This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
File:                     1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft (raw, json)
Hash identifier:          OTaMRinUN5HpYNSO6LMKOkEvig6/sPPhiQQW//Po0OU=
Subject key identifier:   3B:9A:0B:73:FB:80:34:67:AC:67:02:72:7D:43:37:47:38:AB:56:0F
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       3B8A27EF98A4A1B81C5D15BF8D67E434448953BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
Manifest number:          035E
Signing time:             Mon 29 Dec 2025 19:36:33 +0000
Manifest this update:     Mon 29 Dec 2025 19:31:33 +0000
Manifest next update:     Tue 30 Dec 2025 21:24:33 +0000
Files and hashes:         1: 323830343a363538303a3a2f33322d313238203d3e20323639343935.roa (hash: XOz28XqRjHpVA12Sm/Qo3GU/2/0tXwXz+GU7JOlODos=)
                          2: 34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (hash: PrgC4LOzfAlaSB1zocGyKmcbdkVwofQrrGw2XfZmg0A=)
                          3: 1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl (hash: IOJrwNDjvIBQtHEr6UnZ1i4Myt7iYHdX30+Ox/dMTy8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 21:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8a:27:ef:98:a4:a1:b8:1c:5d:15:bf:8d:67:e4:34:44:89:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Dec 29 19:31:33 2025 GMT
            Not After : Dec 30 21:24:33 2025 GMT
        Subject: CN=3B9A0B73FB803467AC6702727D43374738AB560F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:b1:8f:d6:69:76:cb:b7:7c:c4:b3:3e:fe:
                    5d:2b:51:ec:40:ff:84:3f:3e:5f:ac:fd:43:76:84:
                    68:96:38:8c:76:31:ea:20:74:cf:44:f1:98:69:a8:
                    86:94:cc:dd:7a:12:00:e7:9f:48:91:c7:10:19:3f:
                    c1:ea:a5:1c:67:11:52:0a:12:3b:d6:f5:3b:d3:3f:
                    13:a6:66:c6:45:01:96:97:4b:3d:06:a5:a7:c9:ea:
                    ae:37:56:a3:eb:c7:9e:d1:e2:53:34:df:99:73:b1:
                    0b:95:67:00:da:da:f0:47:99:0f:a5:3f:5b:d2:f9:
                    20:06:91:a6:ee:96:3d:0c:b4:d7:97:34:79:a0:15:
                    10:69:05:0f:e9:61:62:47:e9:fd:1f:5d:fb:79:8c:
                    c3:51:4d:85:6d:72:c2:dc:80:84:1f:ce:52:4b:c7:
                    20:de:de:64:7c:7e:db:be:5b:cb:88:58:8e:a1:2a:
                    47:a4:96:7b:2e:ee:ab:29:aa:1c:5a:bc:a9:4a:7d:
                    0c:b4:b4:1e:0d:16:b3:37:2e:a3:f0:e4:d0:84:4d:
                    36:d3:3c:6d:82:1a:40:ef:5f:31:a1:bc:1a:07:38:
                    18:7a:3b:c8:20:58:d3:f1:bd:70:b5:e5:5a:cd:d0:
                    03:e7:ed:ec:3d:5f:68:d5:ed:8a:9a:13:cd:c2:c0:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9A:0B:73:FB:80:34:67:AC:67:02:72:7D:43:37:47:38:AB:56:0F
