This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
File:                     1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft (raw, json)
Hash identifier:          52fB4GZHjuZqcm8MynJ5L4v8fcE+9n/FXlr/YGNNRow=
Subject key identifier:   25:8A:46:98:B5:AD:9B:92:16:6F:86:74:3F:D0:A9:CA:95:82:B5:C8
Authority key identifier: 1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC
Certificate issuer:       /CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
Certificate serial:       2232B8751B4D42FAFA48D9C52F258C4366BF4526
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
Manifest number:          0347
Signing time:             Sun 21 Dec 2025 08:35:44 +0000
Manifest this update:     Sun 21 Dec 2025 08:30:44 +0000
Manifest next update:     Mon 22 Dec 2025 09:09:44 +0000
Files and hashes:         1: 323830343a316262633a3a2f33322d313238203d3e203631373436.roa (hash: zIbE1gzb4KL2dR6A5Igy6RwE0MNboMRQfmyp14gydBE=)
                          2: 1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl (hash: wEijXq02Fhuf+7Vmagbk41knouPuTS+wRr9IsZh8Wic=)
                          3: 3133312e3130302e33322e302f32322d3332203d3e203631373436.roa (hash: orFF+TutPb6kUNSwkmSiLQ0+Jf7+cizfKvfpGz1TEqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl
                          rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:32:b8:75:1b:4d:42:fa:fa:48:d9:c5:2f:25:8c:43:66:bf:45:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
        Validity
            Not Before: Dec 21 08:30:44 2025 GMT
            Not After : Dec 22 09:09:44 2025 GMT
        Subject: CN=258A4698B5AD9B92166F86743FD0A9CA9582B5C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:70:f6:7a:27:9d:0b:a5:10:96:f8:72:00:
                    36:56:b7:e1:99:8b:2e:1f:29:02:b9:98:4c:b7:4d:
                    cb:6b:eb:a5:3e:3e:55:bf:c3:f4:c9:4d:41:97:42:
                    0a:0c:36:46:21:e8:5e:19:dc:37:6d:31:e1:a1:53:
                    93:af:28:c5:a2:c5:ae:ea:8b:b4:ef:21:18:75:81:
                    fe:bb:18:c4:56:8d:fb:56:90:70:b1:2c:be:85:10:
                    a4:d7:b3:af:46:60:8c:99:0a:ba:4d:65:91:af:02:
                    de:98:12:1b:42:aa:66:75:a3:aa:9b:ba:9a:ad:b3:
                    66:ec:ab:d8:c2:a6:92:9e:53:8a:41:4c:f2:c6:64:
                    5c:fb:a5:9f:a6:7c:62:be:33:c9:cd:44:84:c8:f2:
                    b9:15:5c:73:2e:7a:7e:bc:31:35:85:39:03:3b:38:
                    87:0f:b5:f8:8b:f5:88:32:09:4d:55:3d:8a:bc:6b:
                    9d:79:85:4c:b1:00:41:3c:c3:5e:db:d8:ab:a9:63:
                    1b:a1:10:81:65:df:37:32:13:a6:c5:d6:a0:7a:35:
                    5b:a8:f1:a0:0e:c8:f6:74:9b:81:3a:3b:14:2e:fa:
                    68:80:84:27:09:4e:3e:d7:82:a0:90:6f:7a:71:2f:
                    c9:69:e8:70:58:f9:dd:5c:b8:a7:67:b7:bb:28:21:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8A:46:98:B5:AD:9B:92:16:6F:86:74:3F:D0:A9:CA:95:82:B5:C8
            X509v3 Authority Key Identifier:
                keyid:1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:46:2b:5f:d3:be:54:27:91:49:95:f9:90:a4:af:71:63:74:
         ff:3b:6f:57:24:88:90:80:4b:f4:3a:e1:d5:8c:66:c2:bd:7d:
         3a:72:b0:0a:f7:38:23:2d:0c:a3:f4:25:a9:0a:51:54:09:32:
         07:d5:aa:9b:9b:b6:19:fe:cc:54:91:1f:ea:dd:a0:7f:cd:4d:
         48:4c:6f:c6:fa:9f:46:41:12:4a:15:61:b7:2b:33:a9:38:28:
         23:8b:2d:56:06:7b:62:cc:1a:8d:20:f7:00:70:6c:71:3a:46:
         0f:47:de:3b:0b:f3:37:d7:4b:8e:c5:44:29:7f:b6:cb:b6:08:
         d6:cd:27:ed:d9:4b:30:a2:1e:89:4e:94:61:07:8d:ef:22:db:
         5b:f5:e3:28:d6:d0:29:70:d0:0c:70:99:83:cd:41:cf:b8:4a:
         65:54:b2:6f:01:8b:64:5e:41:8b:3a:1d:65:84:39:13:4e:ee:
         d1:cd:87:c8:26:f1:e9:01:04:f5:41:01:61:d0:77:8b:31:d2:
         07:9f:2b:9a:0c:75:79:1d:ec:2e:53:5e:d4:e1:ee:61:c9:91:
         7a:e4:28:13:40:81:f4:c2:c4:40:71:79:b0:a7:52:7b:8c:04:
         0e:9a:cb:8f:70:1f:bd:ac:d9:3c:11:cc:0a:9b:b4:d7:e9:ae:
         49:6a:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:32:52 2025 by rpki-client