This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
File:                     CD474EAA2CD8D52421F339174CBFE8D756A44685.mft (raw, json)
Hash identifier:          0EUrNYw4ckjekpuxGxQgMJ/mi7fpr5dUh760NiyGVuY=
Subject key identifier:   9C:42:2F:4E:56:A2:BD:68:9A:49:08:AA:E8:DC:40:D6:08:98:95:A7
Authority key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85
Certificate issuer:       /CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
Certificate serial:       0FFCEC35188A8B4C3E25ACC1983BD4101FFD6D1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft
Manifest number:          02D1
Signing time:             Mon 13 Oct 2025 04:51:33 +0000
Manifest this update:     Mon 13 Oct 2025 04:46:33 +0000
Manifest next update:     Tue 14 Oct 2025 06:03:33 +0000
Files and hashes:         1: 3136382e3139352e36382e302f32322d3234203d3e203532393939.roa (hash: AY6Vd3Nv7x4AtBQqy2GsNC9oQaiTU/aw1T14h+rG1DA=)
                          2: 3137372e36362e33322e302f32312d3234203d3e203532393939.roa (hash: EkyUQtUq8ZwCnFXCndOL37rwpzQMGbrVReyyMnswO8g=)
                          3: 3138362e3232362e39362e302f32302d3234203d3e203532393939.roa (hash: QqKI63mBNvlFpuiZObn3plPHeWhdbsqcXsxnU2fT8Jw=)
                          4: 323830343a3530383a3a2f33322d3438203d3e203532393939.roa (hash: L2+XaIEkygw5y/1KsdDixOZ1BeoOiNJomxlX0Q3Na9k=)
                          5: CD474EAA2CD8D52421F339174CBFE8D756A44685.crl (hash: kwAjBSUTDWDOe/aDcCP/8CEbkQTVhUcaxCpAobY7Lgg=)
                          6: 3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (hash: qsmdYLqqE+QpqwIwlqhFUWeaadqymEYPxDfMA75+ank=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fc:ec:35:18:8a:8b:4c:3e:25:ac:c1:98:3b:d4:10:1f:fd:6d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685
        Validity
            Not Before: Oct 13 04:46:33 2025 GMT
            Not After : Oct 14 06:03:33 2025 GMT
        Subject: CN=9C422F4E56A2BD689A4908AAE8DC40D6089895A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:a3:ec:1b:a0:b7:35:94:be:90:c5:78:c8:
                    94:09:a2:d1:49:eb:b2:51:36:d3:04:af:41:05:a9:
                    69:83:c5:8c:0e:b6:03:4a:fa:8a:57:cb:b2:93:f0:
                    53:d3:e4:b3:2c:57:35:9b:47:30:54:53:9c:1c:07:
                    6e:62:a8:23:ce:ec:76:2f:d2:9d:47:8b:cb:32:ce:
                    9f:d3:e9:46:09:13:cc:5b:36:6e:73:c5:45:ee:b8:
                    1f:84:b9:53:1f:c7:e7:e5:d3:eb:06:84:29:b5:15:
                    ce:f9:13:e1:a9:bb:c4:26:f4:88:ab:bd:ab:8b:7f:
                    e6:43:96:32:c3:97:53:32:f7:ba:ce:39:b9:08:91:
                    e6:f3:53:50:50:e1:16:92:d4:ff:b4:0e:f3:65:3f:
                    75:d5:f8:97:cb:cd:92:2c:5b:8d:15:85:88:18:16:
                    23:e5:02:1f:94:8f:ba:a9:35:d9:9b:ce:81:e2:eb:
                    02:82:87:c4:9d:f8:23:00:ae:03:cb:3f:5b:3d:a8:
                    99:0f:e3:37:c8:18:21:f9:4e:eb:74:8c:88:45:26:
                    69:75:96:be:b6:a4:14:9b:c6:c9:f3:35:cf:b3:38:
                    a6:2f:d0:f7:63:cd:1e:28:4e:0d:e4:da:c8:3f:b3:
                    ed:c9:5d:8f:91:68:3b:76:e9:be:96:e1:04:ad:ed:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:2F:4E:56:A2:BD:68:9A:49:08:AA:E8:DC:40:D6:08:98:95:A7
            X509v3 Authority Key Identifier:
                keyid:CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:78:34:2d:8d:0f:ea:c6:46:81:53:71:fb:23:9b:5e:d3:
         1f:3e:e5:ad:65:a8:91:0d:e2:7e:b9:f0:03:e6:96:05:ee:51:
         67:cc:1e:de:ba:d6:6c:a5:59:29:b5:ec:4e:cc:f7:c8:ba:9d:
         a4:4b:05:06:9b:81:32:14:05:8a:ce:05:87:11:f6:da:0c:f9:
         6e:63:de:e4:46:bc:02:1a:87:b1:f4:7f:78:ad:e5:3a:b8:6e:
         e6:d1:d6:f8:1b:22:40:0e:37:e7:cd:ab:36:0d:01:cb:8c:9a:
         29:65:15:a5:6b:f2:a6:73:e5:65:e0:87:55:db:93:31:f0:62:
         51:b9:8b:6c:2d:b1:70:c3:90:21:f0:9d:3e:da:6f:04:2b:2c:
         d9:74:6d:60:51:c3:1a:43:c6:b2:a6:b4:cb:58:67:10:49:34:
         93:e7:62:d5:01:4e:78:37:e2:7e:85:f3:73:36:30:36:6d:bf:
         4f:ad:00:38:0e:82:71:5b:d8:d7:23:eb:ea:68:1d:d8:89:ee:
         51:5f:0e:da:de:67:8f:37:45:80:d3:e0:da:38:99:05:be:f6:
         52:05:65:eb:13:27:b6:a9:bb:d0:86:27:70:33:a3:38:d0:26:
         6d:67:fd:10:96:c2:36:7e:6a:1e:dd:a3:9a:53:43:b4:e6:1c:
         ab:48:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----