This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
File:                     F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft (raw, json)
Hash identifier:          EC6/mCLLQrkrFUAqXklTwwkg8apmJgqPSlpW9ehCoQY=
Subject key identifier:   7A:E2:74:E6:BA:F3:CA:68:AB:B1:54:02:DB:2B:04:0B:5A:67:02:8D
Authority key identifier: F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Certificate issuer:       /CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
Certificate serial:       78B19BF896BCF6608DC282A437E1B1FBF318DE80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
Manifest number:          0341
Signing time:             Mon 22 Dec 2025 04:20:32 +0000
Manifest this update:     Mon 22 Dec 2025 04:15:32 +0000
Manifest next update:     Tue 23 Dec 2025 04:49:32 +0000
Files and hashes:         1: 323830343a373736633a3a2f33322d3438203d3e20323731313737.roa (hash: Lk2TjinnyRLjYCqIwRiXjdSZRCMZuc0b5mUt24HYAEw=)
                          2: F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl (hash: MXaWWH3FJv4sqndZnptfwUm2BMRuM/sQaDIgXt1MatE=)
                          3: 3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (hash: YC0vu0BuI7ng429o1rFupIdL7FoaicnQlf+g6aRYZ5Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl
                          rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 04:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:9b:f8:96:bc:f6:60:8d:c2:82:a4:37:e1:b1:fb:f3:18:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Validity
            Not Before: Dec 22 04:15:32 2025 GMT
            Not After : Dec 23 04:49:32 2025 GMT
        Subject: CN=7AE274E6BAF3CA68ABB15402DB2B040B5A67028D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:35:07:5f:fe:f3:93:d8:cf:62:c8:2f:9f:
                    20:4c:cd:5f:96:af:48:06:68:6d:36:5f:44:28:32:
                    cb:8f:32:ca:ac:92:48:c9:f1:60:30:69:79:28:b6:
                    2b:17:5f:65:bd:c1:7d:ed:6b:52:ec:2b:64:7f:6c:
                    72:a6:2a:7e:e5:da:4c:a6:f5:83:70:35:06:2e:e6:
                    c8:99:9a:92:75:fd:c3:36:33:e1:93:1d:63:22:eb:
                    d7:db:7f:df:4e:04:99:36:3e:70:45:31:ba:b4:72:
                    77:c6:4e:f8:26:3e:9d:e7:55:cc:cd:c3:74:4c:30:
                    ed:b5:0c:fa:5f:eb:ba:d3:8c:a1:6d:01:bd:17:23:
                    c6:dd:c7:54:79:21:ca:2a:18:3b:ba:38:b7:c3:ae:
                    dc:aa:86:f2:72:13:f1:0c:8a:c2:76:f2:e8:23:12:
                    92:bb:7b:bb:a1:d7:4d:41:1f:07:98:78:92:39:44:
                    68:97:0d:05:13:6b:10:89:fb:45:42:39:28:87:11:
                    8d:73:28:1d:56:5a:46:6b:74:7f:7f:a7:01:bb:d7:
                    a0:53:d1:18:52:ba:97:b1:c0:fc:20:a2:88:a3:ca:
                    d6:b5:e4:9f:a6:0f:f1:2a:28:03:5f:f1:b0:a6:44:
                    27:93:f9:e1:42:0e:24:a8:0b:6a:3b:55:cd:58:60:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:74:E6:BA:F3:CA:68:AB:B1:54:02:DB:2B:04:0B:5A:67:02:8D
            X509v3 Authority Key Identifier:
                keyid:F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e8:c4:0b:68:c9:05:15:37:d8:43:f7:4d:f0:26:3d:6b:0a:
         e9:35:b4:a8:74:4e:8a:d2:44:89:b5:e9:48:ed:6a:c3:af:37:
         de:81:a5:9c:33:28:1b:6b:21:3c:5e:5d:96:82:83:1d:7e:08:
         d2:20:c8:6c:d5:e4:69:15:16:99:84:37:bd:48:ee:4b:73:65:
         b5:02:54:3d:24:24:63:80:23:3a:9b:d0:3b:20:68:41:55:5b:
         2a:bf:9d:57:b6:d3:9d:44:ac:b8:14:30:3f:c5:6e:ba:9d:d9:
         0f:92:f5:64:ec:39:0c:65:2c:33:1d:2c:86:0c:54:4c:23:1e:
         ba:9d:b7:3b:d9:bd:90:ff:d2:5a:ad:e9:e0:00:a0:d5:14:b0:
         2b:e4:e4:64:76:ce:22:10:85:e0:5c:65:d8:4f:57:4b:c5:62:
         88:43:28:85:80:32:5c:ea:b9:44:30:70:7c:f8:cc:a1:fc:ce:
         28:5e:ec:d0:d4:9f:5b:73:f5:a1:06:b9:0c:15:9f:3b:b3:66:
         3d:83:89:8a:5d:d1:46:92:4c:94:b1:bd:00:03:9e:6f:c1:df:
         3f:82:1a:c9:c2:6e:da:e7:02:0f:68:67:24:b4:08:9b:79:c0:
         97:dc:15:6e:78:ff:86:11:14:f9:92:44:c8:97:8a:9c:e0:d1:
         5f:ad:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----