This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
File:                     ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft (raw, json)
Hash identifier:          A0/O+4xPEjGAmFvtqXJ4RON0dMI5Wnf/wlgqH9dJDG0=
Subject key identifier:   EB:3F:DD:3A:A6:79:7C:41:D8:9E:57:77:12:CD:07:FE:CA:5C:74:68
Authority key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
Certificate issuer:       /CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Certificate serial:       02CC7DC1AF4EC7428C43D587F9A4BCE260D64949
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 04:32:04 +0000
Manifest this update:     Sat 20 Dec 2025 04:27:04 +0000
Manifest next update:     Sun 21 Dec 2025 06:15:04 +0000
Files and hashes:         1: ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl (hash: ls8EEl4dw/kyY+1CuxQ4PNKWU/mE0RcwYtwbLkqKDbY=)
                          2: 34352e3233312e32302e302f32322d3234203d3e20323637313833.roa (hash: qlr8W9ebrgVGimi7rMegjAbc5ArjIJgimJZ8Cp9doCw=)
                          3: 323830343a343936633a3a2f33322d3438203d3e20323637313833.roa (hash: 3vkXR6J4soYuM8yUllFvpChIo0UEO5wCzzMS3MZnBVo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
                          rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cc:7d:c1:af:4e:c7:42:8c:43:d5:87:f9:a4:bc:e2:60:d6:49:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
        Validity
            Not Before: Dec 20 04:27:04 2025 GMT
            Not After : Dec 21 06:15:04 2025 GMT
        Subject: CN=EB3FDD3AA6797C41D89E577712CD07FECA5C7468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:9c:2a:c8:e8:c4:43:82:45:fe:71:3f:39:
                    4e:36:fa:99:2e:dc:e3:58:91:a4:8f:ef:cf:6f:9a:
                    d6:3c:bd:b8:d7:b7:3b:7b:05:82:fd:ea:4a:a4:bf:
                    8d:ca:0a:30:90:c4:79:71:3d:80:b1:cd:c7:97:b6:
                    d5:ac:6e:d6:a0:9a:9e:72:33:b2:c1:57:13:b4:cd:
                    ed:a3:ca:86:0d:c7:94:14:2e:81:d6:5c:b4:10:30:
                    11:85:b2:ce:d6:b5:03:3e:ea:62:c3:38:2e:81:60:
                    2e:1e:a9:32:51:97:e1:01:61:94:64:7a:1f:a7:b5:
                    c5:57:14:fb:dd:98:53:62:59:95:77:65:ce:cb:34:
                    55:d3:62:d3:1c:a8:ab:08:17:15:1c:ff:df:bb:c9:
                    b9:be:ef:89:76:37:91:18:e0:fa:cb:99:df:11:45:
                    be:e9:95:7c:7d:ec:f7:37:de:78:6c:09:87:47:f1:
                    f0:29:41:a2:28:ab:86:2d:fd:a8:00:7e:dc:e3:37:
                    eb:6c:29:5b:8e:3a:bc:01:fa:04:90:11:63:a2:59:
                    59:bc:ae:9f:d1:09:d1:b5:e7:90:88:4f:15:77:8b:
                    ed:42:f9:db:e7:5f:d3:0a:8e:da:8b:ec:71:9f:5c:
                    a7:0f:72:04:d6:57:12:b1:2a:99:5f:98:17:ca:20:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3F:DD:3A:A6:79:7C:41:D8:9E:57:77:12:CD:07:FE:CA:5C:74:68
            X509v3 Authority Key Identifier:
                keyid:AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:32:c7:23:64:60:a7:8c:f1:10:9a:19:1a:da:69:f1:6c:9d:
         63:fe:fa:f4:ca:57:a7:3e:9f:00:77:19:9a:b2:f1:e1:2e:e1:
         8e:d9:d8:c8:e7:51:78:01:a9:c8:87:d4:6b:6d:01:d8:92:64:
         94:93:66:22:74:f5:0f:74:6b:f1:88:b1:ed:fb:41:4e:67:8f:
         33:e8:62:95:9d:de:fa:1f:ca:6c:58:03:9e:2b:ed:c8:9a:0b:
         06:3d:38:15:c1:ca:97:11:db:10:40:f4:99:ff:e6:11:61:6a:
         d6:31:7b:da:26:ff:0e:d6:1b:4e:9f:3e:fc:66:d6:91:27:25:
         13:94:0c:bf:2c:ea:9c:7e:38:df:eb:d0:c9:a3:3c:cc:7e:2a:
         69:6e:96:1c:c6:c3:68:a1:1f:64:a1:3c:6c:81:e6:6b:07:58:
         58:c5:a4:35:35:5d:a8:cc:32:31:5b:0c:d9:6c:9b:66:28:3f:
         b3:ef:ac:4e:ed:e6:58:ad:75:08:08:d8:38:6a:eb:48:7f:1a:
         dd:49:e8:4d:44:9f:3b:76:a9:28:e9:83:16:de:37:a9:a1:10:
         f2:7f:7a:9d:c4:20:c5:ef:2a:a9:a9:2a:81:72:63:0e:ff:0e:
         1d:ff:a8:48:a8:01:5c:40:25:dd:3f:a0:97:2e:73:e0:f8:f7:
         89:4e:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:28:46 2025 by rpki-client