This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
File:                     3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json)
Hash identifier:          ElDYYcpSIwIiz0V3QQB7seVCl1ZNNSXy/W/4WGaJUHw=
Subject key identifier:   42:7D:5E:DA:95:97:E9:DC:DB:61:F2:5E:2E:62:D4:24:FF:B1:AA:4E
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Certificate issuer:       /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial:       1AD425CB0A7F1CA459215AFD7C31E3FD5C993BBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
Manifest number:          016F
Signing time:             Sat 20 Dec 2025 08:28:24 +0000
Manifest this update:     Sat 20 Dec 2025 08:23:24 +0000
Manifest next update:     Sun 21 Dec 2025 09:19:24 +0000
Files and hashes:         1: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=)
                          2: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=)
                          3: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: AYpbTy/h5Fiuy1xY5uXv9sCEmGYlZxpwuMzLNM3zOeA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d4:25:cb:0a:7f:1c:a4:59:21:5a:fd:7c:31:e3:fd:5c:99:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
        Validity
            Not Before: Dec 20 08:23:24 2025 GMT
            Not After : Dec 21 09:19:24 2025 GMT
        Subject: CN=427D5EDA9597E9DCDB61F25E2E62D424FFB1AA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:35:50:9d:c0:cc:f7:f7:49:4f:75:92:98:
                    d2:31:9e:5f:2d:5a:ad:4a:a0:41:25:59:64:da:b6:
                    13:81:04:23:a7:7e:cd:af:51:5d:c7:06:b3:62:21:
                    6a:2e:3b:13:7a:22:ba:4f:6f:53:7b:4e:22:29:cc:
                    b0:cf:68:58:db:71:a8:fe:46:5f:01:20:47:8d:76:
                    da:ac:61:c6:74:ee:a5:cc:c3:e1:10:d4:dd:8b:60:
                    ed:55:04:44:bd:10:5c:b6:39:b8:5f:7e:04:18:6a:
                    20:1b:c3:d1:32:80:b8:8c:7d:31:ff:c9:cb:7a:81:
                    ad:ea:0e:b7:b7:3c:23:29:98:e8:ff:f1:97:0f:ee:
                    7a:5d:d3:c0:60:53:a0:b9:07:5a:f5:40:c8:27:81:
                    d2:9e:30:fa:12:a8:b6:61:a2:89:7a:8a:bc:2c:da:
                    3a:e6:73:14:e2:d1:8a:72:63:2c:f2:01:13:da:c6:
                    87:37:df:5d:b5:31:2d:f4:30:a5:89:c0:42:ba:41:
                    fe:0c:86:4d:03:68:a3:5e:06:93:01:5a:42:2d:21:
                    f4:b4:1b:23:ae:36:8f:6a:84:32:f6:ea:fc:f1:49:
                    8f:15:ed:49:d7:90:5c:66:d0:55:c2:99:ec:22:0d:
                    82:29:44:2c:71:3a:e7:78:33:c6:3b:6b:32:77:6c:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7D:5E:DA:95:97:E9:DC:DB:61:F2:5E:2E:62:D4:24:FF:B1:AA:4E
            X509v3 Authority Key Identifier:
                keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:52:09:a5:9d:05:c7:f6:b3:dd:00:cf:03:f1:ac:e2:13:ab:
         ec:7a:b9:63:d9:9b:ab:8a:5b:8b:77:fb:40:68:68:89:ba:b1:
         14:a5:da:11:9e:47:c5:35:2d:ed:73:98:69:01:95:8b:ab:75:
         33:17:35:2a:d5:c4:37:01:56:c7:b9:82:a4:cc:ff:44:b0:2e:
         df:b7:19:1a:5e:f7:a7:44:25:c2:10:f5:6a:92:df:60:bc:40:
         af:cb:ab:0f:cd:07:fd:b8:11:e1:8b:ac:a3:92:6e:5c:11:0a:
         69:a6:fd:3a:37:b0:6e:e3:81:39:c7:63:85:a7:ae:12:49:06:
         97:d0:d1:71:06:9e:e4:d8:ae:45:b0:a1:68:cf:84:3e:4e:9b:
         39:e6:d5:55:81:7f:67:78:fc:d7:f9:4d:99:0b:4f:06:76:a4:
         c7:ed:dc:7e:09:5a:f4:20:f3:5c:a2:aa:68:b9:8d:a5:f0:8e:
         a3:11:d0:54:2c:cd:07:ef:b3:04:0d:61:0d:b8:91:2b:87:38:
         ca:ad:34:8a:3a:0f:34:68:5b:97:20:b9:14:89:69:a0:74:59:
         58:57:23:cd:7b:53:57:86:61:25:5d:e2:98:a8:70:24:37:7b:
         ff:d3:28:2a:f9:11:d4:c7:f7:e2:51:9a:f2:f5:b6:aa:de:c1:
         85:ff:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:05:06 2025 by rpki-client