This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.mft
File:                     7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.mft (raw, json)
Hash identifier:          4hLEhxEuU7CKMHT2F3ZmyPQ90DdMwJ/6X1N7T9ixLS8=
Subject key identifier:   DE:57:4C:AA:AF:B0:D7:C0:DE:8A:F8:69:01:26:08:60:6E:C6:AF:B6
Authority key identifier: 7E:3F:6B:0D:6C:02:BD:48:18:D2:CB:73:06:B6:62:A1:32:EC:56:7C
Certificate issuer:       /CN=7E3F6B0D6C02BD4818D2CB7306B662A132EC567C
Certificate serial:       01487B0485C11F017E41281EC6B10915AB5AFB7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.mft
Manifest number:          04
Signing time:             Tue 30 Dec 2025 18:09:34 +0000
Manifest this update:     Tue 30 Dec 2025 18:04:34 +0000
Manifest next update:     Wed 31 Dec 2025 19:10:34 +0000
Files and hashes:         1: 323830343a376561383a3a2f33322d313238203d3e20323731363338.roa (hash: /OPda2bvfQN3z6lAv0+8Kj5d3BFaUOAF8C/C6Tlo4Y4=)
                          2: 7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.crl (hash: wA3WMYzhW+C7EsZMTeJpOqTDEFbYN+8IZZT4nLnUAOY=)
                          3: 3230302e31362e39322e302f32342d3332203d3e20323731363338.roa (hash: 4JZnWOWO2kjbldBHHMG0F3M4aC27ony8Uts47M8t2aQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.crl
                          rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 19:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:7b:04:85:c1:1f:01:7e:41:28:1e:c6:b1:09:15:ab:5a:fb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E3F6B0D6C02BD4818D2CB7306B662A132EC567C
        Validity
            Not Before: Dec 30 18:04:34 2025 GMT
            Not After : Dec 31 19:10:34 2025 GMT
        Subject: CN=DE574CAAAFB0D7C0DE8AF869012608606EC6AFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:ba:55:ca:00:fe:6c:41:84:93:70:cc:8f:
                    e9:80:ae:20:fd:e1:3c:67:0e:cd:89:74:af:91:2b:
                    27:94:cd:cb:d9:82:9d:dd:0b:bf:04:37:e1:0c:c8:
                    2a:d2:85:18:2e:39:51:33:b1:33:f1:2d:04:c3:8c:
                    7c:00:93:55:5b:92:de:80:a7:7d:1a:e4:d4:0b:f2:
                    ac:a4:20:b3:fa:b1:4c:01:5f:c9:b0:ab:04:64:02:
                    f4:80:7f:08:6f:a2:e5:cc:9c:fe:9d:f4:11:4f:2b:
                    68:c0:14:67:69:c4:52:34:29:59:42:67:36:36:79:
                    b4:c3:f8:3e:17:a8:3b:19:d2:07:07:35:9a:42:f4:
                    ae:bf:e4:32:29:cb:1c:53:d6:2d:3c:09:02:f2:96:
                    78:17:30:94:1b:65:75:67:8e:e2:b5:0e:b3:ba:1a:
                    af:a9:86:de:0a:a6:e9:df:3a:d3:cf:14:68:7e:99:
                    e8:68:33:65:1d:1b:b8:99:30:42:95:97:5c:5f:70:
                    ee:9b:99:a4:0f:d2:d7:08:44:d1:1b:4b:2f:45:9a:
                    28:76:08:f5:9f:6e:9b:01:eb:34:f0:d1:65:ea:bc:
                    9c:56:d0:e1:fc:dc:e3:d9:79:6e:6c:c6:15:1c:0c:
                    3f:ea:f2:37:ca:5e:62:a9:a6:79:ce:ec:0e:b8:d5:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:4C:AA:AF:B0:D7:C0:DE:8A:F8:69:01:26:08:60:6E:C6:AF:B6
            X509v3 Authority Key Identifier:
                keyid:7E:3F:6B:0D:6C:02:BD:48:18:D2:CB:73:06:B6:62:A1:32:EC:56:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKbFitK4cNRE3PkKsufashUGnCd4TPGn3MiMyr8KUxy6/0/7E3F6B0D6C02BD4818D2CB7306B662A132EC567C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:fe:6a:6b:0e:33:8f:83:ae:b8:04:00:24:6c:30:f9:b5:
         40:ff:60:61:31:c5:35:b0:a3:64:71:e2:9b:c3:11:95:fd:33:
         3f:c1:5c:17:66:5b:fc:a3:18:d0:54:80:fc:c1:b9:79:8f:26:
         4e:64:40:53:87:ed:40:f7:43:49:68:2f:00:9a:6f:86:29:73:
         91:37:36:95:36:dd:75:d7:a8:05:e3:42:81:d2:1b:5e:a0:be:
         0e:3a:99:45:fa:2e:ac:07:91:c6:c9:17:5e:03:56:de:e8:55:
         56:94:ee:92:cb:73:9f:81:34:4d:8e:8a:18:a7:8a:76:29:1b:
         61:17:0a:5f:45:64:c5:ce:59:55:a3:0d:59:ab:82:4c:29:2c:
         bb:c7:4c:18:4f:86:e4:82:ca:5d:17:aa:69:55:1d:a4:cd:6d:
         e6:70:3b:ad:2a:fd:15:d5:71:e4:f0:04:12:23:ec:f6:15:3f:
         fe:ad:28:b3:c2:2e:f2:c4:57:55:1f:20:98:9e:73:3c:69:6e:
         d9:91:80:15:bf:c2:0c:ad:b8:26:ed:df:0c:6a:87:0b:04:0b:
         ab:df:69:1e:ff:19:c8:ef:0e:fe:20:0a:26:b3:a2:8d:84:7e:
         33:6e:5d:54:fa:a5:c5:3e:fa:cf:f8:2e:8a:91:d7:f3:c4:49:
         01:7d:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----