This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
File:                     3332A8C3B68FE79476953E58B1857203FA676F0F.mft (raw, json)
Hash identifier:          EFDebuOxk45SiRC0p9n6ifPSy2Cdw6aIVroqdpAVMa8=
Subject key identifier:   66:B3:1E:0E:BB:22:AF:F4:C0:D2:27:53:C9:86:6F:74:5B:E5:A5:68
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       28D81441D59BD0C71EE1F4362E1A18D0027048D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
Manifest number:          02C5
Signing time:             Sun 28 Dec 2025 04:59:42 +0000
Manifest this update:     Sun 28 Dec 2025 04:54:42 +0000
Manifest next update:     Mon 29 Dec 2025 07:58:42 +0000
Files and hashes:         1: 3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (hash: 492Ebg7iQemc/TE4N/iR58FeCmeAA91V38unRlDznt8=)
                          2: 3133322e3235352e3134302e302f32322d3332203d3e203533323233.roa (hash: xfBj7EHGkXfpaVkg+i26+Pm0zpmELHrz6cERLXLO/bA=)
                          3: 3332A8C3B68FE79476953E58B1857203FA676F0F.crl (hash: Y4NB4IOoXapU9IXWCUZvFq13fYtuZ6U62lS/w47P8Oo=)
                          4: 3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (hash: e3lF6O0/izSqcl2PK/nGJ0F7KicvIwfhh8Bq3/aSRyE=)
                          5: 323830343a323038383a3a2f33322d313238203d3e203533323233.roa (hash: 5fQ3uPb5SVDlUX3RSxQAq0TlweJO1u7jbGHmsCaKc/w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 07:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d8:14:41:d5:9b:d0:c7:1e:e1:f4:36:2e:1a:18:d0:02:70:48:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Dec 28 04:54:42 2025 GMT
            Not After : Dec 29 07:58:42 2025 GMT
        Subject: CN=66B31E0EBB22AFF4C0D22753C9866F745BE5A568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:ae:c7:b8:b3:ac:4f:78:1a:54:7c:65:78:
                    f0:12:ae:62:6d:5a:9e:9c:10:a1:54:11:d3:ee:e5:
                    4f:aa:5a:d1:ec:64:41:b9:52:63:d3:37:7a:de:14:
                    42:0f:de:75:26:81:fb:a5:97:f1:84:fc:12:5c:20:
                    0c:3f:38:f8:30:8e:f8:bc:45:bf:a5:c0:68:36:af:
                    6a:a0:aa:1c:54:67:c0:d4:68:49:0b:f3:5e:24:7f:
                    ec:c6:1f:1a:88:ad:1d:4f:4a:4f:9c:26:18:17:92:
                    ee:b8:d6:92:7c:89:67:28:30:f4:42:e2:1f:3e:a1:
                    4f:e8:0c:15:de:ad:36:f6:23:20:a8:f6:f1:e1:f6:
                    97:dc:5f:a9:43:3f:67:8a:89:2f:da:ad:8d:fc:80:
                    e3:32:e1:1d:03:44:e3:a0:06:a5:b3:b5:7c:0a:5f:
                    7d:69:27:02:12:93:ec:c8:2c:65:4d:35:87:8a:30:
                    ff:88:b2:0d:26:fd:05:d6:3b:54:21:04:69:0e:a1:
                    e4:20:1a:88:39:c4:4c:84:5a:8a:7b:c1:93:69:8a:
                    98:74:ce:0b:0d:fb:e3:68:58:d9:02:3c:06:6e:52:
                    45:89:4d:99:e8:b4:85:b8:74:0a:27:d6:dd:80:70:
                    8e:c1:53:76:57:33:71:44:da:43:9c:32:e4:bb:ac:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B3:1E:0E:BB:22:AF:F4:C0:D2:27:53:C9:86:6F:74:5B:E5:A5:68
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:d0:84:24:6a:7c:11:24:d1:d6:d8:26:b1:ec:72:1c:c8:
         5e:c5:e3:46:7d:83:ca:f8:76:ee:7e:72:4f:15:99:ec:75:68:
         82:7d:7f:0a:63:0c:76:f8:53:8d:67:5c:75:e7:b3:cd:e8:b2:
         8d:ac:0e:b4:07:be:b0:e7:e9:73:9e:79:06:87:26:86:ba:85:
         a7:5e:e9:e6:4f:b9:75:e9:bc:3b:8a:72:6b:6a:0f:c3:d7:49:
         5a:b8:56:5c:58:13:f8:2a:42:42:c7:4f:75:03:1f:1e:a2:e9:
         b2:da:f9:f0:9e:e2:35:92:75:57:c8:cf:42:46:52:ea:6e:5b:
         24:64:31:47:d7:15:64:6a:06:75:eb:ce:e4:c1:80:46:cc:4a:
         c9:c8:95:fa:06:21:24:46:19:4d:01:d3:3f:8e:00:b0:3e:cd:
         dd:d5:87:a3:ff:71:c0:a4:78:90:00:af:e7:c1:2d:c2:b8:5f:
         aa:11:4b:93:08:54:fb:f3:02:68:02:42:03:4e:5a:14:7f:58:
         29:e6:78:0b:79:29:e6:7e:88:7b:ea:50:62:75:cb:b9:1c:74:
         ba:22:62:56:23:74:30:7d:cd:15:83:85:da:f1:d4:4c:04:36:
         3a:e7:14:00:da:57:55:fe:14:69:39:a5:f3:d5:7e:30:aa:95:
         18:38:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:28:26 2025 by rpki-client