This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft (raw, json)
Hash identifier:          JueacgI7geedxe1O797L2wX4Vrgb7FxTAg3hfZPc5E0=
Subject key identifier:   06:6C:9E:F2:63:D6:CB:BB:E3:99:17:C2:EF:A1:7C:D3:13:E7:13:98
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       698E0C6E47B01BCD406D4088220B2326BE245BD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
Manifest number:          0204
Signing time:             Tue 23 Dec 2025 19:43:03 +0000
Manifest this update:     Tue 23 Dec 2025 19:38:03 +0000
Manifest next update:     Wed 24 Dec 2025 23:35:03 +0000
Files and hashes:         1: 3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (hash: 8P1eaFp0tA8qC8rMxyfqGAMEpI9v3qQCV5zgBFTyZZg=)
                          2: 323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (hash: vb9YUlejfRTr7kI1aYxQHYliUllejevQ+kOX2MTtokM=)
                          3: 3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (hash: pTb4BZBb+vT1N3y2rOEzZTkDwA1MFDS+AauZA2gcMWU=)
                          4: 3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (hash: 9nEqa5tSdE4U2Bk6FZixssrYslJxLVWNmjZzPYiScQE=)
                          5: 3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (hash: UdG7kbJM/WVCbUaEpLZG+mOcMv/uiRVonmIjQ54ofpE=)
                          6: 0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl (hash: qsmL3aenU6kK8IJgoJ2Oi6IuVLkO1fGpkksYMdFYqOA=)
                          7: 3136302e32302e3137362e302f32342d3234203d3e20323731313130.roa (hash: roCjiwn3BFM68/X9lTNC/eHWHyzOA8loX33ToscVxEs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 23:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8e:0c:6e:47:b0:1b:cd:40:6d:40:88:22:0b:23:26:be:24:5b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Dec 23 19:38:03 2025 GMT
            Not After : Dec 24 23:35:03 2025 GMT
        Subject: CN=066C9EF263D6CBBBE39917C2EFA17CD313E71398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:60:ed:b8:7e:30:ab:54:e5:54:74:9b:99:
                    ac:14:62:a5:a7:61:0a:5c:bc:04:39:e7:24:4e:25:
                    c9:fc:fc:ea:82:a7:02:31:8a:2c:50:a2:ee:b0:12:
                    c1:86:57:1d:34:4a:e3:56:9a:f4:c5:97:05:3d:62:
                    c0:53:89:f1:09:61:16:94:65:37:b2:78:ea:37:94:
                    cf:1d:15:41:b9:8c:e8:78:63:6b:3a:61:67:20:e0:
                    20:13:bd:c7:00:78:be:a6:22:01:d7:fa:52:17:1e:
                    b4:2c:80:f4:04:a0:d8:96:9b:58:22:27:e6:1a:37:
                    83:ba:e2:58:0c:45:3f:c0:f2:af:5f:21:8c:22:5e:
                    75:6f:44:69:5b:e7:9b:3a:21:9e:c4:9e:86:30:0f:
                    58:58:9b:1a:fa:8a:58:dd:8d:1a:8c:ae:85:d5:dd:
                    71:44:f7:97:21:8b:70:1f:14:b1:07:2d:17:dd:5c:
                    3a:c3:b6:24:ef:af:d6:9c:00:ec:43:5a:e7:41:b3:
                    f0:2e:f3:7b:58:b9:57:47:c3:47:55:ad:fa:87:52:
                    67:c4:c2:bb:f6:77:7c:34:68:30:c3:ca:fb:9b:40:
                    f4:93:3b:21:c9:01:45:f7:7c:8b:91:4a:5d:a6:ef:
                    42:fe:20:eb:ac:17:f2:44:d3:99:22:d9:9f:bb:a8:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:9E:F2:63:D6:CB:BB:E3:99:17:C2:EF:A1:7C:D3:13:E7:13:98
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:79:af:0c:85:74:2b:a6:9d:69:81:03:38:b0:58:fe:a4:
         21:c8:38:dd:02:cf:88:c9:5c:34:29:1c:1b:e7:b4:82:3a:d9:
         06:e8:e6:4a:f8:55:10:e0:fd:b1:c3:08:33:3f:d8:77:48:69:
         7c:94:d7:0a:2f:06:40:24:cf:5d:68:c8:55:70:a3:14:b2:d7:
         08:d8:69:1a:30:9e:51:41:dc:0d:d3:22:c5:80:de:7a:76:a4:
         de:ed:19:e1:5a:6c:ec:74:49:37:10:a3:0a:fd:54:49:d1:4b:
         0a:0e:18:b6:dd:00:35:e7:bf:00:8c:9c:09:1e:ac:df:23:35:
         90:48:5b:3b:c2:bd:7a:9f:27:5d:d0:d1:7a:ad:42:9b:f5:ff:
         a1:86:38:b2:1c:8a:97:f2:61:31:88:1e:71:55:37:b3:04:28:
         81:d4:85:bf:a7:29:19:38:a9:eb:f1:2b:95:13:be:57:13:32:
         f6:9f:0f:5a:23:40:18:a3:c2:70:66:94:c5:27:9c:d1:87:9d:
         3a:2a:fa:b6:58:1e:1b:7b:87:5c:b1:64:2b:ca:f1:b2:96:38:
         d4:cf:de:66:c5:2c:3f:5e:98:37:5f:3e:bc:6a:7f:d5:5f:6b:
         de:c9:81:5c:e4:71:2c:6f:40:98:a7:ba:3a:4e:bb:64:73:8d:
         59:06:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:03:15 2025 by rpki-client