This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.mft
File:                     EA7287487718BBD2E6952437F15830212EA9BEA4.mft (raw, json)
Hash identifier:          QFLCwf5h6+YMjj1Jhz3aEQIZfDAkUFaj0D2X5g7BGRM=
Subject key identifier:   53:45:96:68:DF:0E:ED:B3:6E:46:53:FE:8F:8F:35:75:1F:E1:10:DE
Authority key identifier: EA:72:87:48:77:18:BB:D2:E6:95:24:37:F1:58:30:21:2E:A9:BE:A4
Certificate issuer:       /CN=EA7287487718BBD2E6952437F15830212EA9BEA4
Certificate serial:       3284EE735443DDB91A7A7B13C5ABBB243CB31EE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7287487718BBD2E6952437F15830212EA9BEA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.mft
Manifest number:          3D
Signing time:             Fri 19 Dec 2025 20:05:44 +0000
Manifest this update:     Fri 19 Dec 2025 20:00:44 +0000
Manifest next update:     Sat 20 Dec 2025 20:25:44 +0000
Files and hashes:         1: EA7287487718BBD2E6952437F15830212EA9BEA4.crl (hash: Jz5OZZNIK98HBsbzdgGmDSVGO5QmcziE4RPyd7DiF8k=)
                          2: 3133382e39392e31322e302f32322d3332203d3e20323634313530.roa (hash: 6CF9aQvhtjbhptPHtzzCeLp7qxDKAo6Ay5xH9ACxfI4=)
                          3: 3137302e3234372e3130342e302f32322d3332203d3e20323634313530.roa (hash: gwKzdA/1DuNz2+Ixo1yANj9rN7IpwJ+vJjsa0EEBjEQ=)
                          4: 323830343a323333633a3a2f33322d313238203d3e20323634313530.roa (hash: j7EmwL6hFZKUcPZSFmpa0vjbyWwvksKvqtgehprvduw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.crl
                          rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7287487718BBD2E6952437F15830212EA9BEA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:84:ee:73:54:43:dd:b9:1a:7a:7b:13:c5:ab:bb:24:3c:b3:1e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7287487718BBD2E6952437F15830212EA9BEA4
        Validity
            Not Before: Dec 19 20:00:44 2025 GMT
            Not After : Dec 20 20:25:44 2025 GMT
        Subject: CN=53459668DF0EEDB36E4653FE8F8F35751FE110DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:da:5f:ae:97:25:f1:00:88:96:37:24:f8:
                    2b:ee:6b:29:e8:59:62:03:87:b7:90:78:31:fd:86:
                    54:ea:b9:f4:50:af:10:47:02:ab:28:7b:6c:56:77:
                    40:c5:53:bb:c3:5d:a7:67:ea:55:48:05:64:ba:af:
                    f4:52:7f:ac:c3:98:07:13:0c:d3:15:5f:bb:5e:43:
                    94:0e:6f:ae:06:27:18:af:e9:63:fb:29:01:11:a5:
                    1d:60:20:3e:d8:1b:da:94:98:75:59:c6:04:cc:6b:
                    17:ba:35:05:44:77:47:d0:fd:0f:dc:33:79:08:d4:
                    fe:2c:d4:65:87:72:f4:06:34:63:ce:59:e2:b4:b5:
                    2f:da:47:85:8e:85:a5:7b:1f:4f:a3:c6:50:26:a6:
                    d4:7b:fc:8f:ad:21:76:82:fc:3d:09:02:dc:5b:33:
                    c7:f0:73:ea:a7:d7:0a:c8:c6:c8:c3:a9:51:66:51:
                    17:d3:a8:e8:42:9d:a1:20:c1:43:6d:e3:aa:9b:f3:
                    1b:95:4d:ea:9c:8e:cc:f9:fc:a4:75:55:ba:16:e3:
                    a2:99:8a:a4:7d:be:cf:a8:1b:a8:49:8c:bf:4a:25:
                    0d:da:9d:bf:61:b0:7f:93:2b:20:dc:59:5b:09:4a:
                    5b:1a:5e:c2:16:d1:b3:97:f4:83:80:14:b5:6a:c7:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:96:68:DF:0E:ED:B3:6E:46:53:FE:8F:8F:35:75:1F:E1:10:DE
            X509v3 Authority Key Identifier:
                keyid:EA:72:87:48:77:18:BB:D2:E6:95:24:37:F1:58:30:21:2E:A9:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA7287487718BBD2E6952437F15830212EA9BEA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/EA7287487718BBD2E6952437F15830212EA9BEA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:13:d1:d0:e8:94:8c:59:87:26:1d:9a:f6:33:41:32:96:
         1d:37:38:27:bf:7f:cf:a6:b5:5b:19:32:05:74:84:ea:27:e3:
         a9:93:59:b7:9d:d5:7a:3f:aa:2f:f5:80:3a:72:28:6e:76:4e:
         f5:a9:18:d9:c2:44:98:33:2e:73:1a:e6:94:70:6d:e2:ee:4d:
         b8:70:4b:61:7b:bf:d7:be:14:57:a7:db:1d:bd:3f:4f:ed:52:
         1f:c8:bb:20:b4:67:79:98:34:d5:1f:f1:22:e9:1f:9b:15:fd:
         14:bc:c0:f5:a8:f1:2d:b1:09:17:af:3b:ce:68:0c:1e:a0:b5:
         7d:81:3c:50:03:95:7d:ea:e8:4b:bf:3d:d3:a4:e8:2f:e3:7d:
         f0:fd:41:b7:21:23:f7:07:90:c4:49:29:0f:ea:1b:28:37:82:
         7c:8c:12:44:07:57:92:b6:f7:56:a8:8f:94:b3:a5:af:b3:31:
         2c:b4:08:af:27:f3:20:82:a9:d9:75:1c:75:ae:1f:43:eb:ce:
         10:2f:55:73:15:6d:b7:0f:56:97:b7:a9:d6:0b:70:d3:95:0a:
         c7:31:94:7b:61:91:9f:59:cd:32:50:42:fe:bb:fb:b8:85:8c:
         b3:ab:03:be:12:74:d4:d3:35:57:f8:e1:88:c1:70:fb:f7:a7:
         7e:26:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:40 2025 by rpki-client