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:d1:09:be:42:77:22:c3:a0:59:00:bb:f1:f6:40:aa:d2:
         6c:2e:6b:7c:b0:2a:ae:13:db:88:e2:89:ff:e0:ff:a8:e9:17:
         d7:cd:b9:f2:40:96:3b:90:f4:2d:c1:17:cd:fd:ca:80:c8:17:
         25:f8:52:db:d1:06:97:db:37:17:ab:8a:6a:c3:fa:e4:9e:23:
         41:51:35:e5:bf:12:1c:e2:5a:59:a2:84:5e:9b:9b:8a:a9:15:
         e7:52:58:2f:0a:8b:b8:35:35:bf:13:ba:1c:0d:7b:4d:fa:36:
         52:2a:74:09:d0:ca:c4:26:33:1b:88:e7:c4:fd:47:ed:99:bb:
         9b:7e:bd:c8:b4:d5:5b:7a:a2:94:3c:d4:0b:ce:a0:97:7b:1d:
         db:3d:56:55:88:ed:cf:ee:a6:89:cf:7d:a1:86:43:e5:a7:eb:
         bc:a1:96:14:c8:16:49:73:d1:92:7d:54:31:c2:10:7e:04:9b:
         7f:68:12:a8:0a:a0:dd:74:4f:95:a7:4c:76:e9:3a:e4:f0:51:
         73:85:88:19:b5:47:23:fe:6e:cd:ed:42:92:2b:93:c4:e7:7d:
         3f:a8:d3:96:5a:9f:76:5f:c4:a2:2d:b6:32:8a:0f:cf:b5:a2:
         66:9e:5b:68:2d:98:3c:65:2d:04:82:39:30:a7:8a:3d:3f:3d:
         f4:a1:84:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO4on75ikobgcXRW/jWfkNESJU74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ3OEE0NUQ1QTAzQkJFNDlDN0IzNkM1MzA3QTVDOUJE
QjM5RjhFRTAeFw0yNTEyMjkxOTMxMzNaFw0yNTEyMzAyMTI0MzNaMDMxMTAvBgNV
BAMTKDNCOUEwQjczRkI4MDM0NjdBQzY3MDI3MjdENDMzNzQ3MzhBQjU2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFrGP1ml2y7d8xLM+/l0rUexA
/4Q/Pl+s/UN2hGiWOIx2MeogdM9E8ZhpqIaUzN16EgDnn0iRxxAZP8HqpRxnEVIK
EjvW9TvTPxOmZsZFAZaXSz0GpafJ6q43VqPrx57R4lM035lzsQuVZwDa2vBHmQ+l
P1vS+SAGkabulj0MtNeXNHmgFRBpBQ/pYWJH6f0fXft5jMNRTYVtcsLcgIQfzlJL
xyDe3mR8ftu+W8uIWI6hKkeklnsu7qspqhxavKlKfQy0tB4NFrM3LqPw5NCETTbT
PG2CGkDvXzGhvBoHOBh6O8ggWNPxvXC15VrN0APn7ew9X2jV7YqaE83CwBJbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUO5oLc/uANGesZwJyfUM3RzirVg8wHwYDVR0j
BBgwFoAUFHikXVoDu+ScezbFMHpcm9s5+O4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMS8xNDc4QTQ1RDVBMDNCQkU0OUM3QjM2QzUzMDdBNUM5QkRCMzlGOEVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0NzhBNDVENUEwM0JCRTQ5
QzdCMzZDNTMwN0E1QzlCREIzOUY4RUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJqaHIvMS8x
NDc4QTQ1RDVBMDNCQkU0OUM3QjM2QzUzMDdBNUM5QkRCMzlGOEVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaY3RCb5CdyLDoFkAu/H2QKrSbC5rfLAqrhPbiOKJ/+D/qOkX18258kCWO5D0
LcEXzf3KgMgXJfhS29EGl9s3F6uKasP65J4jQVE15b8SHOJaWaKEXpubiqkV51JY
LwqLuDU1vxO6HA17Tfo2Uip0CdDKxCYzG4jnxP1H7Zm7m369yLTVW3qilDzUC86g
l3sd2z1WVYjtz+6mic99oYZD5afrvKGWFMgWSXPRkn1UMcIQfgSbf2gSqAqg3XRP
ladMduk65PBRc4WIGbVHI/5uze1CkiuTxOd9P6jTllqfdl/Eoi22MooPz7WiZp5b
aC2YPGUtBII5MKeKPT899KGEvA==
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:59:52 2025 by rpki-client