This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          wwwXAePWxTydoOB4p4+5UL0kV8RRNeanjRg0cVqXUDQ=
Subject key identifier:   17:F1:9B:80:6C:82:68:04:0F:81:DA:D8:8F:92:F5:35:4E:3D:EF:7D
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       5C5CE6B2255E319AF9ABC8362C3ADE6F175DD38B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 22:30:00 +0000
Manifest this update:     Fri 19 Dec 2025 22:25:00 +0000
Manifest next update:     Sat 20 Dec 2025 23:34:00 +0000
Files and hashes:         1: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: JWkQzsJ52dAM+WAQ0/+dBPeWAFYjstNERH099oCnXnI=)
                          2: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          3: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          4: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          5: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          6: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          7: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          8: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          9: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          10: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          11: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          12: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5c:e6:b2:25:5e:31:9a:f9:ab:c8:36:2c:3a:de:6f:17:5d:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Dec 19 22:25:00 2025 GMT
            Not After : Dec 20 23:34:00 2025 GMT
        Subject: CN=17F19B806C8268040F81DAD88F92F5354E3DEF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:8d:85:7d:1e:d4:f8:52:f9:4c:a2:1a:0e:
                    8d:f6:0b:06:37:31:a9:a7:19:22:7c:e0:46:05:13:
                    d8:d1:3b:81:3c:ea:16:b5:9d:13:d3:b5:e0:68:b4:
                    a0:e4:e1:a5:51:0b:c4:5c:39:39:37:c4:a3:41:74:
                    3a:cd:e2:9c:a9:b8:cc:3d:43:4c:dd:0f:42:db:33:
                    48:c2:7e:e1:ee:1c:6f:74:57:f7:12:ce:c8:5a:0a:
                    69:e9:f3:e9:02:52:3a:dd:30:23:78:02:16:af:32:
                    73:f8:ec:cc:bb:44:9f:5d:4a:62:17:de:3f:ff:5b:
                    5a:fb:71:2c:b0:63:52:3e:68:09:ed:e7:2f:b3:de:
                    01:a5:8a:47:78:a5:bb:60:0a:c8:3e:db:c1:cb:e4:
                    9b:29:8e:51:16:3a:15:44:78:cf:10:89:02:86:84:
                    a4:c3:8a:a4:cd:93:3e:d6:b7:d1:63:9f:26:cd:69:
                    63:d6:44:8a:6b:ac:c2:b3:45:c4:a6:1a:2b:44:2a:
                    70:68:e3:80:e4:c8:14:54:5c:cc:89:ac:10:9e:26:
                    03:66:c5:40:59:e6:25:69:66:c8:1a:20:f4:f7:66:
                    42:91:d3:6a:a2:72:a5:0e:bb:d2:4f:e4:d3:ec:3f:
                    22:e0:1b:a6:34:aa:f0:75:f2:c3:71:4f:c9:d1:fd:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:9B:80:6C:82:68:04:0F:81:DA:D8:8F:92:F5:35:4E:3D:EF:7D
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5c:68:7b:51:45:77:5c:b5:ab:9d:a4:af:eb:1e:b0:43:f1:
         61:57:02:e5:75:0a:87:37:87:f7:86:f9:02:5d:36:71:2d:c1:
         7f:3a:e1:31:91:bc:4c:04:13:fe:d8:0d:08:7c:09:47:f2:6a:
         57:1d:16:08:ac:fd:2c:7e:ad:4f:7e:92:aa:db:46:39:d9:56:
         c4:63:c2:e0:fe:40:b9:26:6e:59:a9:e0:9c:51:19:72:48:b2:
         ac:9a:0c:84:4f:07:bd:b5:c7:8e:81:e4:db:74:68:56:c3:1c:
         7c:ac:78:14:bc:28:8f:6f:87:32:c8:9c:ca:30:8e:26:b5:fb:
         aa:58:55:85:59:fb:9d:31:3b:73:b0:39:00:da:98:e2:94:a7:
         9e:c3:24:c3:1f:86:31:06:53:a1:20:79:c8:6d:46:58:3c:48:
         c5:2c:fa:ee:5f:a9:de:b7:7d:e6:2b:f0:24:ac:b2:9b:e2:b1:
         29:dc:12:67:52:11:c1:3e:81:9e:63:35:5d:46:fd:0b:c5:18:
         2e:71:63:78:bb:7e:af:c7:44:bb:b8:56:cf:5a:48:bd:e3:1d:
         35:ba:8c:b6:d2:ea:00:4d:af:7c:b4:55:6b:fe:5d:56:36:4e:
         d0:e4:5f:51:d8:b8:68:ea:e9:85:21:e8:db:b9:c2:57:5a:2b:
         56:9b:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:55 2025 by rpki-client