This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          t6ymqQ2MkpK9Wh4050fewWgUsARZ6f0ArDN411107ac=
Subject key identifier:   99:A0:1C:DF:96:BC:16:4B:48:7C:55:16:B2:60:D0:9B:E5:15:29:3B
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       523ED4AA111AA62864055D07BA917C7C64E01B96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          0344
Signing time:             Mon 15 Dec 2025 18:25:29 +0000
Manifest this update:     Mon 15 Dec 2025 18:20:29 +0000
Manifest next update:     Tue 16 Dec 2025 20:37:29 +0000
Files and hashes:         1: 34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (hash: BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=)
                          2: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: 1linFWpboI1ZAKpYuEF73c/lJoXP9+XVW4WujD0O7bc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 20:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3e:d4:aa:11:1a:a6:28:64:05:5d:07:ba:91:7c:7c:64:e0:1b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Dec 15 18:20:29 2025 GMT
            Not After : Dec 16 20:37:29 2025 GMT
        Subject: CN=99A01CDF96BC164B487C5516B260D09BE515293B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:db:08:21:e6:8c:76:f6:b1:ac:ce:3f:f5:
                    51:fa:18:b9:95:da:5c:33:01:42:cc:88:4e:e7:38:
                    cf:34:e2:5a:d0:7f:a5:75:3b:f9:87:e8:41:a8:8a:
                    2e:a7:e3:63:ad:41:b6:f2:c3:9c:b8:cf:a3:5a:a5:
                    a1:36:ba:e7:18:c5:a7:dc:47:4e:ba:08:c5:99:ad:
                    3a:1f:83:9f:aa:ba:7f:02:8c:8b:a7:7d:41:b0:44:
                    8f:5e:51:fa:58:a9:e5:7f:0b:64:b5:e2:61:c2:9e:
                    53:86:3d:f6:35:c3:e6:b5:57:d4:4e:87:51:22:b6:
                    08:59:35:85:60:78:17:ab:58:1d:7f:26:b9:e6:3b:
                    f6:d3:45:44:e9:ca:df:05:00:e3:6f:0c:cc:41:09:
                    b1:5c:d3:35:a8:2b:15:10:4d:2d:cf:10:5c:cc:24:
                    4a:92:03:4f:c7:06:4f:04:6d:cd:f8:a9:97:f1:4f:
                    9e:47:bd:90:1e:02:a5:72:00:37:c3:eb:87:be:f3:
                    6d:77:00:1e:c5:5e:64:21:df:80:40:77:86:99:9e:
                    ab:21:e9:50:2f:93:6f:64:2a:24:25:3f:10:c8:bf:
                    3f:dd:8e:30:fc:2c:b5:ce:3c:56:e2:6a:a4:ac:ca:
                    7e:d1:23:ba:a4:09:78:25:f0:98:58:f8:09:f6:8a:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:1C:DF:96:BC:16:4B:48:7C:55:16:B2:60:D0:9B:E5:15:29:3B
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:91:32:f4:98:fb:82:9c:a7:4b:92:ef:f4:28:40:a1:1e:
         51:10:ae:c8:7e:09:a1:c4:6b:88:44:50:f3:f5:cc:2a:a0:1a:
         4b:69:6c:8a:65:5e:14:c3:fb:ad:40:5d:a2:41:18:2e:02:f9:
         96:fc:f9:35:b7:5b:8c:88:b4:e3:89:ab:7e:05:be:a9:57:1e:
         f3:c2:6d:73:f2:33:da:6c:52:f8:69:23:49:d5:4a:ad:97:df:
         79:a2:fb:cd:37:3c:4d:72:fb:88:55:b7:fc:01:53:e6:48:24:
         77:4e:10:a5:be:ec:b9:aa:fa:81:e9:eb:81:f5:34:33:45:c7:
         30:f4:da:47:b4:19:f2:5a:36:64:29:32:dd:29:61:3a:62:42:
         7f:b0:fa:cc:68:82:ed:5b:e4:51:2e:67:af:43:8c:5d:22:e5:
         63:e8:66:cb:e0:ba:fe:c9:73:60:66:e5:b7:8f:6f:bc:9d:50:
         85:cd:ac:e3:41:7b:3b:f3:70:f6:42:82:39:64:42:41:bf:2b:
         b1:b5:7e:57:12:7b:5b:da:8d:99:c4:8e:36:54:2d:db:53:aa:
         3e:ea:31:6a:1d:da:5e:6a:a4:53:1c:35:e7:a5:4b:32:1b:1c:
         4a:1e:b2:76:01:58:c6:f1:3a:b3:cb:06:6f:10:da:4f:30:c3:
         28:0e:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 08:55:54 2025 by rpki-client