This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
File:                     3D580FBC905909266C331DDA6416C18006A24750.mft (raw, json)
Hash identifier:          NAi67kqfMdT1ovFXTTUVsIcA8gSM3gcNQY8ccjoA8Ss=
Subject key identifier:   11:20:1C:59:79:32:2A:E3:31:AB:52:0D:18:1A:48:E1:3C:AB:50:76
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       6B31C0FB109FA4B2C0D6859B795D4FEFD25B26CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
Manifest number:          AE
Signing time:             Fri 19 Dec 2025 19:52:27 +0000
Manifest this update:     Fri 19 Dec 2025 19:47:27 +0000
Manifest next update:     Sat 20 Dec 2025 21:30:27 +0000
Files and hashes:         1: 323830343a363037633a3130303a3a2f34302d3430203d3e20323639313730.roa (hash: 7aDVf8UKCkQ0go05Bbg1Mgd3eZLU+uMqGEfEXkmvvmQ=)
                          2: 323830343a363037633a3a2f33322d3332203d3e20323639313730.roa (hash: bDMA0Rwtq0RjW/5LOo5tEukpRf+he8sVB8/de82kmvA=)
                          3: 34352e3138312e36322e302f32342d3234203d3e20323639313730.roa (hash: IonYoiapNcoWkoV7loCpJnBAQfRj9zi7/2jHi+OiHh8=)
                          4: 34352e3138312e36312e302f32342d3234203d3e20323639313730.roa (hash: fF2ZZquNDjz4/ByXZ9+ZXR3mW/lSaKKc5Lqcj3VFpYE=)
                          5: 3D580FBC905909266C331DDA6416C18006A24750.crl (hash: vzk5h93w6vRzyk+JcQ3SpqGL3c6wdWYXrd7zQWdXkSg=)
                          6: 34352e3138312e36332e302f32342d3234203d3e20323639313730.roa (hash: AbId8ST2mc685olQVHsKVLlX+OYE7IVqpF7eDxTXeIY=)
                          7: 323830343a363037633a663030303a3a2f33362d3336203d3e20323639313730.roa (hash: xmrE/QmrByeWCyKDJ3nuQH8uo89qoFiJcNF/Gdx2zEo=)
                          8: 34352e3138312e36302e302f32342d3234203d3e20323639313730.roa (hash: yysmFhfl6dWPBbezymnVgq+//1DbGUKn/Y2TVFwYDeg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:31:c0:fb:10:9f:a4:b2:c0:d6:85:9b:79:5d:4f:ef:d2:5b:26:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Dec 19 19:47:27 2025 GMT
            Not After : Dec 20 21:30:27 2025 GMT
        Subject: CN=11201C5979322AE331AB520D181A48E13CAB5076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:5d:37:1b:17:e3:1c:f0:5e:a1:e0:9a:7e:
                    8e:c6:8b:5c:5b:9d:4a:80:5e:85:2a:db:60:79:ee:
                    2e:1e:a3:11:ba:1a:46:d4:f0:2d:cb:a5:82:50:2b:
                    5d:1f:f9:c1:be:c2:b6:1f:9e:db:72:e6:a6:36:db:
                    35:b3:0d:ad:d9:bb:fd:ed:47:25:ad:f0:59:79:a1:
                    6d:a8:a1:f3:00:d4:e1:ce:8d:0c:0e:51:c5:8c:63:
                    e8:3b:01:d4:a2:d3:d3:53:e1:ff:b4:14:be:a4:38:
                    ff:e0:58:26:8e:1a:6d:ea:fb:b5:68:35:99:03:a1:
                    db:3f:46:5d:d0:b9:fd:ef:7a:ad:41:73:27:63:2d:
                    08:d7:f8:3b:2a:1f:09:3a:f5:b4:be:1a:d1:ef:51:
                    af:b8:d6:37:86:85:20:aa:6c:17:ce:c7:f9:06:3a:
                    c8:88:5a:3e:e4:ed:19:e2:3e:23:d7:1d:7b:26:50:
                    f4:69:b5:3c:96:19:71:b7:09:3f:54:1d:a7:87:c1:
                    4a:4b:12:7f:41:52:3d:0d:e6:4c:02:ed:e7:59:d6:
                    54:c3:71:0e:9f:7d:fe:06:ce:43:58:93:b2:29:64:
                    26:b6:14:f8:c9:98:82:80:9d:eb:f5:3d:dd:44:c4:
                    fe:61:6e:af:3a:b9:73:cf:04:52:00:eb:81:6f:e5:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:20:1C:59:79:32:2A:E3:31:AB:52:0D:18:1A:48:E1:3C:AB:50:76
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:29:d2:1d:a6:12:ab:fa:ac:47:17:1b:b2:b3:1c:d0:60:
         f5:aa:d6:6f:52:3d:28:d0:ed:73:f8:39:74:10:27:0d:3c:4f:
         9b:fb:25:34:dd:7d:ce:9b:6d:be:c7:f1:ac:dc:83:43:1d:58:
         ed:72:47:cb:62:99:47:3f:3a:8c:91:1d:cb:2f:7d:5f:80:93:
         83:43:81:e8:fe:09:7a:5c:ae:c5:85:70:e2:a8:c5:45:45:50:
         84:5f:9f:bd:6b:07:03:e5:09:a0:2a:29:7b:62:04:f2:55:2c:
         88:c2:aa:ac:0d:d7:a8:7d:e9:06:67:50:c4:25:2c:77:7d:18:
         f5:fe:c3:eb:6d:d3:2a:22:ab:bf:d8:4b:47:4a:1b:32:38:f3:
         e8:95:ed:8c:ed:b9:39:f5:22:84:3c:d7:09:53:27:54:67:f1:
         a8:83:27:89:ad:fb:e9:e2:18:9d:85:6d:78:1a:21:3a:d5:e8:
         d6:4e:db:13:72:9d:e4:41:d0:7a:a1:14:da:56:c2:09:6d:ff:
         b0:2b:3f:d3:4c:33:7a:36:f0:34:60:e9:07:46:bd:c4:cc:05:
         71:b9:fd:5d:1b:05:3a:b9:ed:bb:60:62:9f:b4:56:90:f0:a5:
         09:1e:f4:d2:1f:20:51:4b:fc:56:67:02:f0:7e:ab:4b:94:88:
         50:f0:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:34:44 2025 by rpki-client