This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
File:                     D903348767481BAEFE2C4B534D22308FC61456DE.mft (raw, json)
Hash identifier:          94NPLNeNmiD34SWQOvatafOUDBpFm8+hBixbJ5dAMxU=
Subject key identifier:   FE:78:52:F3:12:1A:97:AF:AF:C2:FA:42:6C:0C:24:F7:1E:1E:AC:59
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       689A195CA1278C67624A7FC3D79EFD9E666CF156
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
Manifest number:          0349
Signing time:             Thu 25 Dec 2025 05:08:38 +0000
Manifest this update:     Thu 25 Dec 2025 05:03:38 +0000
Manifest next update:     Fri 26 Dec 2025 05:47:38 +0000
Files and hashes:         1: 323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (hash: Mw7HvlDrp63aWO1ARIfPFNHv5rafM0coG3YOIzN9QdA=)
                          2: 3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (hash: 9qI1j80SisNpEFrkVgnZx2fMMWt5iqrs2+4KLEk1aLI=)
                          3: D903348767481BAEFE2C4B534D22308FC61456DE.crl (hash: KXlJ+3X4Nn2/AmtRXeOs8wV0FL0jZcnk32oYGzCzbhk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 05:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9a:19:5c:a1:27:8c:67:62:4a:7f:c3:d7:9e:fd:9e:66:6c:f1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Dec 25 05:03:38 2025 GMT
            Not After : Dec 26 05:47:38 2025 GMT
        Subject: CN=FE7852F3121A97AFAFC2FA426C0C24F71E1EAC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:77:24:bc:88:9a:19:2a:42:bf:af:e4:f6:
                    4f:c3:ee:f2:6c:39:1d:4a:e4:33:a6:aa:7f:d2:7f:
                    88:9c:ed:77:8f:42:62:bf:88:41:ac:24:69:2f:4c:
                    f2:07:cd:71:5f:25:02:ca:8a:66:9d:ce:a3:a8:2b:
                    63:e7:aa:dd:2a:39:48:ea:4b:0a:7e:b2:f4:ec:d0:
                    ac:1d:0a:83:d5:6a:84:48:2a:f8:7d:ee:fe:88:67:
                    33:8d:8d:b6:ff:48:2b:8e:87:23:fc:a7:4e:b3:53:
                    8a:15:98:75:3a:2c:f8:96:5d:13:7b:1f:b5:fe:cd:
                    72:59:68:0f:ac:a2:1a:87:70:cc:7b:c1:d0:ba:6e:
                    bb:52:e1:1e:83:9e:35:da:9e:3e:77:bf:d5:18:97:
                    b2:da:6f:68:93:90:59:f6:07:a4:d4:75:28:3d:4a:
                    a0:78:0a:53:b6:8d:97:9d:1b:d3:6e:a1:c8:9e:c7:
                    e9:3c:97:91:c0:c9:8a:ab:cc:64:21:bd:c9:7a:df:
                    cb:f3:15:74:83:6a:e3:92:80:a3:93:3e:26:52:4a:
                    6d:23:26:e5:5c:9f:5a:9e:bf:29:4f:79:3e:8d:26:
                    dc:23:da:9d:3f:d9:e9:d7:d5:f9:b4:be:e8:1f:00:
                    9c:13:7c:2b:06:d9:cd:a1:94:c1:cf:3c:56:ba:0f:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:52:F3:12:1A:97:AF:AF:C2:FA:42:6C:0C:24:F7:1E:1E:AC:59
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7e:8b:06:97:bf:98:c8:b9:c1:13:af:04:9f:36:30:eb:db:
         49:5e:73:c7:f8:57:f0:be:ba:e0:fd:02:42:5f:f9:f2:91:cd:
         a3:46:d6:92:0f:f0:49:d7:1a:9f:a4:8c:fe:cd:c5:eb:ec:51:
         dd:66:4d:3f:f5:9b:34:e7:3e:26:34:af:97:2e:4a:7d:a4:13:
         2a:05:16:08:2d:36:fb:81:9e:ba:35:15:a5:60:e4:d9:06:b7:
         9e:e7:4a:3b:10:c4:74:e7:28:b2:dd:26:b0:0d:6b:56:63:ba:
         12:5c:1b:41:e5:1a:16:6e:f4:15:18:bc:5c:14:35:8a:be:00:
         7f:9e:e3:64:15:cb:ee:bd:99:1b:dc:b4:af:69:b4:fc:40:a0:
         af:db:8d:4d:8a:61:a5:f3:e2:0b:b1:d9:2d:3f:f7:57:35:91:
         37:9b:91:e3:9b:ce:c3:9c:4b:6f:29:10:6e:e4:58:3e:a1:14:
         f4:0e:71:08:53:d8:07:27:62:3c:c5:09:98:05:57:ec:1d:6b:
         4d:31:3e:d6:28:96:03:96:1f:d7:12:1c:64:86:0c:3c:69:7d:
         50:18:bd:82:1e:e7:0a:15:f7:d1:30:f5:11:86:54:fc:00:63:
         34:68:b8:a8:78:76:44:e8:ca:a9:ae:49:40:17:fb:9e:1d:bf:
         d9:49:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:12:26 2025 by rpki-client