This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
File:                     947E29F37C387A9590C135AE83DBF68B102E9E57.mft (raw, json)
Hash identifier:          UlpdBz47miO5scvA4OcuiUiZlJf+Xpmhx3iQpX1/B1Q=
Subject key identifier:   70:8F:9A:D4:3A:FB:44:7C:85:87:6E:E0:D4:74:F4:A8:51:24:E5:CC
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       7B691B72DB43BA2AE38DF460A6672AA3003844D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
Manifest number:          79
Signing time:             Sat 20 Dec 2025 05:11:02 +0000
Manifest this update:     Sat 20 Dec 2025 05:06:02 +0000
Manifest next update:     Sun 21 Dec 2025 06:41:02 +0000
Files and hashes:         1: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=)
                          2: 947E29F37C387A9590C135AE83DBF68B102E9E57.crl (hash: +CXC0ZaUAl2SGbpuYmEoY3uo14L7skrHI3jNC4/y5tw=)
                          3: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g=)
                          4: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:69:1b:72:db:43:ba:2a:e3:8d:f4:60:a6:67:2a:a3:00:38:44:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Dec 20 05:06:02 2025 GMT
            Not After : Dec 21 06:41:02 2025 GMT
        Subject: CN=708F9AD43AFB447C85876EE0D474F4A85124E5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:5d:f5:b1:c0:16:ff:f7:a2:d7:ae:da:5f:
                    f6:fa:ba:ab:73:8f:60:b4:69:c3:90:2a:da:1c:10:
                    39:1f:a4:6f:d7:9c:f1:8a:13:3a:fa:6b:cd:0a:ef:
                    1a:81:82:f2:e7:ef:16:fc:2f:1a:0b:ad:aa:8d:ca:
                    46:e3:57:2a:61:a6:95:b7:21:8d:5b:85:cf:87:70:
                    ab:7f:6b:88:c7:81:46:6e:17:a7:43:9b:9e:06:b0:
                    0f:8e:39:77:4d:69:de:04:bc:20:d6:e1:8f:7c:fa:
                    c6:63:24:f4:a9:46:c4:d2:9e:e8:f7:91:f8:c1:e6:
                    06:26:85:df:f0:54:79:6f:6e:a5:a2:7a:d5:ac:e8:
                    19:07:ac:6d:42:46:f1:cf:b0:a6:9e:e3:16:11:16:
                    2c:e5:bf:ed:02:d7:36:35:b9:0b:92:81:1f:5b:e1:
                    38:f4:f8:84:4d:81:70:1f:99:9d:ad:ca:18:d6:38:
                    cf:bb:df:b9:bb:71:7d:2d:c3:7a:bd:a5:10:91:7a:
                    62:67:5b:23:07:ac:fa:f3:33:c6:41:72:92:3e:79:
                    4e:0e:5b:6e:bc:7f:fb:d4:7b:4e:af:14:ae:38:99:
                    6c:6e:36:46:e3:1d:2c:ed:80:48:48:d5:bc:d4:ec:
                    64:ae:30:94:15:4d:20:c7:5f:af:3d:0a:a4:e5:ff:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:9A:D4:3A:FB:44:7C:85:87:6E:E0:D4:74:F4:A8:51:24:E5:CC
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:58:db:e5:8b:56:72:4e:ef:4f:17:94:a5:d1:8e:35:f0:
         db:42:e6:f5:c2:c0:ef:c7:7e:bb:42:a2:e0:4e:9d:5c:1b:69:
         19:ba:46:8e:c9:c2:8f:7d:dd:f3:cd:19:42:0a:86:c4:e3:aa:
         a5:14:b4:a4:73:76:1e:1c:be:37:20:80:31:69:c3:55:82:d8:
         4a:0f:58:33:a6:36:20:d1:2e:ff:25:c0:1e:de:0c:2c:03:dd:
         58:fa:4f:75:64:62:d7:5a:3c:8f:bb:24:b0:db:81:62:96:5e:
         8d:bc:91:f2:29:d7:fb:68:5e:d3:08:9e:ec:f9:57:fd:f6:3d:
         25:9e:bf:d4:0b:e6:fa:42:d1:7d:f8:bd:ad:e0:06:70:e9:7c:
         f0:7f:b0:a6:ab:c8:19:6d:7b:30:17:b5:3d:b7:26:65:f7:b7:
         28:3d:5c:39:72:8c:ed:cc:bf:66:b9:7f:4b:95:82:3b:ed:dd:
         d2:42:92:7f:42:e7:d9:8f:0c:ab:05:ed:eb:78:8a:49:fc:9e:
         9e:7d:3f:40:e1:89:d4:f0:e0:45:98:35:10:4d:56:34:d3:0a:
         4b:d7:83:ed:ce:f3:09:d3:3b:bc:d8:93:6d:de:98:73:80:ad:
         31:56:92:dd:39:70:48:8e:7e:b4:6c:7e:21:cb:56:01:d9:ee:
         f3:6f:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:32 2025 by rpki-client