This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
File:                     4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json)
Hash identifier:          x91SFoRp5UWfyY53D3/zwRfEkwdycbn0OkaeyycvfSA=
Subject key identifier:   90:47:7B:94:50:D0:07:E1:BB:86:31:B1:35:02:64:D9:C2:2C:52:4A
Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D
Certificate issuer:       /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
Certificate serial:       0EE08984033C2A1898B6C7D483A67E1E5849B3DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
Manifest number:          D7
Signing time:             Tue 30 Dec 2025 00:42:00 +0000
Manifest this update:     Tue 30 Dec 2025 00:37:00 +0000
Manifest next update:     Wed 31 Dec 2025 03:44:00 +0000
Files and hashes:         1: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=)
                          2: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: 4kjU7jzExWeoE5Ul09K/8oKzzSaEzcW2EMczGqlS9Wk=)
                          3: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: 6ObJH/Yn0OhNlenVZChDhjf8OzouFK3QjeWFSU2/I54=)
                          4: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: fR+WvLRk4u+eXWBgxAxLPjqW4Wx0AMejZd87DFc2a7Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl
                          rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 03:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e0:89:84:03:3c:2a:18:98:b6:c7:d4:83:a6:7e:1e:58:49:b3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
        Validity
            Not Before: Dec 30 00:37:00 2025 GMT
            Not After : Dec 31 03:44:00 2025 GMT
        Subject: CN=90477B9450D007E1BB8631B1350264D9C22C524A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:d1:b8:f2:f4:b5:a8:2d:14:92:aa:f2:6d:
                    75:5a:39:70:c7:72:de:86:d6:58:1c:4b:09:b3:fa:
                    64:0a:2f:c9:64:50:22:67:3d:7a:4f:69:72:0d:21:
                    e5:bd:91:ae:a1:1e:af:32:2d:c9:48:a0:37:17:fe:
                    0c:f0:ac:01:de:b4:02:6f:c0:b7:38:55:ff:75:51:
                    6b:61:49:60:fb:02:b3:2f:3e:f9:3c:13:f9:e0:b3:
                    51:e1:e2:14:dc:5f:50:b8:ea:cb:b0:f7:38:a0:9d:
                    7d:47:6a:04:60:ee:7a:aa:19:8b:6d:90:90:77:40:
                    00:35:09:5d:6d:5b:14:57:c7:dc:90:a9:cb:bb:73:
                    53:43:3b:ac:b5:c3:03:4b:92:c4:79:72:db:23:38:
                    56:af:56:60:91:8a:fb:4b:8e:58:f6:8c:55:f0:4e:
                    af:d2:ca:d9:5a:b0:d8:fb:38:54:89:a7:78:da:e4:
                    69:a4:ca:92:52:8e:b4:a4:a2:c0:e8:83:1f:7d:cb:
                    74:af:02:ae:42:a0:35:cf:d5:f1:53:d8:ea:4b:f1:
                    2d:56:96:8a:ec:02:33:dc:09:b6:76:7c:90:95:1a:
                    83:cf:f2:9e:ba:a6:98:91:75:f7:a1:34:f1:5a:be:
                    1d:01:5a:68:af:de:fc:54:8e:f5:a1:36:6c:85:8b:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:47:7B:94:50:D0:07:E1:BB:86:31:B1:35:02:64:D9:C2:2C:52:4A
            X509v3 Authority Key Identifier:
                keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:30:f8:dd:e1:98:87:06:b8:3c:90:9e:69:31:14:de:79:90:
         f4:85:66:2d:4e:1f:f1:7f:1b:62:be:9a:cb:4e:d4:b2:60:47:
         66:1e:dd:1d:bc:ef:95:c3:09:73:57:ef:18:31:8c:58:b2:39:
         e5:4c:01:e8:22:4e:61:5e:f1:d8:4a:4f:b4:bb:c3:dd:87:18:
         f8:0a:d0:4b:23:1c:d9:2c:49:df:7a:25:8f:e8:87:54:6a:d3:
         73:2c:83:f1:51:63:9f:f1:f5:c5:b0:46:40:8c:64:07:4b:b5:
         18:6b:a5:d0:70:b2:f1:da:22:a2:66:b0:0b:2c:55:77:2c:19:
         bd:2d:d0:5f:d2:fe:ea:cb:f6:7d:d6:57:5c:d7:58:f9:a7:39:
         05:2d:7d:0b:2c:64:4b:98:cf:d9:39:9f:b8:50:9a:0b:77:3b:
         41:dc:9f:29:0f:42:4f:ce:09:73:98:e3:76:17:83:c3:84:c9:
         e3:84:aa:d6:f8:7f:e9:44:38:08:1c:75:00:48:41:2b:5e:d2:
         3a:7f:d1:3a:e7:35:6f:5c:ec:76:32:c8:70:72:5b:bc:f2:b9:
         2d:23:e6:6d:3e:c7:72:65:cf:fe:00:24:b3:98:6a:57:b2:f0:
         c4:1c:1e:d2:c0:2e:b8:0f:cb:6b:76:74:2f:98:45:6d:bd:bd:
         9c:a3:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 14:21:22 2025 by rpki-client