This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
File:                     21619A6DD05DB15FE1B213C8C5C580B755346175.mft (raw, json)
Hash identifier:          gBOyErdr1UHOB4Mcnk44bsEEMJB6mTustGvqdfzkKok=
Subject key identifier:   44:AF:C4:54:38:CB:B3:05:91:DA:73:B7:CE:C0:77:1F:28:77:36:0B
Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Certificate issuer:       /CN=21619A6DD05DB15FE1B213C8C5C580B755346175
Certificate serial:       49DF06A77E96810B0D72A3A1543DCD9758F4D3FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
Manifest number:          0353
Signing time:             Wed 31 Dec 2025 18:50:44 +0000
Manifest this update:     Wed 31 Dec 2025 18:45:44 +0000
Manifest next update:     Thu 01 Jan 2026 19:22:44 +0000
Files and hashes:         1: 323830343a3964343a3a2f33322d313238203d3e20323632393936.roa (hash: tzrgGr/KPcXclXzmZkaYFGbc/XdqrbnWYA+YSUhH6Ew=)
                          2: 21619A6DD05DB15FE1B213C8C5C580B755346175.crl (hash: rha/H981IXFwrg3G/fEQQ1vn6UHmGjmx8VABuuBWQqI=)
                          3: 3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (hash: XyS3jblFpiG2drdAu8D6HmYv5cLQOXgbSYQCQvhd0M8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl
                          rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 19:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:df:06:a7:7e:96:81:0b:0d:72:a3:a1:54:3d:cd:97:58:f4:d3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Validity
            Not Before: Dec 31 18:45:44 2025 GMT
            Not After : Jan  1 19:22:44 2026 GMT
        Subject: CN=44AFC45438CBB30591DA73B7CEC0771F2877360B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:80:81:4b:43:d9:31:8e:26:a0:d9:50:35:
                    26:50:11:ac:6d:b6:5d:38:9f:09:34:44:23:f0:ad:
                    d5:2c:38:d5:3c:54:fd:d9:2f:00:7e:5e:30:e3:d0:
                    84:e8:a4:ca:4c:0c:59:f6:15:33:f8:15:04:ed:e7:
                    83:87:d5:bb:18:66:b5:a2:20:06:fa:4f:ac:97:cf:
                    9e:91:dd:bc:50:66:19:0b:3c:87:26:7b:44:d6:0f:
                    ff:f2:41:3c:58:52:c7:c6:71:37:bc:cf:b6:03:c9:
                    5b:a7:ed:8e:f6:5d:c8:a1:78:f6:9d:51:b6:db:82:
                    c2:c4:af:19:59:01:05:d8:5b:96:20:1b:5b:79:94:
                    21:b3:c1:9a:44:6b:5e:4e:62:62:6b:7d:b7:a6:83:
                    d1:d8:75:ec:bd:93:c0:d3:0c:5f:e3:93:01:52:29:
                    eb:e7:4d:ea:83:8c:df:36:82:98:3a:cd:a9:6d:55:
                    03:37:f3:f3:2f:8d:05:68:77:92:ef:ac:d5:05:6f:
                    c9:a0:58:35:0a:22:86:b4:66:22:e4:9b:9e:c7:5b:
                    3f:06:81:fd:cb:42:50:4f:fa:90:24:70:d1:e3:ca:
                    09:bc:99:12:00:61:68:db:8d:d3:c9:9f:13:4d:7a:
                    88:90:df:09:18:85:94:81:86:13:f6:24:45:47:70:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AF:C4:54:38:CB:B3:05:91:DA:73:B7:CE:C0:77:1F:28:77:36:0B
            X509v3 Authority Key Identifier:
                keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:60:f4:90:99:8b:ee:7c:38:a3:5d:7c:8a:e1:03:24:e9:
         0a:98:cd:6d:2d:bc:10:cc:ca:fd:9a:05:fa:90:e8:f1:4b:e9:
         67:7c:a4:e1:fb:2d:68:ac:13:43:84:51:6c:2e:b1:b4:73:2d:
         ba:e8:00:1a:cd:01:0e:ae:a0:91:08:0c:17:f1:33:57:7b:d9:
         b6:c6:13:8d:61:b3:a4:52:37:cd:db:09:75:ed:72:09:07:92:
         f7:08:00:69:27:d0:12:03:8d:90:79:96:bd:27:e7:5e:db:02:
         51:5d:e2:d3:ab:c5:b6:80:cd:83:e6:ca:d0:e9:25:77:fb:48:
         18:c2:9d:f0:35:6a:78:83:e7:f4:c8:5a:dc:b6:83:f0:cd:f1:
         81:7d:21:fd:8c:c7:8c:e6:d8:5d:e4:4f:fc:38:02:36:be:cf:
         0d:dc:cc:cc:59:a2:bf:9e:a9:85:0e:2f:72:cf:f6:83:c1:f2:
         d6:e2:58:2c:50:4b:92:6f:db:79:07:4a:55:f5:66:21:c5:7b:
         c2:8c:3c:f0:82:af:3b:37:c2:05:6f:b5:df:bc:c2:50:0b:71:
         b5:c8:e5:a0:66:f0:3e:2f:b9:fe:51:a4:ab:f3:f0:47:90:81:
         f4:09:6d:8f:8e:0c:b5:93:45:96:45:9d:b0:ea:56:02:a3:03:
         c7:0b:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 00:48:15 2026 by rpki-client