1e:f6:fe:8c:ea:1f:d5:72:5d:fc:d4:
                    d0:16:f2:72:8d:dd:3d:a2:73:af:33:f8:b5:25:00:
                    c1:d6:d6:96:4b:f4:f4:15:24:7a:d4:a2:b0:7c:86:
                    69:a9:13:6d:dc:fc:e9:82:77:b0:ef:c4:48:64:07:
                    1f:9e:c3:17:e4:02:cf:94:d7:d8:a9:f7:1d:28:8c:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:23:53:83:E7:56:36:DD:F1:83:A3:DC:30:7E:D8:25:CE:11:74
            X509v3 Authority Key Identifier:
                keyid:0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:fa:d0:31:84:f1:28:ce:e7:4f:e4:7e:de:01:b8:1c:18:
         c4:ff:77:fb:26:0b:f9:4f:0a:4e:27:57:61:d3:0e:27:03:b8:
         e8:9c:5f:4e:f5:1b:65:d1:d6:db:01:c3:19:9c:b9:c5:5f:b7:
         43:fa:98:86:9d:47:5e:63:64:bc:32:16:61:5c:ce:fd:dc:a2:
         e7:68:48:b0:df:8e:80:39:33:06:ab:43:12:4c:ac:af:30:d9:
         8f:c7:c5:30:14:14:d8:5d:ab:35:53:35:98:6a:f8:e1:bc:76:
         69:8a:02:5a:ae:5e:83:60:a4:55:2d:60:82:18:e7:97:96:0c:
         bc:2f:af:57:e5:fe:6e:64:e8:84:89:37:fc:e1:e4:e0:2f:f7:
         d1:b4:ae:fc:6a:53:d4:97:65:1e:7c:96:4d:ea:2f:60:de:6f:
         31:24:3b:88:63:fd:05:dd:21:59:15:de:24:11:b5:77:e8:6c:
         8a:75:26:f0:f6:fc:ac:63:0a:02:b8:c1:06:e2:bd:5e:e2:7f:
         ca:c0:a3:db:a4:48:1c:05:c2:be:cf:5a:8d:ea:16:2f:70:b7:
         92:86:56:d2:09:bc:a3:0f:3c:61:15:10:48:48:92:88:aa:23:
         b0:e3:83:be:72:94:7a:c7:91:c8:ac:17:1e:78:30:ba:95:2d:
         b2:d9:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 20:54:18 2025 by rpki-client