This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
File:                     53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json)
Hash identifier:          OlmfLPz5fKHP9MpWaGyPnUWLwTlpHLDjjReT+AQ1NEc=
Subject key identifier:   31:D6:9B:50:E0:A4:65:5C:E1:F9:8A:F5:2E:80:E8:66:CB:85:C2:5E
Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA
Certificate issuer:       /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
Certificate serial:       41B59E790504A7E6A4255E322A4C8B5F527C7A1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
Manifest number:          0321
Signing time:             Sat 20 Dec 2025 19:42:52 +0000
Manifest this update:     Sat 20 Dec 2025 19:37:52 +0000
Manifest next update:     Sun 21 Dec 2025 21:01:52 +0000
Files and hashes:         1: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: +nL7ybLpICw7PZ+2W5pi76/oLneSgE73RRDZtIzKVsE=)
                          2: 323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (hash: c7TzAQ1qYxjPFqrQI6yEYE48I0jeUYIK0uevUAVJrM8=)
                          3: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: jSsiPpdfMJb1jXwIKkDoLy57dvL+Hy33DK8ZFCdBE1w=)
                          4: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: U5sJDf+BVVBUq1pn2BF6PnqaIidCha/Q+sFzTl3Ne7c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl
                          rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 21:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b5:9e:79:05:04:a7:e6:a4:25:5e:32:2a:4c:8b:5f:52:7c:7a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
        Validity
            Not Before: Dec 20 19:37:52 2025 GMT
            Not After : Dec 21 21:01:52 2025 GMT
        Subject: CN=31D69B50E0A4655CE1F98AF52E80E866CB85C25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:65:bf:bb:59:8a:cc:c9:fc:33:58:94:78:
                    4e:c4:29:de:c4:52:f1:98:cc:45:c9:db:e7:98:d2:
                    af:c5:4d:47:94:42:92:fa:83:33:25:0e:90:ba:a1:
                    04:4b:93:55:d4:58:f8:67:92:84:ee:d7:2f:74:63:
                    95:5b:53:cf:07:fb:e0:55:74:92:0c:a8:25:6a:6b:
                    2f:0c:da:a0:1c:fa:1d:e7:15:17:fd:c0:7c:eb:fa:
                    93:e7:8f:16:b9:41:3a:ef:d4:28:d6:13:5c:9e:68:
                    34:3b:61:93:f1:a8:b8:5e:69:a3:42:99:9d:f0:61:
                    89:80:19:0a:ea:84:ae:86:84:cb:19:f6:80:cd:c9:
                    43:3e:d8:ea:98:d0:28:30:22:6f:06:a7:ec:2a:ad:
                    33:d6:50:df:ab:3c:2e:65:bb:1d:b4:6b:51:ec:a9:
                    5c:58:d6:b7:e8:07:b7:5b:70:e3:cf:55:bc:2d:18:
                    3e:2a:bd:b7:46:62:05:8b:7c:25:61:8a:b6:03:6c:
                    19:4c:49:44:13:bc:97:5d:37:4a:fc:b0:ae:2e:89:
                    ef:ac:a3:f7:d7:72:d7:c1:4b:09:3c:b5:18:56:77:
                    c6:4e:a8:a8:a7:57:34:ec:59:9d:b7:39:66:88:3c:
                    e6:6d:cd:15:ac:f4:43:e0:22:70:25:24:06:8f:68:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:9B:50:E0:A4:65:5C:E1:F9:8A:F5:2E:80:E8:66:CB:85:C2:5E
            X509v3 Authority Key Identifier:
                keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:59:69:31:9c:88:d5:f3:aa:ba:e4:8e:fd:b0:70:0c:2f:d6:
         19:4c:42:07:11:6e:44:9d:e2:fd:66:d9:82:16:f7:2a:89:60:
         29:74:5c:0f:b1:5c:d5:90:52:57:19:36:fe:c5:84:fe:59:e2:
         36:45:8d:b0:32:98:6f:af:09:c7:5e:0b:9f:04:6b:29:6b:e8:
         4f:29:4e:a8:60:40:cd:dd:f8:07:c8:9b:46:4d:2e:28:ad:2b:
         5a:a8:df:79:de:b5:d4:8d:d9:50:ec:f6:e0:94:b7:51:14:05:
         3d:b6:de:bc:2f:6d:f5:ed:9f:e7:43:df:85:64:27:de:58:cf:
         59:c8:6c:26:7c:1a:bd:48:6e:e2:87:e0:c8:53:62:08:e9:aa:
         62:1c:4a:a9:93:72:88:9d:6e:56:a3:89:d9:a2:71:3e:a3:da:
         55:c1:e9:29:b6:67:1d:7a:7f:97:fd:6f:84:7e:44:1a:2a:a8:
         65:c1:4a:8c:62:e3:aa:04:ae:55:fe:42:25:44:ab:17:c0:c3:
         a4:1d:b1:cd:08:53:81:6a:ab:65:af:e1:26:10:1f:ae:3f:8d:
         29:1a:4d:28:1f:d7:9b:56:93:31:7e:51:e6:74:01:d5:72:df:
         6e:93:33:13:de:2c:30:a8:e5:20:71:2b:47:b6:4c:08:8d:55:
         6f:cd:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:38:56 2025 by rpki-client