This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
File:                     686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json)
Hash identifier:          VMc7iwEXs5eW/IFLhCPSTIhIgIHaAeoI9+TOBEIzB3g=
Subject key identifier:   20:A0:69:04:28:2A:B1:13:45:D6:09:04:1D:F2:D8:12:EF:67:F9:4D
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Certificate issuer:       /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial:       2336E8E6F40821CEE1BA527686641AE8EB50EE22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
Manifest number:          0313
Signing time:             Wed 24 Dec 2025 23:36:01 +0000
Manifest this update:     Wed 24 Dec 2025 23:31:01 +0000
Manifest next update:     Fri 26 Dec 2025 02:54:01 +0000
Files and hashes:         1: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: eBr86NdP8UcNjjscNRKlKFP5HRNCnh3UcA1xh8UVip4=)
                          2: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=)
                          3: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: VkRhUbsVKVXP//A3+mr9zFGzEE2wCcBh3VcfUI9bejk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
                          rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 02:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:36:e8:e6:f4:08:21:ce:e1:ba:52:76:86:64:1a:e8:eb:50:ee:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
        Validity
            Not Before: Dec 24 23:31:01 2025 GMT
            Not After : Dec 26 02:54:01 2025 GMT
        Subject: CN=20A06904282AB11345D609041DF2D812EF67F94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:59:53:bd:8f:33:cc:12:a9:08:7b:55:48:
                    8b:81:65:fa:74:9c:85:25:4f:9f:c8:76:e8:6b:49:
                    79:5c:0b:83:13:93:d5:23:c0:cf:c8:04:17:ff:10:
                    b1:75:cf:05:fa:bf:1b:bd:06:30:30:93:d8:a9:53:
                    6a:95:e4:65:3e:f7:b3:ea:17:be:a0:e1:ca:18:3d:
                    8e:8a:90:49:07:b2:8a:56:3e:6c:74:0b:bb:50:c5:
                    03:eb:d8:b3:21:41:94:bf:a9:71:35:4c:c2:3c:04:
                    84:05:af:49:63:6b:f2:63:4d:13:aa:8a:57:ec:3c:
                    e9:6e:fb:e9:67:eb:e9:df:4e:17:4c:c7:9a:74:f2:
                    8a:f7:bb:53:15:04:69:40:59:f7:f6:4b:0a:e4:64:
                    5a:3e:5e:55:48:57:b8:c5:1b:d7:4e:c3:69:a8:b2:
                    ce:b9:f9:60:05:90:c5:14:65:c7:5f:6f:b3:d3:5f:
                    15:bd:6e:73:34:44:25:f5:7f:e0:6b:a2:6f:47:44:
                    2d:f2:5e:8f:cd:76:e7:11:f6:e7:3f:2a:0b:d1:f9:
                    d2:bc:0e:d0:88:b3:3e:d2:d9:11:df:3a:50:4e:40:
                    1c:17:72:62:67:45:55:c9:d8:17:15:ed:2f:7e:f8:
                    e7:be:1c:07:57:c8:10:a0:ad:d4:f1:8e:2b:99:db:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A0:69:04:28:2A:B1:13:45:D6:09:04:1D:F2:D8:12:EF:67:F9:4D
            X509v3 Authority Key Identifier:
                keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d5:f3:be:6c:9a:71:8c:0e:6a:4c:af:92:59:25:b5:7a:06:
         01:f6:c0:92:6e:89:cc:9a:35:9f:c6:fa:22:d1:5c:48:dc:b0:
         10:3a:ba:f2:f9:51:a4:58:ee:51:cd:92:c6:10:93:b8:b9:72:
         ca:ae:89:94:eb:dc:42:c3:0b:88:54:f5:4e:5c:10:c2:29:0b:
         73:2a:0d:3b:2d:62:d8:a4:62:56:f8:65:2a:21:66:67:4f:62:
         b6:a5:4c:6d:37:c3:1d:60:37:ed:1b:a5:a7:c5:98:4b:4d:88:
         47:6e:8a:83:2b:d6:8e:0d:a9:78:74:d7:5e:38:a7:55:c9:a5:
         24:05:2c:49:5e:6a:00:1f:c1:70:99:ff:dc:e4:bb:22:3e:00:
         09:a8:da:b7:91:92:82:9b:25:2e:6c:40:e2:13:4c:d0:46:b0:
         f7:9f:87:ee:b8:a7:24:ef:78:48:d3:8b:82:e0:68:41:33:41:
         6e:8e:02:01:b3:d6:46:08:c7:48:bb:9c:39:9d:b6:54:0f:d9:
         8b:f7:58:ba:b7:10:d0:9d:c9:49:15:d1:c0:16:fe:86:3e:0f:
         d0:be:c9:f1:c9:08:78:7d:28:73:27:f5:d3:e1:26:f8:1d:d9:
         ff:ee:9f:fa:5f:8b:1d:ab:76:0a:4f:40:0d:01:ef:3b:66:e9:
         01:1c:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:37:29 2025 by rpki-client