This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
File:                     C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft (raw, json)
Hash identifier:          fc2S+94FTiY8ZokL5Om5fbfMCg4eQw9QwlbqvF2UquU=
Subject key identifier:   0A:15:E9:3E:C0:A4:28:34:36:DC:D1:6D:BE:7C:C0:DE:F0:47:B7:16
Authority key identifier: C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18
Certificate issuer:       /CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18
Certificate serial:       0C7ECB15D82F94FE3C7951A71D1F22B027A7E1D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
Manifest number:          48
Signing time:             Sat 20 Dec 2025 07:02:34 +0000
Manifest this update:     Sat 20 Dec 2025 06:57:34 +0000
Manifest next update:     Sun 21 Dec 2025 08:40:34 +0000
Files and hashes:         1: C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl (hash: 3ca/U1Gj+wkYQIwLsqq0Ud79NS2myI47l3/uhLjFOT8=)
                          2: 323830343a386161633a3a2f33322d3438203d3e20323733363835.roa (hash: r9BKYATaL7zpuCLfHYLC8h82pNv7+c+XuB+/9Zzo3Wo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl
                          rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7e:cb:15:d8:2f:94:fe:3c:79:51:a7:1d:1f:22:b0:27:a7:e1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18
        Validity
            Not Before: Dec 20 06:57:34 2025 GMT
            Not After : Dec 21 08:40:34 2025 GMT
        Subject: CN=0A15E93EC0A4283436DCD16DBE7CC0DEF047B716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:a0:34:31:e5:c9:55:cc:22:ce:74:17:c2:
                    56:41:a5:f4:f6:1e:c3:49:de:97:f8:ae:51:5a:d3:
                    22:c4:8d:a4:83:ea:f2:35:65:f2:30:d5:8d:c4:e7:
                    db:d2:1f:89:34:98:a6:8c:e5:04:b7:39:69:ff:bd:
                    db:84:94:94:4f:e3:15:d4:dc:99:5f:2c:0e:e6:f9:
                    4d:9e:07:d3:50:9f:28:9b:4d:98:9e:2d:2f:94:06:
                    c3:80:a5:6e:aa:7c:dd:b4:00:ca:c3:b6:fa:65:85:
                    c3:ed:cd:e0:16:df:a2:c9:4e:48:3a:95:4e:5f:55:
                    f8:3e:74:58:e5:87:a6:9c:22:e6:7d:e8:60:18:de:
                    ba:45:38:5b:0e:a2:c4:4e:28:0e:dd:b4:38:cb:eb:
                    fb:64:8c:51:ec:8e:53:c4:d2:4d:09:d7:a2:67:bf:
                    ab:24:08:56:74:d4:48:f3:44:e1:c3:2d:c9:fa:0a:
                    c6:6f:f7:45:ec:2a:be:ef:e3:8d:ae:d2:56:db:5c:
                    32:c4:f6:c8:8b:9d:43:77:f3:23:28:39:fa:fc:66:
                    c8:88:fc:a8:31:5b:1e:8d:42:db:ec:b7:e0:3f:d5:
                    f7:20:db:7d:a2:12:a5:0b:73:2d:e5:0c:8d:d7:c4:
                    44:0a:3b:0d:ce:a6:22:2f:f9:07:eb:86:ff:88:d0:
                    7e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:15:E9:3E:C0:A4:28:34:36:DC:D1:6D:BE:7C:C0:DE:F0:47:B7:16
            X509v3 Authority Key Identifier:
                keyid:C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e2:63:20:f6:22:ad:4e:6c:42:e0:17:cf:69:9f:30:c0:52:
         de:a4:36:3a:fa:53:b8:6f:85:cd:1c:39:1a:d7:35:15:63:25:
         e9:c8:a8:c2:ae:e6:45:da:c6:e6:89:0e:6a:51:2a:36:65:3d:
         bb:18:cf:b9:0a:f1:a2:c1:26:1b:8b:3f:52:59:d3:ea:62:63:
         87:79:b3:cf:a2:cb:0c:5c:6e:9e:b5:4b:80:37:4a:3b:91:ba:
         46:4b:73:37:c5:a0:c5:c0:40:31:17:f0:d9:7e:47:d7:d7:ef:
         21:a6:3f:04:5b:4e:27:ff:b8:52:0d:58:fa:d6:49:23:c0:7e:
         68:bf:af:bc:18:18:1d:45:ee:95:48:c0:e2:99:8a:be:d8:d1:
         50:9d:dd:61:85:df:88:07:80:44:78:9b:f3:40:fa:73:3b:f9:
         87:fc:25:d5:be:a8:58:59:a6:38:dd:51:65:9b:13:a7:44:b8:
         6a:c7:06:24:9b:30:21:73:35:65:ff:94:38:a0:22:e6:a4:97:
         04:6d:e5:9e:af:eb:a4:7a:71:8c:01:90:82:76:aa:41:e7:5a:
         ed:90:ee:93:40:ea:06:8c:6b:5f:7c:f0:3d:16:83:b3:bd:ba:
         63:57:3c:af:c6:7d:fe:c7:48:0f:b2:6f:34:22:ef:ab:c7:c3:
         6e:53:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:10 2025 by rpki-client