This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
File:                     B20E3C8281FB009A48EDFE56131C930D739F11C4.mft (raw, json)
Hash identifier:          UQeRsb3TSKaRz9nCyTefW+5rusQjYz20Q8Z9eE7EkXE=
Subject key identifier:   B7:DD:6B:CB:41:6F:68:14:A8:B2:A7:EF:DE:3B:2E:A3:A3:92:19:1D
Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Certificate issuer:       /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Certificate serial:       3C4AB9AEB4A16C5454A8C26C62203FCFA3A0E06A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
Manifest number:          030F
Signing time:             Wed 24 Dec 2025 08:55:50 +0000
Manifest this update:     Wed 24 Dec 2025 08:50:50 +0000
Manifest next update:     Thu 25 Dec 2025 12:51:50 +0000
Files and hashes:         1: 323830343a323861343a3a2f33322d3334203d3e20323633393732.roa (hash: ahxK+WMTsV39KQhAViLFQ4numR+SobUNh2vqNKZYm0M=)
                          2: 3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (hash: gdg4CkiWZlxLCSS9uiJZl16iA1AfnTQyxIxntLHmqDo=)
                          3: B20E3C8281FB009A48EDFE56131C930D739F11C4.crl (hash: 3ldX4KjEpp4FUzDYjbbVocn2A5wY1TymE3OZJChMVF4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
                          rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 12:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4a:b9:ae:b4:a1:6c:54:54:a8:c2:6c:62:20:3f:cf:a3:a0:e0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
        Validity
            Not Before: Dec 24 08:50:50 2025 GMT
            Not After : Dec 25 12:51:50 2025 GMT
        Subject: CN=B7DD6BCB416F6814A8B2A7EFDE3B2EA3A392191D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:b4:4f:61:38:b4:cd:28:e4:40:f1:d2:26:
                    65:95:80:45:f8:3c:42:fb:e2:14:5a:42:b7:e7:2e:
                    00:25:24:27:2a:90:3a:88:41:47:32:de:66:24:af:
                    35:ad:cd:f5:37:ec:3a:8d:93:37:e2:3b:a6:ce:a3:
                    f8:2e:33:ad:00:13:ac:28:d4:d0:d6:14:35:c4:e2:
                    d8:31:76:f9:a8:f5:f9:21:e7:c8:f1:76:8a:d9:63:
                    d6:66:23:46:85:ba:98:95:f8:4d:45:24:8d:9d:a6:
                    8b:8e:c7:e8:7e:08:f3:6e:b5:10:26:b3:2e:9a:76:
                    c6:de:ed:a6:5d:38:76:ed:4c:c4:4e:f7:e4:c7:d4:
                    73:06:73:63:0f:75:fb:01:0e:4e:60:2b:c9:1c:0e:
                    ca:67:71:33:0e:28:4c:45:4e:db:a8:70:8e:37:4a:
                    46:a8:0b:43:b7:38:83:db:ad:d8:d6:62:5d:3c:90:
                    c4:2e:1e:8a:3d:02:d7:d2:7a:85:74:2c:a5:a9:7a:
                    4b:83:ef:01:b5:d4:d5:9a:99:a2:ac:dc:7c:11:7f:
                    79:10:69:7a:77:d2:39:d0:d4:d7:a3:49:60:31:e2:
                    c9:f6:59:18:fe:6f:6e:d3:55:9f:2c:05:9b:af:7b:
                    22:12:f3:d9:72:dd:66:8d:32:51:1d:4b:e3:92:6f:
                    33:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:6B:CB:41:6F:68:14:A8:B2:A7:EF:DE:3B:2E:A3:A3:92:19:1D
            X509v3 Authority Key Identifier:
                keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:30:26:15:db:ac:3e:a8:29:e4:df:ad:c9:73:90:9f:38:
         49:1b:bd:f6:9b:18:cd:e7:56:32:53:6f:7c:55:5d:81:a3:4d:
         4f:14:6b:bb:90:52:ce:54:e3:38:8d:b2:f4:58:18:8b:4e:6c:
         85:3b:9a:93:de:b5:1e:b6:1f:6f:21:ea:13:d4:a7:7a:78:de:
         34:e2:32:76:a2:a8:ef:ba:1b:6b:fe:ca:25:68:e4:5f:4a:33:
         15:57:c6:f9:b4:65:4f:50:ce:fc:a7:55:90:44:a0:f6:17:8b:
         53:c0:8f:70:e7:67:cc:9a:72:a2:39:ce:fd:cc:35:cd:4b:8a:
         fb:aa:9c:6a:4c:92:40:fb:bf:9f:3b:96:9e:b7:30:8e:cf:52:
         88:6b:27:25:43:77:38:b7:be:6d:04:4a:30:da:df:6e:a5:21:
         3f:d8:82:42:5b:c0:26:68:7b:f3:2e:b9:ee:05:fc:1e:17:f4:
         38:69:1b:ce:9a:f7:68:f2:a0:31:ee:44:c5:a7:34:9e:20:68:
         87:c2:7b:ca:5c:91:11:17:2c:08:b0:66:32:bf:01:8d:18:e1:
         8d:3a:b7:09:99:a5:14:2e:44:2e:56:a4:fe:71:16:d1:a1:f3:
         1f:4f:27:7c:20:ee:ff:35:8c:88:43:d5:cd:c1:44:db:ed:6c:
         13:b7:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:14:42 2025 by rpki-client