This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
File:                     6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft (raw, json)
Hash identifier:          R7rWryd7vjllzE5BW12a8piczNkpf8GyHzHt4pIrH/I=
Subject key identifier:   A8:7F:D0:4F:F2:05:E7:23:2C:40:39:4B:8E:C2:79:CD:68:18:B3:51
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       4BFF860AA1403122F35343FA50972502EB919E45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
Manifest number:          0352
Signing time:             Sat 20 Dec 2025 14:09:42 +0000
Manifest this update:     Sat 20 Dec 2025 14:04:42 +0000
Manifest next update:     Sun 21 Dec 2025 17:47:42 +0000
Files and hashes:         1: 6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl (hash: wnDfek6UnG4Zy3CFwtom1Z7q1qYpMLxPX0DXsKr1Uk0=)
                          2: 323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (hash: mg0IynqWDo14J6sqAJVXGNjAGDSn5KggylwjVpJ9ffQ=)
                          3: 3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa (hash: w9yAdO6LDVf7qK7XicDLQeFvj6JOLTPSnGK75HVUxrM=)
                          4: 3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa (hash: xECio/rCjQtfA05Eh2ffTwyoda3AAGKbqBik74jZLMg=)
                          5: 3137302e3234342e3138322e302f32342d3234203d3e20323636353036.roa (hash: EmMUpw/YHanIL2ibfVm9wxTuMJNTX0Z7O8ftqoz/TJo=)
                          6: 3137302e3234342e3138302e302f32342d3234203d3e20323636353036.roa (hash: OQ8PkfVKPCnufoVA58qBUG46IarIrnKwaq4lLtwG0/c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:86:0a:a1:40:31:22:f3:53:43:fa:50:97:25:02:eb:91:9e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Dec 20 14:04:42 2025 GMT
            Not After : Dec 21 17:47:42 2025 GMT
        Subject: CN=A87FD04FF205E7232C40394B8EC279CD6818B351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:82:9e:df:18:31:1d:88:5f:66:c7:c6:bc:
                    34:b2:15:18:2b:59:4b:0a:03:2d:b0:ae:c1:d3:69:
                    d2:ef:cd:cd:b4:63:02:49:60:23:34:7d:64:8f:69:
                    4f:2b:30:c0:74:22:11:e3:21:d2:59:6f:5a:48:45:
                    b8:56:c1:61:76:05:11:45:8a:e7:14:05:ef:46:c5:
                    9d:53:77:a1:d5:38:5f:8a:a2:1f:2c:a6:c6:97:fb:
                    64:d3:f4:83:f3:33:9a:fa:e4:4e:65:7d:0d:e3:ac:
                    b4:71:4d:ed:a0:a4:48:c2:f0:6c:28:12:e4:21:5a:
                    5b:2e:c9:7a:54:e1:04:86:39:04:94:0c:40:15:18:
                    a0:f5:dc:c2:23:0c:07:cb:5b:b6:ec:35:74:24:fb:
                    69:2e:fa:aa:d4:a3:9f:fc:10:f8:c9:2b:59:6f:c1:
                    b0:66:76:cf:c3:96:12:a1:15:74:52:d6:14:7d:0d:
                    90:ce:b8:c8:06:59:89:a7:fe:60:7d:bb:20:02:43:
                    ad:21:35:ab:c0:ab:e5:c6:98:fa:48:9b:ec:46:13:
                    4e:33:35:79:a7:a7:78:86:94:29:a9:30:dc:10:33:
                    bc:28:2e:18:a9:10:0c:a0:d5:c7:f0:08:7e:78:70:
                    60:29:01:4f:ee:19:0b:81:b4:9a:47:93:73:74:eb:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7F:D0:4F:F2:05:E7:23:2C:40:39:4B:8E:C2:79:CD:68:18:B3:51
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c9:75:32:22:71:bf:ab:54:f0:c8:9b:00:d9:ee:4e:0a:4e:
         94:b9:07:ff:fe:46:89:5e:ab:f4:0f:68:80:53:5e:53:10:36:
         a3:d5:41:67:15:bd:e1:81:01:fd:d5:4f:bc:3c:b9:33:1c:dd:
         c3:58:54:87:7e:73:9c:0c:bc:df:b2:51:22:94:c5:a0:3f:32:
         6a:43:d0:a7:83:89:5a:88:7c:8d:a9:7f:c6:5f:c5:c6:ab:00:
         03:33:c0:f6:dc:d7:c9:2c:98:40:9e:43:3f:64:df:60:31:f7:
         ed:b4:ac:d6:c5:ed:1e:2e:b3:12:b1:2a:40:25:50:c5:73:ab:
         80:f3:79:c3:2f:29:c8:ca:f8:c9:eb:c0:ef:42:13:90:5d:fe:
         04:d4:28:07:b3:b8:eb:62:52:8c:03:24:82:62:db:0a:a3:0c:
         11:19:9c:7c:1e:94:ec:b1:3c:e2:53:c6:4e:d7:d2:a5:a6:f6:
         74:d1:d5:8c:07:90:b2:99:4c:39:e1:cc:57:1a:13:a1:4b:b0:
         6f:86:0a:e4:c8:29:cb:69:a4:d1:47:a7:b8:fe:d2:23:88:9f:
         55:87:5c:38:41:d7:1e:d7:b6:3a:97:35:ee:da:af:e1:e9:ff:
         cc:26:d3:57:8a:8d:11:5b:b2:01:7b:25:8f:7a:73:94:0b:cb:
         df:3f:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:47:26 2025 by rpki-client