This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
File:                     48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft (raw, json)
Hash identifier:          2SPHbcxcsm0uYmDpQOKVJSc9hh2wshYXKq8K1YS6u10=
Subject key identifier:   10:7A:8E:13:9D:ED:2D:2B:1B:B8:19:EA:D8:07:50:A6:6D:26:4B:B6
Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Certificate issuer:       /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
Certificate serial:       5F7F5B1B1939A81CA41C54CEF1B69FB34A7C1DC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
Manifest number:          0350
Signing time:             Sat 20 Dec 2025 01:18:54 +0000
Manifest this update:     Sat 20 Dec 2025 01:13:54 +0000
Manifest next update:     Sun 21 Dec 2025 03:31:54 +0000
Files and hashes:         1: 48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl (hash: u6GXfaAWgKsYoD1W5S7hikgvHpsO59Z3bgeu3R+A6mg=)
                          2: 3137392e34392e3234382e302f32322d3234203d3e20323731323231.roa (hash: Dv6hxsDroS4vlXUuIA9sQTKVJgCR9NtSdnPeeNt1eEk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl
                          rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7f:5b:1b:19:39:a8:1c:a4:1c:54:ce:f1:b6:9f:b3:4a:7c:1d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Validity
            Not Before: Dec 20 01:13:54 2025 GMT
            Not After : Dec 21 03:31:54 2025 GMT
        Subject: CN=107A8E139DED2D2B1BB819EAD80750A66D264BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1c:26:ef:3e:91:50:33:5c:0e:24:fd:e9:bf:
                    d7:af:cd:72:21:29:a2:68:a8:fb:2b:e3:1c:4e:28:
                    a2:72:16:f7:55:8a:9d:03:dd:01:b4:6d:81:16:a4:
                    e6:3f:ef:df:8b:a1:bb:99:49:d7:74:dd:62:52:54:
                    7c:33:48:cb:6c:c5:d2:41:93:bf:5e:c8:32:87:60:
                    e8:b9:48:40:7f:c3:27:df:d4:e1:b7:9d:48:60:75:
                    a9:2a:2c:86:41:cb:6c:5b:be:96:96:9a:e1:4c:ee:
                    a6:2c:67:f8:9e:98:1e:9e:a8:1a:a5:de:f5:cd:55:
                    6a:d3:3e:3b:94:55:eb:90:25:e1:44:1b:75:bb:1c:
                    23:70:a4:e4:2e:38:44:3d:8d:4d:19:b1:c3:f6:2b:
                    29:60:85:57:29:59:17:8b:88:f6:95:cd:c6:40:43:
                    9f:75:6c:25:e3:84:07:63:b9:a0:d0:ea:f1:e2:47:
                    d8:7b:ed:ed:a3:64:0b:34:d2:70:6b:08:09:61:2a:
                    c3:d8:26:46:1e:ed:08:8e:0c:f6:19:b7:e5:3e:b5:
                    68:2a:e2:4d:af:fe:94:9a:95:9f:d9:00:a0:e4:68:
                    8a:37:66:0d:0b:22:fe:81:e8:a5:2e:0d:e2:7b:44:
                    92:d5:f5:34:2b:94:0f:29:c4:0f:a1:0f:6a:fd:2e:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:8E:13:9D:ED:2D:2B:1B:B8:19:EA:D8:07:50:A6:6D:26:4B:B6
            X509v3 Authority Key Identifier:
                keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:ea:fa:1d:f2:96:f1:b1:1d:09:5b:c9:9a:e2:3a:4f:84:
         19:37:1a:a7:d5:1b:32:a5:6a:10:9e:f0:6c:3f:70:a0:c7:c6:
         5e:38:57:ff:7c:36:9b:7d:c6:9d:02:2b:65:0d:e1:4d:a0:e1:
         37:00:8d:95:fe:88:42:f4:00:1e:b8:36:4f:96:86:52:cb:6a:
         8b:88:bf:e1:6a:cc:b1:3d:5c:ba:a2:3d:8a:e5:fc:1b:35:c0:
         f2:35:f8:f1:7a:48:41:6d:33:44:16:e1:b7:ef:81:fd:73:4a:
         a2:c1:e5:8b:37:f9:7f:b6:e2:19:8f:b2:f3:d3:74:c9:c1:53:
         03:7a:94:64:80:98:72:31:3e:fc:2b:c5:45:9e:48:22:03:fc:
         1c:37:54:0c:bd:ec:f3:5c:6d:07:65:eb:ca:ed:65:88:58:d8:
         32:8d:4c:9a:eb:f7:83:f5:04:b2:67:14:a9:d0:9a:25:8e:fd:
         ad:5b:46:a7:0c:b4:69:2f:f8:54:b7:6f:87:3a:31:4b:ef:db:
         10:c8:36:c3:41:f4:e2:61:63:2f:31:db:f0:be:77:a9:ce:72:
         e1:34:89:f8:8e:df:a2:92:44:2e:b9:1a:55:32:80:6c:1d:e8:
         e9:9c:b6:24:7a:ab:f1:69:6a:ee:ad:db:c8:2f:af:9d:e2:75:
         74:ad:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----