This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
File:                     358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft (raw, json)
Hash identifier:          2KW5MW1OMoZnCh11QVFu2QRkSpXji7urTwPI3jpfcfc=
Subject key identifier:   B1:46:FC:F5:3C:9B:85:3A:2D:C1:A9:D4:5B:A5:87:99:8E:A0:26:C0
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Certificate issuer:       /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial:       7373B05BCD32B48D4969E8347E9F1DBF90A1F228
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
Manifest number:          0345
Signing time:             Fri 19 Dec 2025 20:39:56 +0000
Manifest this update:     Fri 19 Dec 2025 20:34:56 +0000
Manifest next update:     Sun 21 Dec 2025 00:12:56 +0000
Files and hashes:         1: 34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa (hash: n+NKrmH0iKMlaup99tiTLUbAku7VQx5f+Ustl0keBdw=)
                          2: 323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (hash: XtMCYKKNy3smVa5tNSvF7uBud0PzsUGyJwyoHvhmFCc=)
                          3: 358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl (hash: NZlrA0LyrlrV9xo4I8xKzY8jf8sSO1D4xKiuA1/ua1I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl
                          rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:73:b0:5b:cd:32:b4:8d:49:69:e8:34:7e:9f:1d:bf:90:a1:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
        Validity
            Not Before: Dec 19 20:34:56 2025 GMT
            Not After : Dec 21 00:12:56 2025 GMT
        Subject: CN=B146FCF53C9B853A2DC1A9D45BA587998EA026C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:e6:64:c2:51:48:9c:60:30:b4:9e:6a:26:
                    f3:08:63:5e:ac:8a:19:46:56:d0:7c:bd:7a:7e:33:
                    47:b6:fa:92:48:20:40:70:8c:0b:8f:cf:3c:a4:89:
                    db:62:22:9c:3d:3a:ac:7b:f7:b9:53:a5:13:95:44:
                    7b:8b:fe:8f:87:e8:19:3a:1f:74:d4:4e:1a:09:30:
                    83:9f:2e:47:2d:9e:2a:24:0d:67:dc:25:07:3a:28:
                    5a:3b:1a:d4:29:55:19:8d:5c:6f:49:4e:1d:69:62:
                    ca:d0:a0:5b:57:47:47:49:27:c2:60:06:7e:b4:0e:
                    2f:e1:51:e2:aa:ca:7d:f7:ef:fc:a5:9a:6f:e3:19:
                    dc:c0:9e:93:17:74:8d:49:ae:b1:48:ea:d4:9e:c1:
                    da:1e:13:1f:fb:8a:10:7b:f2:30:c5:6d:ea:57:68:
                    08:9f:32:09:d6:55:36:94:09:45:0a:3c:94:e4:2f:
                    ea:ec:a7:be:21:ed:fe:4e:81:4b:b0:70:d5:af:71:
                    f3:57:23:51:7b:25:4a:fc:d2:e2:c1:ee:01:76:0c:
                    54:fb:fd:f8:b8:53:12:0d:3c:06:d9:82:c5:b4:b6:
                    0a:80:8d:90:d7:ad:da:e7:85:6d:db:c8:3e:13:cc:
                    f0:a2:2b:10:f2:22:6b:fd:f0:c5:ec:6f:e8:a5:7b:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:FC:F5:3C:9B:85:3A:2D:C1:A9:D4:5B:A5:87:99:8E:A0:26:C0
            X509v3 Authority Key Identifier:
                keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:48:c3:e2:9a:d6:1c:3c:38:56:fa:41:f5:b1:34:4e:aa:a1:
         44:3b:57:a5:9c:dc:7a:89:5d:d4:52:fd:a8:c8:d7:cd:5f:b8:
         67:0e:0d:0b:fc:67:ef:4e:a2:21:54:58:d0:eb:bd:97:f9:68:
         37:6b:bb:5b:a7:ec:81:86:1d:3d:f3:b8:75:dd:bd:d5:a3:7c:
         ad:62:d1:7b:80:66:b6:05:04:b5:39:5f:7b:de:97:22:de:6f:
         78:37:18:7c:e4:df:ff:17:5c:e5:ad:f3:15:08:4b:52:6d:79:
         1a:26:05:62:5a:39:74:8f:31:7a:a4:36:9e:e5:ab:d2:88:f1:
         ef:a5:3c:78:50:df:9a:40:4f:0a:5f:17:34:75:92:f2:b0:6e:
         10:8c:42:a5:ff:a3:a5:90:aa:40:aa:0a:30:5b:a6:bd:35:35:
         26:f1:52:b0:2b:1d:49:c4:3f:cd:54:0f:1d:7f:a3:42:40:77:
         dc:58:d3:3a:29:66:b9:95:0d:c2:f6:4a:27:5a:eb:89:66:95:
         b7:4c:b5:3c:d0:39:bc:a8:9c:60:b4:b0:1b:8c:e8:f3:13:59:
         b1:d5:45:6c:af:2c:79:e7:8c:67:cc:04:4d:6a:ef:4c:1f:f9:
         89:8b:89:ed:45:67:0c:19:bf:0f:c3:f7:e1:c8:cf:e4:46:17:
         88:3b:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:33:45 2025 by rpki-client