This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
File:                     3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft (raw, json)
Hash identifier:          uhu2HPMzPtAePwPYGFXu+NXZwvNoSTXu4sFT4vF7TlU=
Subject key identifier:   4F:8A:6E:F4:49:0C:43:72:FC:9B:F1:35:8D:0E:9E:31:8D:A0:DF:7D
Authority key identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
Certificate issuer:       /CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
Certificate serial:       70327CD06767CEA0A1B6D1B2F540292D94FA1EDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
Manifest number:          0346
Signing time:             Wed 24 Dec 2025 18:19:14 +0000
Manifest this update:     Wed 24 Dec 2025 18:14:14 +0000
Manifest next update:     Thu 25 Dec 2025 20:51:14 +0000
Files and hashes:         1: 3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa (hash: S3YhKXxvh11ZqYBDin+iLZcG1YldK4Ocmqm+d0Zp85g=)
                          2: 3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl (hash: J836VpOU62f4o3neoW8osSKljEuBPbdsJN3r+LVZQBA=)
                          3: 323830343a376334633a3a2f33322d3438203d3e20323731343837.roa (hash: Hkh/bssDQXLhbOeayDj5BFG93FYbm2DrxU1FgB0KK2A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl
                          rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 20:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:32:7c:d0:67:67:ce:a0:a1:b6:d1:b2:f5:40:29:2d:94:fa:1e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
        Validity
            Not Before: Dec 24 18:14:14 2025 GMT
            Not After : Dec 25 20:51:14 2025 GMT
        Subject: CN=4F8A6EF4490C4372FC9BF1358D0E9E318DA0DF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:87:60:06:e1:5f:08:ca:8e:31:eb:8a:ce:
                    fd:20:2f:8f:68:0b:64:a8:66:d4:57:a0:97:05:0e:
                    3a:d2:1a:73:55:49:45:f4:d5:55:22:03:10:26:c6:
                    3f:40:5e:2b:2a:cd:dd:9c:2e:f4:60:35:45:0c:9c:
                    9e:8f:67:f6:73:fb:ca:cb:39:1f:54:2f:1f:43:bf:
                    dd:17:ec:b7:f4:e7:45:d4:7f:0a:80:d6:6c:f3:01:
                    59:00:9b:7d:61:e1:a7:02:d0:75:1a:88:a4:07:4b:
                    fc:ef:c5:7a:12:41:72:08:d1:a5:f1:d9:4a:fc:bb:
                    08:a7:0f:40:79:31:41:fd:99:58:0e:8a:cd:5c:05:
                    97:a8:c8:49:95:90:5f:4d:d2:c4:49:ed:5e:7a:72:
                    64:c9:1c:93:1f:21:82:44:3c:1c:6f:c6:ad:cc:9c:
                    0d:82:ea:9c:04:e6:40:af:7a:ef:b7:de:ed:a2:ab:
                    90:72:34:fa:6a:21:fc:d0:80:73:8e:6f:84:b3:fd:
                    f5:af:df:80:cd:77:1c:aa:58:d7:fb:30:29:8b:9d:
                    88:29:d9:51:74:3f:fd:56:04:0e:73:78:89:c7:b2:
                    cd:95:fa:bd:a5:a9:33:4b:0b:38:47:cc:50:72:5f:
                    e1:8a:51:a9:1f:b6:ad:f1:79:bb:9e:d1:46:f9:29:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8A:6E:F4:49:0C:43:72:FC:9B:F1:35:8D:0E:9E:31:8D:A0:DF:7D
            X509v3 Authority Key Identifier:
                keyid:3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6c:b0:f3:4a:07:6e:fc:24:24:4a:69:75:a8:6a:0e:9d:70:
         03:53:ac:f4:59:8f:17:6d:e6:1f:05:75:38:8d:d1:2e:c4:c5:
         b1:3e:87:13:2b:19:fa:7d:10:d5:75:3b:81:45:a3:04:6f:7d:
         f3:b8:a7:ae:2e:e6:23:b5:3f:65:60:b5:c9:73:c1:c3:32:12:
         b5:ea:75:b3:02:5a:11:3a:e8:79:d9:3b:b9:25:01:6c:ca:5d:
         05:b2:41:6a:3d:4d:b0:d0:ef:d2:fc:8b:dc:a8:5d:b2:8a:83:
         38:0c:00:03:04:27:ae:63:3b:f3:53:da:cd:eb:93:e3:87:bf:
         97:f4:b8:07:29:00:1b:68:4b:06:e5:6c:c2:75:ae:66:e5:30:
         08:1e:aa:b4:8b:0e:47:30:e0:17:83:64:53:75:14:85:a4:4c:
         89:5c:c3:d4:08:72:83:38:93:c5:6a:8f:e1:99:86:11:50:62:
         32:c2:99:f4:a4:39:11:64:f1:db:e4:20:8e:85:cf:60:c1:de:
         d6:09:2d:89:3c:27:14:b4:bc:cd:81:a3:a5:0e:13:0e:03:0d:
         fe:d3:c8:8b:d4:7b:59:ff:91:67:ac:77:b5:bf:8a:34:d7:28:
         68:d4:e8:5a:a1:f8:d4:93:b0:66:0b:d7:f4:fe:2f:58:08:07:
         9b:aa:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 08:57:42 2025 by rpki-client