This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft
File:                     572C561E62C5EFD228CC467E38D0D738D3613283.mft (raw, json)
Hash identifier:          ssG6FIwLe8qaWYbv3F8RmgAQ7Swe5KTswGMQ9ompULE=
Subject key identifier:   73:91:98:27:EC:B8:FB:A1:44:31:2D:83:CC:18:69:31:49:A6:0E:EE
Authority key identifier: 57:2C:56:1E:62:C5:EF:D2:28:CC:46:7E:38:D0:D7:38:D3:61:32:83
Certificate issuer:       /CN=572C561E62C5EFD228CC467E38D0D738D3613283
Certificate serial:       719E5A1318F49746C4863CB214CDDB34920693C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft
Manifest number:          3A
Signing time:             Tue 16 Dec 2025 00:09:10 +0000
Manifest this update:     Tue 16 Dec 2025 00:04:10 +0000
Manifest next update:     Wed 17 Dec 2025 02:35:10 +0000
Files and hashes:         1: 34352e362e33362e302f32342d3234203d3e20323636313532.roa (hash: Y9J2uTHmkLABizv8KtDXTHau75upCpcQFFEmqnDLFqo=)
                          2: 34352e362e33382e302f32342d3234203d3e20323636313532.roa (hash: OObIvdEw0io9QIrzvM/i5aJp7hf8eRQB6dqteivPgqY=)
                          3: 323830343a336237633a3a2f33322d3438203d3e20323636313532.roa (hash: b6KfwJOEDzxI++79JJ+rHBDVosJpfkudCS7Bq20Yte0=)
                          4: 34352e362e33392e302f32342d3234203d3e20323636313532.roa (hash: QbGHoiqyhLvUz9zbvY1Nd71zwRctp6eTUdmtYa2J/+k=)
                          5: 34352e362e33362e302f32322d3232203d3e20323636313532.roa (hash: 9j4+RIpIQodmWAHMz4gT4h6AYmSl/rzsyiIZhp3V7z0=)
                          6: 34352e362e33362e302f32332d3233203d3e20323636313532.roa (hash: ok78c5lt+14kqPJ+pgTjbP+/OmX6G8YI4gwA5txeaEU=)
                          7: 572C561E62C5EFD228CC467E38D0D738D3613283.crl (hash: lFANlxnIRZ35ZpvvG2kagzwHWu8Af9A2jOKWtz8zA84=)
                          8: 34352e362e33382e302f32332d3233203d3e20323636313532.roa (hash: 3gXEz6Q4TlQycud/lKAVUOgpoxIV7p5fTHaDhpDVrqg=)
                          9: 34352e362e33372e302f32342d3234203d3e20323636313532.roa (hash: xSUYFfa2bRcVnJYieMZdn3C0ZUAeH8tcLrfC+ELXGWw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.crl
                          rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 02:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9e:5a:13:18:f4:97:46:c4:86:3c:b2:14:cd:db:34:92:06:93:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572C561E62C5EFD228CC467E38D0D738D3613283
        Validity
            Not Before: Dec 16 00:04:10 2025 GMT
            Not After : Dec 17 02:35:10 2025 GMT
        Subject: CN=73919827ECB8FBA144312D83CC18693149A60EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:79:1f:f4:00:93:3d:58:d6:b7:a3:70:c4:
                    dc:28:30:7e:91:65:38:3a:5f:1f:cd:7c:2e:bf:eb:
                    a7:2c:03:3b:9d:6d:fb:38:7a:2a:dd:ca:aa:1b:b5:
                    36:73:98:b4:54:e8:3b:ac:3a:16:fe:f5:ed:c5:a8:
                    69:d6:ca:84:15:e2:09:65:44:bf:52:2f:c4:cc:00:
                    2c:12:0c:96:a3:27:fb:76:f5:fe:94:45:13:62:3b:
                    8e:55:f7:f0:04:b1:50:45:d4:e6:2c:70:00:47:2e:
                    39:a0:04:1e:c9:2b:79:e7:51:07:2c:66:40:12:17:
                    ae:45:67:00:87:75:8e:1e:ba:83:ba:78:b8:ad:2d:
                    bf:b6:57:95:08:1c:0d:cf:59:89:c7:5e:22:bc:e5:
                    a8:13:4b:0d:52:19:41:76:30:b1:49:90:cc:57:00:
                    b8:00:88:e7:63:25:ed:2a:39:5d:90:0a:48:5b:ad:
                    a8:71:57:87:b6:8e:02:ed:9d:bc:63:d9:21:d2:8f:
                    40:b3:95:c6:a1:9d:31:6a:49:15:85:dd:51:c3:52:
                    50:2c:a4:ed:0e:1e:9f:a6:a6:3d:5f:c2:cd:84:50:
                    de:a5:c4:c8:2c:42:ce:53:38:54:93:9f:83:c3:7a:
                    7e:c5:74:27:ae:93:df:1a:52:2e:ac:9c:4a:cd:f7:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:98:27:EC:B8:FB:A1:44:31:2D:83:CC:18:69:31:49:A6:0E:EE
            X509v3 Authority Key Identifier:
                keyid:57:2C:56:1E:62:C5:EF:D2:28:CC:46:7E:38:D0:D7:38:D3:61:32:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/572C561E62C5EFD228CC467E38D0D738D3613283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/572C561E62C5EFD228CC467E38D0D738D3613283.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:31:9f:4f:83:35:8d:bc:b2:2d:d7:ef:db:9d:95:4d:d3:87:
         93:9f:ef:85:71:66:30:b7:93:59:e0:5e:32:64:b5:79:51:43:
         a3:90:c5:ab:9a:3d:6a:af:51:47:9c:fc:f2:d6:c3:e1:57:ed:
         85:e6:ad:d3:26:ba:29:33:0e:6b:cd:59:2f:77:cf:4d:94:20:
         f0:68:0b:10:84:6d:6c:1b:df:f1:b7:65:b4:d3:a8:38:61:42:
         02:96:9d:40:37:14:22:10:cb:14:af:e5:db:b4:a1:c3:e2:9e:
         97:96:9a:45:ab:d2:bf:40:20:cd:78:a0:55:6c:f5:02:1e:51:
         14:84:31:80:47:e3:30:20:80:e0:79:6a:1a:4a:46:e1:60:12:
         f8:a6:4b:5d:71:ec:cb:61:f1:af:be:31:3e:78:f3:ae:e4:9e:
         46:59:3d:c3:af:6c:d2:a5:7d:88:ab:eb:72:c2:70:0e:96:48:
         46:03:fc:fe:79:3f:26:1a:e4:c8:8b:f6:f0:d5:56:b3:ce:59:
         08:11:cc:f3:39:a9:f2:4d:48:45:cb:59:ab:52:e3:f4:5b:7f:
         80:42:8c:9d:0c:6b:83:c7:3a:7a:c2:73:92:3f:bf:ac:a1:f3:
         a8:70:81:9b:b2:e0:3c:05:52:bf:26:68:c5:36:80:35:5c:2e:
         5f:c7:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 17:40:48 2025 by rpki-client