This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
File:                     638087ED81E6ABF3705A6FE4584C399C4C56720F.mft (raw, json)
Hash identifier:          0NJbRc6jtVt1qo8jNOjG82Kh3cfN9CuunSJp7me7uSc=
Subject key identifier:   B7:F7:D5:E4:F1:B5:03:CD:D1:D6:70:92:67:49:0F:67:E0:E6:A8:F1
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Certificate issuer:       /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial:       6986F80EEC6DE57783E03E2C98E1CB03E4329E00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 01:23:35 +0000
Manifest this update:     Sat 20 Dec 2025 01:18:35 +0000
Manifest next update:     Sun 21 Dec 2025 02:45:35 +0000
Files and hashes:         1: 34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (hash: Tg1mW2HyNi6Bp5xzLiojYMeM6/rAWFkvi81XIs+dgXA=)
                          2: 638087ED81E6ABF3705A6FE4584C399C4C56720F.crl (hash: DbpAsp/Ud+2EIUpV+yQHnS3j6zVtLNR0WKHsW3HHwgw=)
                          3: 323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (hash: uwrWbsPhiahC3q8y1u9h3R8yNsJaXzijtEfhFfeFK1Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
                          rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:86:f8:0e:ec:6d:e5:77:83:e0:3e:2c:98:e1:cb:03:e4:32:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Validity
            Not Before: Dec 20 01:18:35 2025 GMT
            Not After : Dec 21 02:45:35 2025 GMT
        Subject: CN=B7F7D5E4F1B503CDD1D6709267490F67E0E6A8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5b:98:39:16:8d:9c:f0:3d:ed:31:19:b4:b8:
                    8b:f4:46:c5:d8:f1:d0:4a:bf:ff:6a:cb:a4:10:a9:
                    c0:71:78:1c:bf:10:21:43:5c:27:55:e5:88:6b:1a:
                    b5:b0:e8:5b:51:ae:28:28:f0:4e:67:b7:0e:b8:e0:
                    77:7c:d8:09:a3:ea:b3:33:34:32:74:47:35:86:1f:
                    e5:e7:64:67:26:ce:38:58:c0:f4:28:58:7d:c7:72:
                    15:2a:61:aa:6c:80:9b:e4:e4:04:b9:dc:ac:4a:5c:
                    c3:88:50:73:a4:62:b5:47:c8:79:7c:e9:d3:d0:d6:
                    9f:ba:75:9e:aa:03:2c:bc:c9:81:5e:f8:14:41:b0:
                    9d:27:da:39:5a:37:6c:43:6f:0e:47:ce:97:76:2a:
                    bb:98:34:68:8d:46:94:96:4f:73:73:ed:c1:4e:77:
                    1f:32:58:8a:8e:ee:39:6f:ff:c4:6a:dc:ec:5f:ee:
                    91:c5:6c:e3:5c:b3:b5:89:91:8a:60:09:b0:f4:4a:
                    94:e8:38:6f:5c:d5:26:16:18:7f:93:5a:6b:43:a8:
                    98:d6:7a:42:d4:95:42:66:e0:6e:07:8c:0c:f6:ae:
                    af:f3:f8:31:49:ce:16:b4:ad:58:17:65:b3:7c:c7:
                    61:78:4f:45:1e:ab:70:6a:33:fc:f0:6b:d2:1a:4b:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F7:D5:E4:F1:B5:03:CD:D1:D6:70:92:67:49:0F:67:E0:E6:A8:F1
            X509v3 Authority Key Identifier:
                keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:03:c7:9b:0c:0a:40:ff:76:29:c3:ce:be:10:33:8f:e3:fb:
         5e:08:33:06:ec:7a:0a:94:3d:53:4e:7b:72:64:ff:b8:39:45:
         fa:fc:b6:9a:d1:25:18:13:91:08:d7:ec:b5:57:a3:a4:05:2b:
         9e:93:d4:60:9e:61:a6:51:51:1a:c3:6d:c4:c6:70:76:3b:f5:
         84:a0:ed:fc:8d:02:16:6b:63:52:a6:60:27:fe:d3:1d:96:13:
         bb:d7:bd:b2:64:8c:de:10:d9:5e:1f:86:39:8c:a6:98:ee:f5:
         a1:89:c8:e6:97:08:44:8d:65:0e:6c:fb:68:59:ab:e9:8a:77:
         53:26:1f:a6:c1:ae:bd:e3:66:f0:9e:5e:04:fd:f8:c2:5f:3e:
         05:9a:4e:d3:f6:54:5e:7e:fc:eb:8c:f3:b3:7b:85:f3:8f:80:
         ae:a7:48:43:c8:74:21:cd:b0:77:20:e0:aa:8e:6d:13:2a:02:
         3e:8b:54:cb:ca:f5:02:37:8b:f4:a7:a9:a4:f6:69:52:19:88:
         4c:1a:80:40:e6:23:78:3b:a5:3a:a2:2d:8a:e4:6d:af:18:ff:
         91:00:89:4c:31:b6:0c:18:f9:66:95:c2:f8:ee:12:0d:7a:ab:
         2a:cc:84:5c:3d:5c:c8:4d:c6:d4:24:c5:57:29:65:23:f5:4d:
         63:4e:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:04:07 2025 by rpki-client