This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
File:                     D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft (raw, json)
Hash identifier:          64T/3kaFJ2xo9WSjDjGFw3wRPIjdpsZS5IB7iC+E68k=
Subject key identifier:   3A:B0:F4:5C:DF:7E:13:06:F1:78:ED:1C:E9:89:C2:D9:9A:CE:40:74
Authority key identifier: D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
Certificate issuer:       /CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Certificate serial:       11BC96CD34522FDDD15DF8515AAADC4B9E73BA48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
Manifest number:          AC
Signing time:             Wed 24 Dec 2025 15:10:27 +0000
Manifest this update:     Wed 24 Dec 2025 15:05:27 +0000
Manifest next update:     Thu 25 Dec 2025 17:30:27 +0000
Files and hashes:         1: D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl (hash: RHKG5pTAMTHcXOXf+BeZKryU9earAlserd9iX6/+9RU=)
                          2: 34352e3136342e3139362e302f32322d3332203d3e20323638363430.roa (hash: 1f4Li89JjfMh3Zvwa4e6/48Ur/rzUCE7uzz/lzOZsCc=)
                          3: 323830343a353434383a3a2f33322d313238203d3e20323638363430.roa (hash: FPH5t3f9p9u23ePvWI4mh8ez4iCBapk+tdB2o6Jl1+E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
                          rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 17:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bc:96:cd:34:52:2f:dd:d1:5d:f8:51:5a:aa:dc:4b:9e:73:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
        Validity
            Not Before: Dec 24 15:05:27 2025 GMT
            Not After : Dec 25 17:30:27 2025 GMT
        Subject: CN=3AB0F45CDF7E1306F178ED1CE989C2D99ACE4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:f7:13:88:75:ec:8d:08:f2:55:92:9b:4d:
                    e7:cb:cf:29:1e:e9:19:71:32:05:0e:91:90:b8:44:
                    21:3c:9b:f7:92:19:3c:94:b2:99:d4:a4:6b:fd:71:
                    e3:15:01:46:28:7a:07:88:d3:4f:1e:41:2a:29:11:
                    85:20:51:ac:36:d6:83:66:e0:77:29:6d:58:a6:bf:
                    b0:16:66:6a:ef:8e:e8:d4:f5:05:78:b0:06:0c:ff:
                    be:ff:89:a0:3c:3f:cc:60:1c:64:54:9a:0d:10:b0:
                    7a:e5:c7:b5:fe:5b:65:06:43:36:6e:20:48:89:50:
                    fc:e9:26:aa:42:b1:4d:35:5c:4d:df:55:69:0f:f2:
                    be:04:c9:c0:53:5c:98:8d:47:cc:3b:bb:f3:1b:eb:
                    fb:23:a0:06:c2:52:71:5c:10:e0:04:a4:98:46:ed:
                    60:a7:4d:d3:2a:8e:d8:78:f6:8c:5f:f6:59:77:2f:
                    79:e5:4f:3f:7c:fe:2d:d6:f2:d9:a0:af:51:2b:d4:
                    11:ee:89:72:3e:9a:cd:9f:ca:40:0e:7d:51:de:5e:
                    22:37:c5:21:9e:bc:e5:3c:a1:ca:82:79:62:19:3d:
                    61:ff:a2:c1:7e:2e:b9:7a:25:bd:47:13:93:af:36:
                    f0:c2:2a:18:de:4e:90:27:54:1b:b3:8b:08:b8:20:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:F4:5C:DF:7E:13:06:F1:78:ED:1C:E9:89:C2:D9:9A:CE:40:74
            X509v3 Authority Key Identifier:
                keyid:D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:04:57:c4:74:f6:3a:97:e0:ae:ba:13:af:55:d4:b2:6f:
         5e:45:40:09:37:50:ee:2d:e7:d1:e4:20:79:e7:1c:d0:88:b1:
         c3:e8:29:be:b7:ab:48:e3:d3:04:7b:7e:ab:3f:59:8f:e9:03:
         b5:c2:5d:b4:ee:51:b9:d9:c1:67:b5:9b:45:6b:92:0e:4f:19:
         8c:f4:43:c1:5d:64:4d:5e:9d:56:ec:43:2b:dd:50:da:3b:ca:
         15:7f:0f:59:07:f6:fa:7a:69:74:5a:d1:80:4c:45:54:1a:f4:
         79:56:04:78:e1:e3:1d:0c:a3:85:43:86:18:8a:19:fb:77:67:
         e1:c2:08:0c:e6:49:6b:74:a0:0a:28:0a:01:86:3f:03:03:f7:
         ba:68:75:dd:b3:07:8d:5a:44:42:bb:25:27:45:a6:78:29:7a:
         f1:5d:97:47:8d:f5:8a:78:89:39:9d:78:96:ea:13:26:12:f6:
         51:b1:26:ac:b4:4e:ac:1c:89:42:dd:7a:6a:32:cd:24:7d:92:
         1e:87:77:d0:c5:69:a6:24:79:c8:08:2f:55:04:e0:7a:d0:c9:
         65:dd:84:c2:4e:67:e0:69:04:8b:94:c9:7f:b5:af:a6:2b:e0:
         57:42:1c:9f:37:02:e7:c5:6d:a1:69:99:5c:1f:c8:d1:29:62:
         8b:ec:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 08:23:15 2025 by rpki-client