This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
File:                     A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json)
Hash identifier:          ftmqSxik/Xf9U2FTMKyzywO+kxVJ0Pm0L2J9KGwPhRE=
Subject key identifier:   2A:D6:78:C2:40:F8:95:76:7F:82:39:16:64:27:96:6D:B4:F4:AE:22
Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD
Certificate issuer:       /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
Certificate serial:       24D78503ED9D3F29CF2267B09744FDED30DA21C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 19:44:11 +0000
Manifest this update:     Fri 19 Dec 2025 19:39:11 +0000
Manifest next update:     Sat 20 Dec 2025 21:49:11 +0000
Files and hashes:         1: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=)
                          2: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=)
                          3: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: H8Dr47948wDug40w36KwSBAyCC0qXNcF2IlMa+i+1OY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl
                          rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d7:85:03:ed:9d:3f:29:cf:22:67:b0:97:44:fd:ed:30:da:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
        Validity
            Not Before: Dec 19 19:39:11 2025 GMT
            Not After : Dec 20 21:49:11 2025 GMT
        Subject: CN=2AD678C240F895767F8239166427966DB4F4AE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:ae:a4:cf:8b:63:81:06:84:f7:91:c4:bb:
                    4a:22:29:50:e2:1d:90:a8:4b:b8:10:6f:7b:10:3f:
                    39:96:05:43:39:f4:7b:f1:30:4b:40:34:2e:e1:3a:
                    36:91:7d:10:8a:81:27:94:6f:d5:66:6c:e9:78:31:
                    8a:fd:30:74:41:d2:8e:ad:64:5a:78:09:89:6a:c6:
                    50:88:3c:b4:05:2e:ed:6f:95:00:cf:49:77:77:02:
                    cf:a2:ee:48:47:e2:fc:1a:d2:a1:79:b6:9e:33:42:
                    bd:ed:93:39:79:94:65:15:b4:b7:e2:03:0e:90:f0:
                    74:c5:b2:8f:1a:89:88:05:cc:c3:a3:fd:04:94:30:
                    1f:24:24:65:8e:49:d5:9c:19:ee:c1:64:8e:b5:09:
                    a8:d2:d8:d4:8d:9d:b5:54:14:f1:c3:52:e2:ea:81:
                    62:e6:13:c2:35:29:c6:91:31:dc:b8:27:f1:e1:91:
                    5a:ae:d0:ce:65:8b:a7:db:16:40:cd:db:d6:c4:99:
                    84:0f:4a:32:e1:05:57:8b:f2:08:5c:43:ff:de:31:
                    55:8a:3a:4c:f9:e1:74:5b:dd:52:64:1b:97:df:22:
                    ba:4d:ec:35:74:8e:29:6c:10:43:e8:8a:14:de:95:
                    77:8f:10:ff:c1:88:bb:54:4c:b3:ba:4b:60:de:eb:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D6:78:C2:40:F8:95:76:7F:82:39:16:64:27:96:6D:B4:F4:AE:22
            X509v3 Authority Key Identifier:
                keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:30:0c:6e:66:22:4b:9f:52:c9:a3:82:a1:6c:79:ee:2a:
         e2:b6:f6:98:35:38:63:be:d3:86:11:26:37:87:1a:9f:79:e7:
         78:fa:ff:30:e3:e5:d9:6f:05:94:f9:8f:04:09:e1:f4:66:28:
         b3:e0:32:89:da:71:60:16:7a:19:3f:87:2f:fe:c3:72:3c:95:
         3b:c5:e6:af:45:75:1f:29:25:7b:69:a0:c2:82:5d:8b:0d:1d:
         98:84:bc:b8:6c:47:d2:ad:4b:b7:a7:7b:2e:bf:cf:c3:01:86:
         20:42:1c:cd:82:1f:1e:39:15:74:cf:f3:47:d5:44:61:ad:7f:
         8a:fc:6d:e5:22:ae:c3:0c:4b:21:a8:87:5c:76:6e:92:50:21:
         04:d0:d8:8d:9a:79:6f:e1:d2:95:89:f6:2c:ae:27:95:9f:a8:
         46:82:f2:57:9d:60:97:8f:63:56:fc:29:8d:62:50:01:f3:e5:
         61:e1:ce:8f:78:49:ad:cc:56:a2:3e:3a:56:63:ad:83:f0:15:
         3d:75:2f:b7:07:0f:c0:0a:c6:3a:b6:fc:6e:20:69:50:b5:64:
         b8:56:05:f8:76:ef:5b:39:7b:6f:3d:ee:30:ad:ad:b9:4a:7b:
         c1:a2:32:f8:f1:7e:49:b3:cd:6d:ff:3d:ce:3e:99:e5:ab:94:
         e0:cc:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:11:08 2025 by rpki-client