This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
File:                     0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft (raw, json)
Hash identifier:          lMZ4Bjamu8kxYxERff6khbpJ1aYzqLpRH/LO3WxeBd4=
Subject key identifier:   A7:35:6D:C5:AF:D8:96:35:8D:54:13:98:BB:C0:38:BB:CA:25:BC:8B
Authority key identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE
Certificate issuer:       /CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
Certificate serial:       69360A8F2692073C603E25225F3CCCD3166BB1E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
Manifest number:          C2
Signing time:             Sat 20 Dec 2025 10:27:06 +0000
Manifest this update:     Sat 20 Dec 2025 10:22:06 +0000
Manifest next update:     Sun 21 Dec 2025 12:25:06 +0000
Files and hashes:         1: 3133382e302e39362e302f32322d3234203d3e20323634353433.roa (hash: FC9pms5OqktW4RChuq8DBwz95wR9TvtgJIbJ/LKN1NE=)
                          2: 0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl (hash: dxuQZvbzK+cMcOeGZFGZD1bqtP0pgwVcP7YHr7vl7T4=)
                          3: 323830343a323133383a3a2f33322d3333203d3e20323634353433.roa (hash: GaXRVmtc9GYkFBI5EwdutZcVTpb148sgylfWx7e+euc=)
                          4: 3134332e302e3132382e302f32322d3234203d3e20323634353433.roa (hash: HKF2V4S5MvGr0pcZVSb1p3ub57RgMvfuMJ5vE/4e/n0=)
                          5: 3136382e3139352e3130342e302f32322d3234203d3e20323634353433.roa (hash: SmblcyFxI54u+JsiMt1C74fG2hjomDK4dRQLbyZQ/oY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl
                          rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:0a:8f:26:92:07:3c:60:3e:25:22:5f:3c:cc:d3:16:6b:b1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
        Validity
            Not Before: Dec 20 10:22:06 2025 GMT
            Not After : Dec 21 12:25:06 2025 GMT
        Subject: CN=A7356DC5AFD896358D541398BBC038BBCA25BC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:70:59:70:3d:b2:82:9c:6b:9f:53:86:6f:
                    8a:71:7d:c4:cf:0e:cd:bd:5b:ed:29:c4:4d:04:01:
                    96:c8:51:15:7e:24:35:3a:2e:b2:65:2a:30:d2:53:
                    2b:f5:c9:e9:61:57:9b:e8:20:bd:0d:08:d3:32:b4:
                    60:2e:6e:44:83:de:8a:b1:18:80:83:c7:ec:77:d1:
                    79:83:19:2f:66:e8:74:cb:80:08:f5:d8:7b:33:f7:
                    97:ae:67:32:c5:b4:da:81:89:55:bd:af:34:d9:de:
                    e4:fb:9f:54:96:21:bd:8c:c1:05:b4:96:99:75:25:
                    d1:ce:2f:7e:9f:19:13:c3:8c:9e:51:6a:8c:1f:4b:
                    4f:d7:dd:dd:67:31:0c:7c:74:d4:fe:23:6c:fc:71:
                    90:93:42:2a:f8:f1:71:56:dc:ec:b2:0b:ce:66:f1:
                    80:04:6f:02:28:aa:e2:00:c7:be:a1:fc:bb:6d:1b:
                    92:cf:e1:a0:55:22:65:00:3f:04:e6:ed:7a:c7:49:
                    ca:6d:ef:03:fc:c9:79:2a:3a:0b:98:52:1e:3a:3f:
                    43:8e:0b:f6:a3:56:08:da:e9:1d:67:8b:17:05:78:
                    e5:67:c4:09:0d:24:9b:27:94:d6:12:82:20:33:69:
                    60:e6:66:fc:ad:2d:3a:53:c8:8a:89:bb:c3:93:34:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:6D:C5:AF:D8:96:35:8D:54:13:98:BB:C0:38:BB:CA:25:BC:8B
            X509v3 Authority Key Identifier:
                keyid:09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:76:5f:af:58:2a:e3:0e:83:ab:f7:98:a7:08:82:79:66:
         0d:02:94:0e:7a:a6:d2:76:b5:30:4c:fa:ed:11:c5:d1:95:27:
         25:ea:74:30:83:9c:b5:c5:6b:86:62:36:7a:b9:62:f3:ab:a0:
         b8:53:a1:1b:0b:b1:1e:e6:4a:05:84:0c:21:19:41:0d:6b:db:
         7e:a1:14:15:ee:fc:f1:c6:54:bf:06:ff:99:aa:bf:63:21:f8:
         89:11:3e:d3:15:1b:8a:af:6f:2e:31:d8:35:26:d0:98:df:54:
         ea:8b:ea:d9:56:5c:fb:fb:4c:6b:55:a0:4c:52:26:84:c9:0b:
         4c:96:bb:2f:5c:69:c0:4e:35:ef:29:06:44:d6:13:e9:26:89:
         51:de:44:00:97:da:49:93:ba:e6:97:66:84:85:96:ef:1a:5b:
         3b:c7:1d:8b:1e:0c:8a:3b:73:69:70:b3:1c:5b:5a:f0:ee:f2:
         e2:ac:a1:a3:6f:c0:f5:16:a6:8b:fc:89:b3:4d:d3:aa:99:e5:
         e9:6e:6a:f3:40:bc:af:92:9d:fa:88:d3:ec:bc:50:09:57:cb:
         9a:37:3d:3e:35:da:19:f2:84:de:9d:31:0a:c5:65:aa:02:3c:
         8c:9a:3b:7f:d5:1c:65:7d:55:48:e7:93:59:ff:d0:23:53:87:
         a6:4c:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:16:19 2025 by rpki-client