This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          PqbQJbgzE5sZ9MYgzu3ZApZckPPFmD10zk0qDChVa7c=
Subject key identifier:   42:78:77:38:96:80:61:1D:A6:C2:E0:02:BC:AA:62:30:B1:C6:B4:A1
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       4D5424E70AFAF06CEFB5D87F99ACAA45959277CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          01EF
Signing time:             Tue 23 Dec 2025 11:00:13 +0000
Manifest this update:     Tue 23 Dec 2025 10:55:13 +0000
Manifest next update:     Wed 24 Dec 2025 13:00:13 +0000
Files and hashes:         1: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: EQqDBGIIgchD+myGzUxgkPxzj2m6v4ZfwNE+qXibsAo=)
                          2: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: tZ9CFfiGAu/s670SKNKGPAKN5ktK01F6Cjp7W8ikkTU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:54:24:e7:0a:fa:f0:6c:ef:b5:d8:7f:99:ac:aa:45:95:92:77:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Dec 23 10:55:13 2025 GMT
            Not After : Dec 24 13:00:13 2025 GMT
        Subject: CN=427877389680611DA6C2E002BCAA6230B1C6B4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:2b:cb:b8:bc:60:4b:7a:5b:b2:93:62:a1:
                    9f:3a:5b:1b:a9:36:83:37:f9:ba:bf:66:8d:44:7a:
                    0c:ba:c6:17:a8:97:42:ea:e0:af:05:30:7a:44:ac:
                    b6:ed:da:81:c7:10:b6:d9:9c:a8:46:b2:ef:6c:49:
                    76:95:4a:be:31:f7:a5:06:40:01:a0:c5:22:9a:62:
                    18:17:12:c5:c0:bf:70:1c:a6:21:0e:3b:2f:d7:29:
                    59:21:8f:af:3f:04:46:ff:09:34:f8:19:6b:7e:7b:
                    b6:a7:6f:64:be:87:7e:7a:e8:83:6b:95:14:88:67:
                    91:84:34:ff:e9:93:6b:76:c2:a0:aa:b3:33:6f:36:
                    6f:74:e0:cb:cd:d2:77:d0:63:82:57:04:c7:a2:5c:
                    8b:ab:9e:c8:5c:fd:1a:c0:92:6f:47:29:0a:d0:94:
                    c8:e7:51:6f:b9:47:a8:bc:84:57:c1:4a:ff:5e:51:
                    2b:4c:67:39:b0:aa:2f:f4:2d:9d:15:00:66:27:c5:
                    be:8d:36:b4:6b:92:3f:22:d7:aa:4c:78:fd:42:67:
                    33:36:7f:41:35:00:2d:40:26:d9:13:c1:ab:8b:97:
                    4c:00:a2:bc:54:66:f1:31:dc:50:60:25:81:f3:7a:
                    5e:52:8e:8f:1d:e5:5d:bd:5c:70:6d:74:ae:ba:1a:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:78:77:38:96:80:61:1D:A6:C2:E0:02:BC:AA:62:30:B1:C6:B4:A1
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:2e:1c:8f:fe:1a:9c:c7:33:77:f8:fa:11:79:d4:b6:b8:
         03:30:1d:84:89:20:2d:09:c9:ac:0b:99:28:35:4f:fe:63:9f:
         37:66:b1:37:28:b7:62:00:3c:27:94:e8:e5:58:3d:69:d0:9c:
         96:be:56:f5:3b:08:c5:11:2f:b0:94:ec:17:e6:d2:97:11:06:
         0c:cc:9c:84:53:75:c6:3d:2b:71:f2:6f:34:72:fc:7e:12:38:
         12:9c:88:dd:a1:20:26:67:1d:0b:7a:e6:ef:19:e8:5b:7e:31:
         df:0e:28:23:15:e5:84:15:28:9a:46:86:fb:9c:ce:91:b2:77:
         02:59:98:a0:d6:dd:e9:32:24:19:f6:5f:8f:1f:5c:d8:5d:9c:
         19:55:3e:ca:3b:01:8f:11:c3:ce:4e:51:f4:39:82:78:39:c5:
         90:61:c8:69:85:8e:22:cb:28:16:d3:7e:bf:43:70:ca:0e:4e:
         08:92:4c:53:17:41:08:3f:65:df:df:f2:65:1c:ae:6c:44:61:
         58:87:44:55:8d:56:b9:63:5c:39:4e:57:3d:d0:49:2c:84:96:
         8e:06:8c:d6:02:95:90:88:67:f6:13:c4:ea:1c:1c:ad:ba:a9:
         10:b5:1e:2f:a6:27:7a:42:64:a7:32:6d:89:3b:0f:c9:cf:34:
         71:99:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----