This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft
File:                     82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft (raw, json)
Hash identifier:          H0Ys1pe3tbfQl39XhCW7ri8Vj3epK3d9DjBr/sbButE=
Subject key identifier:   F3:C2:40:F8:93:FD:4D:C9:52:26:59:A6:D1:0D:B4:6C:EA:88:0C:62
Authority key identifier: 82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F
Certificate issuer:       /CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
Certificate serial:       34A94F5DDAC30CA1F26B4FC7148D25A36E994C21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft
Manifest number:          010B
Signing time:             Thu 23 Oct 2025 13:28:48 +0000
Manifest this update:     Thu 23 Oct 2025 13:23:48 +0000
Manifest next update:     Fri 24 Oct 2025 13:54:48 +0000
Files and hashes:         1: 3230302e3131302e3130322e302f32332d3233203d3e20323730323630.roa (hash: WfCIglO87kvvNLHDLId4Zax+gWe9IoesO+g7BKtZDhc=)
                          2: 323830343a363934383a3a2f33322d3438203d3e20323730323630.roa (hash: 5i91g9QHcBFMc62sJzYkmwj8pdc0BhhwIga8qRyHuvk=)
                          3: 323830343a363934383a3a2f33322d3332203d3e20323730323630.roa (hash: /Tomm6MXWfVJJSAr+P9JKr6KC2eC7fCYAjoLHdOxing=)
                          4: 3230302e3131302e3130302e302f32322d3232203d3e20323730323630.roa (hash: ICq77LH6sWYf1T4igYxv60r/H19sttgsZWNEuKcNckg=)
                          5: 3230302e3131302e3130302e302f32322d3234203d3e20323730323630.roa (hash: Q/YDk8maFRXPETjufw9hR8agpFLJnQxloyDxhJgMAEE=)
                          6: 82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl (hash: +noBqUSH9dHsSkF5MO1QlWmd0UweTjBtuixJQPp2rAQ=)
                          7: 3230302e3131302e3130302e302f32332d3233203d3e20323730323630.roa (hash: 7jfTG/wn9s9AHxwMsg6N4zBsZ1WQ54LfEVTU75eiGNY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a9:4f:5d:da:c3:0c:a1:f2:6b:4f:c7:14:8d:25:a3:6e:99:4c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
        Validity
            Not Before: Oct 23 13:23:48 2025 GMT
            Not After : Oct 24 13:54:48 2025 GMT
        Subject: CN=F3C240F893FD4DC9522659A6D10DB46CEA880C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:22:18:45:05:63:7f:1e:8e:c0:80:72:06:34:
                    52:ef:5e:bf:84:ac:63:cc:de:91:89:44:8c:dc:0f:
                    e7:0d:ef:ce:18:52:20:6a:f0:e3:c3:dc:19:54:75:
                    ba:61:4e:29:ba:fc:29:d1:e8:ef:50:58:5b:04:ea:
                    bb:8c:4e:bf:05:25:fa:a6:73:4a:11:3a:2f:5a:46:
                    82:b0:2d:67:30:b5:cc:02:e3:69:c9:60:8a:36:2b:
                    98:69:06:46:aa:93:d3:4d:57:0f:75:c5:f8:d7:02:
                    99:a6:37:57:26:ba:ac:2b:7a:4f:85:9c:9f:b3:9c:
                    92:1c:3a:4d:26:02:7a:e7:7f:39:df:4a:51:94:91:
                    0c:99:18:20:c3:ae:88:32:d3:76:68:da:c5:e0:73:
                    50:3f:3e:45:7d:a6:5c:37:d2:48:65:5d:e0:ba:6b:
                    d0:0a:5b:44:91:9d:71:57:a6:70:5c:ae:e5:76:f9:
                    3d:a9:88:42:b6:b1:c4:ce:b0:03:b3:c4:cf:0e:14:
                    a0:62:9e:c5:7d:88:93:6d:f4:4f:25:3d:32:8b:c8:
                    c4:01:ce:28:72:47:07:c8:22:65:82:71:f0:a5:d3:
                    0f:a8:af:c1:0d:de:19:df:a6:31:32:68:44:48:14:
                    40:90:c6:69:f9:e0:05:13:9b:f7:7a:38:4c:00:83:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:40:F8:93:FD:4D:C9:52:26:59:A6:D1:0D:B4:6C:EA:88:0C:62
            X509v3 Authority Key Identifier:
                keyid:82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:c4:f9:47:ab:74:f7:99:12:73:8e:a6:73:46:91:2b:c6:
         04:fe:df:65:8e:13:73:c3:85:36:1e:7c:60:c5:ff:e3:a2:5d:
         e3:62:c6:f6:c3:af:d3:6d:a1:23:82:94:96:8d:7c:8b:47:c3:
         b7:af:62:f9:c5:c1:ef:07:05:a5:42:b2:62:a8:15:9c:25:e2:
         e3:33:cd:c0:26:80:d9:2f:7d:67:0c:5a:94:5e:60:87:fa:41:
         34:bf:cf:be:90:32:53:12:c1:13:35:74:63:10:28:f1:06:9a:
         cf:7c:43:a6:d3:98:45:69:0a:6e:99:af:98:8c:a7:d3:ba:09:
         19:ba:69:7e:b0:4b:a3:f1:d9:2a:19:15:58:20:fb:83:29:7a:
         21:80:7d:b1:0d:2e:37:93:9b:ba:1f:62:ae:c3:98:2b:f1:ca:
         76:d9:04:f7:59:6d:39:5a:3e:08:8f:e8:24:c8:40:d1:a5:62:
         6f:14:dc:2e:4c:31:30:ec:b2:07:5d:3d:6b:ed:71:42:92:2d:
         78:a3:2e:62:72:f1:aa:21:a5:a4:73:4b:56:bd:cc:40:fd:da:
         9d:24:54:56:62:43:5e:c6:ff:bb:c3:8f:c0:21:29:69:c0:b7:
         51:11:74:d1:cf:15:55:09:31:e5:95:d4:26:1b:40:fd:4f:cc:
         01:d9:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:47:43 2025 by rpki-client