This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
File:                     CF46A132348143E7B60D54AC599BE74868B00829.mft (raw, json)
Hash identifier:          p3pT9XKOpczQrdZEMZqC3u5Ei8e/stIBP2zPOCQ68mE=
Subject key identifier:   65:10:FB:DB:23:03:B5:47:E8:71:20:08:00:CC:BA:82:4B:51:4C:BF
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       591E118167B6C09499327AB21C779F2183CEE533
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
Manifest number:          0359
Signing time:             Sat 20 Dec 2025 17:40:06 +0000
Manifest this update:     Sat 20 Dec 2025 17:35:06 +0000
Manifest next update:     Sun 21 Dec 2025 18:45:06 +0000
Files and hashes:         1: CF46A132348143E7B60D54AC599BE74868B00829.crl (hash: D9eOy+44tfxAtNeOA4khjX38VERfCDhnNMLtyNY+fPI=)
                          2: 3133382e302e34342e302f32322d3234203d3e20323632333639.roa (hash: mNGE2ApYM/J9W+baP0TbUbKu/8r0Haztj1iL/qSuz90=)
                          3: 3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa (hash: CdRRymY1yKhPcezAqUKVmXWzRLsnywt2EQiCpHxajm4=)
                          4: 3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa (hash: XZaCHfcXMWLrhRayJdwMd8wYMuVFH8mEBpyx+iapB2Q=)
                          5: 323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (hash: dYygwWUZKVm38j2dSuJZZjuzcHudNcicLgugSISMyEM=)
                          6: 3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (hash: RvlBzzqP7dNVH9ItKXWSg5cIqcc/A9dbWyPXnWHURnM=)
                          7: 3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa (hash: AePOPCBOMcIPxUe3ICVe2wKhADVjryejvfYzhOn+4TA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1e:11:81:67:b6:c0:94:99:32:7a:b2:1c:77:9f:21:83:ce:e5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Dec 20 17:35:06 2025 GMT
            Not After : Dec 21 18:45:06 2025 GMT
        Subject: CN=6510FBDB2303B547E871200800CCBA824B514CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:19:bc:23:d7:7b:fd:92:81:2b:e6:08:eb:
                    e9:3c:5e:dc:51:f4:b1:dd:fd:61:80:62:c8:6b:46:
                    67:6c:99:ec:3d:7c:dd:ed:b0:48:73:1d:c5:82:1f:
                    29:ab:69:f0:91:75:d0:4a:d0:93:e8:9f:0d:2e:d5:
                    6e:3d:bc:ec:fb:ed:a3:ca:82:5e:53:35:cb:83:96:
                    59:6d:59:68:63:4b:d7:85:70:d7:ef:bc:45:7a:3f:
                    21:75:f8:93:2b:76:f4:6a:48:07:68:34:41:1c:e7:
                    b5:dd:da:72:f1:42:7b:52:69:a1:ae:69:41:71:a2:
                    8c:6c:c7:46:fc:6c:2b:7b:0d:c2:2e:b3:a2:e4:9d:
                    e3:1c:b5:ae:70:a4:ab:b6:a2:ce:dc:4a:40:18:8e:
                    44:f0:c9:32:51:a8:3c:61:3c:9d:cd:ab:2c:0d:a7:
                    b1:cf:c8:96:51:f2:5d:c0:1d:a8:79:1f:51:e8:f0:
                    ac:ec:00:5f:17:3d:7d:6e:08:09:83:44:63:aa:d2:
                    12:4a:ea:d2:a8:41:8b:40:a9:d3:c2:79:55:e0:94:
                    ef:8e:6f:48:1c:ae:be:7e:6f:15:71:10:3a:e8:ca:
                    a8:76:4c:83:03:5e:83:a6:b3:dc:53:29:53:e9:27:
                    d2:e4:8e:f7:43:d6:f1:0b:53:db:fb:81:0b:50:f9:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:FB:DB:23:03:B5:47:E8:71:20:08:00:CC:BA:82:4B:51:4C:BF
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:42:c0:04:06:5e:5d:d7:75:a7:55:bd:d5:91:5d:c1:e9:
         01:8a:18:81:81:31:4c:5f:2d:e9:23:fb:9f:ee:a5:32:e4:00:
         e7:34:8e:e3:d7:87:a2:94:74:7e:02:87:31:20:44:b8:4b:03:
         8c:5e:ca:5a:31:cc:6d:ac:35:a3:2e:8f:5d:cc:d1:09:c8:f5:
         69:90:99:44:50:59:d9:9d:40:1f:51:eb:06:3d:37:29:7d:b2:
         78:32:79:f7:29:cf:ad:98:29:c3:de:a5:6f:62:dd:fd:38:73:
         a2:66:b6:df:15:c4:46:f4:ff:0a:76:1f:ac:c4:af:bf:29:59:
         ff:08:5d:75:cd:38:cd:15:2a:28:e2:db:5b:83:2c:ab:55:ca:
         03:b3:8e:8b:38:61:7c:b8:bd:90:c6:06:9e:06:31:6d:c9:b3:
         bd:84:cb:8f:d4:96:3d:c7:34:83:36:d0:99:ad:26:22:48:49:
         c4:bc:3f:8b:c3:47:f8:41:a1:b9:0a:ca:32:49:16:9b:90:1b:
         8d:83:1e:57:91:26:34:b9:f1:66:83:4f:e5:cd:df:d7:21:80:
         b3:53:65:a9:16:d8:e8:14:a6:24:30:64:55:f4:ba:08:88:65:
         6d:5c:02:3a:94:02:b4:7b:61:32:1b:a2:fe:d0:51:4b:23:c3:
         82:02:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:30:16 2025 by rpki-client