This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
File:                     D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json)
Hash identifier:          JP0s+EjS25a2ZFAUAsQ0Cd9Xtq+oDTDQCZgUFWPqEMk=
Subject key identifier:   AD:51:9F:70:12:6C:A3:CB:BD:91:7B:4F:D3:FA:B6:06:E7:04:E4:F9
Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC
Certificate issuer:       /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
Certificate serial:       3CA1F479763F83C0B5C7F1005C02FFE98CA637F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
Manifest number:          0345
Signing time:             Sun 21 Dec 2025 23:47:06 +0000
Manifest this update:     Sun 21 Dec 2025 23:42:06 +0000
Manifest next update:     Tue 23 Dec 2025 01:23:06 +0000
Files and hashes:         1: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=)
                          2: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=)
                          3: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=)
                          4: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=)
                          5: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: /22rOExTvIgQbqLWg5v5SlkXiXnlhn7Iaw6gpm66I8c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl
                          rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a1:f4:79:76:3f:83:c0:b5:c7:f1:00:5c:02:ff:e9:8c:a6:37:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC
        Validity
            Not Before: Dec 21 23:42:06 2025 GMT
            Not After : Dec 23 01:23:06 2025 GMT
        Subject: CN=AD519F70126CA3CBBD917B4FD3FAB606E704E4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:86:e8:13:05:bd:3e:ed:a2:cd:59:9c:35:
                    48:c7:c5:77:ad:f5:ae:bf:1b:ba:52:77:72:f1:66:
                    c4:9d:c9:b4:78:29:bf:68:a5:f4:71:b9:ca:a6:7e:
                    75:81:f8:3c:7d:ea:33:10:1b:c4:b8:2b:7a:c8:2c:
                    59:10:7e:d3:20:a1:c5:66:1d:e2:9f:92:34:ab:77:
                    9f:d7:c4:34:14:c9:57:87:72:bd:3d:81:d2:61:ed:
                    f1:37:bc:a8:80:6f:62:be:78:fa:c4:32:64:42:ca:
                    cf:dd:10:82:a5:b7:61:7c:0b:46:08:4d:8e:5c:ce:
                    4a:13:aa:1b:7c:5c:37:9c:71:97:2a:9a:f8:48:cb:
                    30:69:1d:d8:83:10:78:be:d2:c3:27:84:79:db:57:
                    93:21:dc:92:ac:48:b0:73:3f:94:ce:a4:1c:05:f0:
                    80:d8:89:e0:6f:18:bf:41:3e:c5:16:f1:f2:c7:08:
                    e1:a7:40:c2:48:0b:88:18:6b:f9:6e:b2:cd:e7:15:
                    0e:30:c0:1d:c4:31:67:7e:53:a5:43:af:91:e7:20:
                    76:66:6c:3d:a7:bf:8a:62:55:5c:45:47:ab:fd:b3:
                    a9:7f:f2:73:36:48:3f:5f:b1:f0:c9:ab:73:6f:f0:
                    ee:3e:34:7c:35:b2:7f:25:21:d8:24:ef:5d:14:3c:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:9F:70:12:6C:A3:CB:BD:91:7B:4F:D3:FA:B6:06:E7:04:E4:F9
            X509v3 Authority Key Identifier:
                keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:02:23:8a:03:b7:35:93:79:26:80:a2:01:62:a5:15:5c:0b:
         d9:53:d1:ca:1c:16:81:4b:78:6d:73:73:f6:a6:5d:0d:78:65:
         e5:cb:c9:e3:bf:86:1c:d3:48:35:64:be:fa:f6:0b:ae:cf:42:
         89:54:ec:88:31:9b:07:eb:14:a8:9b:08:4d:bf:bd:bc:a6:f7:
         bf:cc:71:b6:07:ff:1d:1b:c2:64:ef:25:b6:f7:f1:8b:5e:3c:
         f4:4b:dc:05:40:31:f2:9c:60:cc:14:d9:01:89:50:fd:d8:41:
         00:ef:14:95:35:29:84:3c:82:d7:95:2d:90:b9:56:b4:28:66:
         38:4c:b1:ad:b9:3f:f7:2c:4e:5e:1b:4c:ee:09:ce:bc:7d:31:
         65:f7:f0:35:02:3b:09:f0:b3:4b:9b:73:85:9c:0f:d9:52:20:
         70:11:a6:9d:dc:56:b9:85:d0:27:10:24:bb:5e:a0:55:28:19:
         d7:bf:54:43:1b:45:cc:e7:23:30:68:26:1d:bd:e7:16:f9:0c:
         6f:44:9a:fd:13:09:74:98:10:4c:8c:9d:87:e8:fa:50:0f:15:
         21:95:ea:b2:16:0f:f3:6a:21:33:1e:51:11:78:74:88:0f:e6:
         ad:44:2c:79:4b:42:f0:61:c1:7e:3d:14:ee:9a:e8:6c:0d:9c:
         87:f8:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:52:53 2025 by rpki-client