This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.mft
File:                     35A70E253FA821C622D2A5E9A95C54F78E659073.mft (raw, json)
Hash identifier:          jigXJY6NCEy3mmc1U00NvkgqJCWPUTwJvMVgv+BkZB4=
Subject key identifier:   45:ED:BB:27:EA:72:56:74:36:39:25:49:08:86:7D:7C:FB:BC:06:BD
Authority key identifier: 35:A7:0E:25:3F:A8:21:C6:22:D2:A5:E9:A9:5C:54:F7:8E:65:90:73
Certificate issuer:       /CN=35A70E253FA821C622D2A5E9A95C54F78E659073
Certificate serial:       7079DEFC75C7F6C1E8765010D0DDE7F6E81737B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.mft
Manifest number:          0341
Signing time:             Sat 20 Dec 2025 01:16:59 +0000
Manifest this update:     Sat 20 Dec 2025 01:11:59 +0000
Manifest next update:     Sun 21 Dec 2025 04:55:59 +0000
Files and hashes:         1: 35A70E253FA821C622D2A5E9A95C54F78E659073.crl (hash: RWu0J/+fGaMGX5D938tvvhVJHq5CY7muDoATzFx+yTQ=)
                          2: 3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa (hash: Pk3Cx29a29rTdonQ4kbVBg6wFJACCesotq5DUlKrT8M=)
                          3: 323830343a313163383a3a2f33322d3438203d3e20323633343339.roa (hash: k6xqXm1efmaKdzDEThTSDPybMhdO5nBTk7I/rlFpbSI=)
                          4: 3137372e39312e3131322e302f32322d3234203d3e20323633343339.roa (hash: hLX5wbqkwx2HkaiOzhbal3ghcKALez16hO2Rs2mTbLM=)
                          5: 3137302e3233312e302e302f32322d3234203d3e20323633343339.roa (hash: WqAlJk0ZRJr9yhbOg+9uwe5oX3qE/AyOK5jeo41pNoE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.crl
                          rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:79:de:fc:75:c7:f6:c1:e8:76:50:10:d0:dd:e7:f6:e8:17:37:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35A70E253FA821C622D2A5E9A95C54F78E659073
        Validity
            Not Before: Dec 20 01:11:59 2025 GMT
            Not After : Dec 21 04:55:59 2025 GMT
        Subject: CN=45EDBB27EA7256743639254908867D7CFBBC06BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:26:8a:13:df:b8:c6:10:68:4a:7b:19:a7:
                    f2:b3:7d:13:d3:d1:c6:01:41:f2:ae:d3:29:cd:05:
                    c1:1e:82:a5:01:e5:24:c0:ed:08:20:0f:11:95:79:
                    ac:dc:38:e5:05:c6:ca:c5:23:18:09:aa:9d:c0:bf:
                    ef:5b:7a:47:da:e6:32:7c:b1:e4:59:d1:58:e8:3f:
                    91:48:b5:f3:f7:43:a2:3a:8a:47:09:52:1a:ac:4d:
                    5c:92:17:de:a0:b0:ab:a8:b9:4e:fd:3a:d8:e5:23:
                    24:7e:e1:94:94:8f:fa:31:b0:45:18:ea:1c:31:2f:
                    95:93:16:75:14:90:64:b3:79:5d:4c:66:9e:27:9c:
                    7a:b3:75:c4:bc:5a:fe:d5:60:ed:44:9d:f0:88:94:
                    72:6f:fe:1f:c7:fd:cd:28:ee:af:ea:11:2f:c6:19:
                    1c:dd:6e:40:e6:ff:76:1c:46:88:87:97:31:7a:35:
                    01:77:81:a4:a9:7e:12:50:93:2c:e0:bf:98:59:1d:
                    a2:bb:50:77:68:ab:b9:e8:ba:88:5f:a1:b3:6b:9b:
                    ed:f2:51:d8:d8:ea:63:9e:28:fb:e5:86:de:f8:9c:
                    6f:ad:66:df:8c:f8:d3:f0:42:66:92:78:68:ef:69:
                    9d:a1:ad:8c:5a:0f:15:9d:c0:90:02:8d:91:47:b1:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:BB:27:EA:72:56:74:36:39:25:49:08:86:7D:7C:FB:BC:06:BD
            X509v3 Authority Key Identifier:
                keyid:35:A7:0E:25:3F:A8:21:C6:22:D2:A5:E9:A9:5C:54:F7:8E:65:90:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:47:92:44:1b:08:e3:ab:ca:99:af:0e:b9:8f:8c:e1:da:
         5d:2f:db:0b:a2:22:5d:97:ec:a7:a4:b0:93:19:e7:ed:a4:dc:
         5e:11:e6:70:e6:0d:51:9f:a1:10:09:23:6e:7c:a1:2d:dc:3f:
         cc:d6:fa:af:28:2f:9a:13:f7:c2:6f:58:52:f3:f8:12:f7:22:
         0b:2a:ff:ac:67:b9:a6:af:38:6f:d5:c1:c8:09:4b:19:2d:67:
         ad:f1:14:0a:24:d8:7d:cf:c1:ea:f9:29:e7:0f:f5:29:41:ed:
         82:f8:43:8c:4a:56:06:60:4c:b7:52:ab:4d:cc:1e:f2:ba:0d:
         82:65:10:23:a7:cb:92:c0:aa:84:8b:71:a2:c2:3e:9c:65:dc:
         4d:df:64:24:7e:ba:76:f3:ab:5f:59:c5:2c:cf:94:aa:f7:35:
         eb:75:7b:72:98:a7:e7:6f:34:f5:3f:e4:78:a6:d6:c7:7d:b0:
         a2:d5:c8:2d:fe:11:f1:96:02:40:45:87:e3:53:70:ca:35:b5:
         14:dd:56:fd:50:20:22:98:15:00:9c:a3:af:ca:6e:33:ae:50:
         12:b0:c4:83:49:e5:ea:a0:5b:3c:90:f0:7b:f8:bb:74:a5:29:
         19:ce:51:31:25:9f:5c:f2:ff:b1:b5:fe:93:b7:62:d5:79:ae:
         89:27:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----