This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
File:                     CA2ED340034D0368230850867C30E245990118A2.mft (raw, json)
Hash identifier:          EDl9suNEMI2P9sNg5GI/dMyAsJx3BdGu1W8sRv3Bnjk=
Subject key identifier:   57:79:CA:F1:22:91:05:78:DC:BA:FC:01:D7:0F:54:9D:B6:BA:96:8F
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       18C8F5719FE9E5199A6C3ADAA2F23B243E24445D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
Manifest number:          03B0
Signing time:             Mon 22 Dec 2025 03:10:00 +0000
Manifest this update:     Mon 22 Dec 2025 03:05:00 +0000
Manifest next update:     Tue 23 Dec 2025 03:10:00 +0000
Files and hashes:         1: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=)
                          2: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=)
                          3: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=)
                          4: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=)
                          5: CA2ED340034D0368230850867C30E245990118A2.crl (hash: n+wU5dar5q9+l+EvnVFxDCrKSdhx2ti9nAUwPbwx0gg=)
                          6: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=)
                          7: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=)
                          8: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=)
                          9: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:f5:71:9f:e9:e5:19:9a:6c:3a:da:a2:f2:3b:24:3e:24:44:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Dec 22 03:05:00 2025 GMT
            Not After : Dec 23 03:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:cc:2b:71:55:c9:87:1a:64:2c:0f:fd:f6:
                    73:88:5c:b5:56:8a:3d:c7:3f:86:1b:36:04:a4:85:
                    d7:f3:b2:10:9e:b6:ac:81:fe:8a:59:73:a8:c2:53:
                    e6:36:aa:64:27:75:06:bc:29:9e:cc:5e:d5:20:64:
                    9e:99:e4:77:fe:50:19:40:fa:24:f3:d5:26:e8:29:
                    9d:95:b1:e4:c7:be:3e:39:73:a9:27:89:4d:81:fd:
                    4b:fc:e3:9f:2c:15:21:ec:7a:b8:26:3b:9f:54:4c:
                    11:d3:a2:fd:c8:f7:cc:57:6d:3b:27:b8:85:a6:54:
                    25:79:80:f9:2d:a5:15:0c:52:70:ae:d1:7c:5f:12:
                    07:27:87:8a:94:4d:5e:22:cb:3c:fd:b1:b3:2a:f9:
                    73:c8:43:7e:dc:cf:af:1e:e3:5e:a4:6f:7f:04:c6:
                    82:05:43:15:cc:c2:93:bf:c7:1d:21:29:8e:16:6f:
                    55:3c:74:30:6c:10:c5:19:92:7b:71:a9:a7:a7:5f:
                    85:12:27:21:8e:92:1a:51:fc:c3:7f:0d:c6:e0:08:
                    e4:e3:24:77:bd:1c:41:9e:0f:c7:62:63:5b:7a:8a:
                    47:87:5c:cd:3e:11:db:c6:f2:f7:3c:76:96:7f:53:
                    32:65:50:2f:78:a0:e4:1f:cb:3f:67:3d:e8:c1:fe:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:79:CA:F1:22:91:05:78:DC:BA:FC:01:D7:0F:54:9D:B6:BA:96:8F
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:a8:81:4a:2b:eb:3a:fd:b1:b9:71:e9:64:4a:db:cd:21:
         b6:b2:25:62:a2:64:df:58:46:53:cc:ce:7f:4e:76:91:b2:d0:
         81:2f:43:fe:e0:ef:b4:d1:97:56:7c:8a:09:8b:2a:11:20:6c:
         98:e8:07:83:17:e4:7f:4a:76:9e:37:3f:68:c7:5b:87:bc:79:
         c1:66:51:e7:c6:0b:cb:72:c1:fe:4b:b8:3f:5e:38:fe:72:f1:
         54:eb:1b:82:b9:bb:be:c4:92:2e:ff:10:fd:c7:20:ae:da:ca:
         3a:93:30:b1:6a:f7:d9:c6:19:69:f6:5c:c5:a2:e3:25:d3:cb:
         a7:fb:20:c8:88:37:05:43:9d:ab:1d:02:70:0f:7d:41:29:7f:
         ed:cc:fb:58:19:c0:8d:18:e9:68:9a:dc:64:fa:37:02:02:a0:
         1a:ba:30:ac:4d:c9:e2:5d:59:a5:40:85:df:7e:14:c5:ab:e7:
         b4:5d:fd:32:8f:8d:eb:6e:7f:cd:47:ee:40:12:8b:1a:f7:19:
         62:c2:5d:cd:8c:64:77:64:3a:ad:57:5d:11:6c:3c:68:66:bb:
         28:ed:60:fe:2c:69:45:15:af:43:9a:1d:6c:cc:c6:bd:03:31:
         d1:9f:61:76:59:e7:52:5b:01:c7:4d:b7:83:6b:75:33:42:e3:
         a9:d9:3f:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:44:00 2025 by rpki-client