This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
File:                     D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft (raw, json)
Hash identifier:          aLQia3F3Cy5+d7sCVc52XBEK76lkHVWc9hIKgNRqDaE=
Subject key identifier:   B2:B5:B8:F2:23:84:F3:15:0F:A9:08:6D:57:45:94:8A:BA:26:8D:43
Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
Certificate issuer:       /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Certificate serial:       4AC19AA12DEF2E3557AF229ED40995183D4DBFFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
Manifest number:          013B
Signing time:             Sun 21 Dec 2025 17:03:36 +0000
Manifest this update:     Sun 21 Dec 2025 16:58:36 +0000
Manifest next update:     Mon 22 Dec 2025 20:08:36 +0000
Files and hashes:         1: 3133322e3235352e3130302e302f32322d3234203d3e20323634343630.roa (hash: 8KhBvEK0Q7b5QPyXOAPE1nYaZr6TvetPVI5C2wvYYr8=)
                          2: 323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (hash: qd8qZxi7tw5baLaDh+jLIXeBIbcnNo/pWA5jPR+866s=)
                          3: 34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (hash: tDzwNLhp8MedGTGaNGLtT/Fw0Bl48ELMHEmcdqtlsd4=)
                          4: D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl (hash: fYVEzj3QmjJlG5Z6WRthLRfp0DTa2iv4pFIuA8S6rXc=)
                          5: 3136382e3139372e302e302f32322d3234203d3e20323634343630.roa (hash: J5DuMAzhx4KoEFlX3DTQKywifQ6ZKpEHcvRsljmOZxs=)
                          6: 323830343a323030343a3a2f33322d3438203d3e20323634343630.roa (hash: rLhCpfojbkJSBkjdVakfqfdy5v+FGh8VNsiDkLgvf/U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
                          rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 20:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:9a:a1:2d:ef:2e:35:57:af:22:9e:d4:09:95:18:3d:4d:bf:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
        Validity
            Not Before: Dec 21 16:58:36 2025 GMT
            Not After : Dec 22 20:08:36 2025 GMT
        Subject: CN=B2B5B8F22384F3150FA9086D5745948ABA268D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:ba:15:90:4e:91:9b:0d:d8:8f:89:25:11:
                    6c:25:6d:f6:03:95:af:77:26:76:89:ec:e5:67:68:
                    18:c1:06:8a:cf:ef:91:82:b0:93:b2:4a:b7:a5:93:
                    63:64:2f:f0:da:f4:f5:5e:39:78:12:05:62:33:13:
                    09:77:21:01:49:8f:17:42:e1:8f:70:59:a3:cb:9d:
                    c8:61:68:ba:7b:33:57:b4:7b:0d:1d:d6:71:83:e5:
                    e6:e3:d3:2c:ec:fe:75:95:1e:83:e2:cd:d2:30:b4:
                    ab:5a:93:77:84:77:c8:a8:a9:01:c6:cd:1a:85:ed:
                    ca:6f:cb:b0:ef:85:42:7b:15:f3:43:20:3b:bc:0c:
                    8d:b7:ef:dc:ed:e4:a0:ca:2e:4d:b8:85:b9:83:cd:
                    60:f7:36:bf:37:06:78:26:a3:3e:db:39:38:7d:2c:
                    67:2b:56:57:15:b0:15:39:0f:f1:26:7f:f5:cc:a8:
                    24:c9:dc:9c:3b:a9:7b:81:37:06:f1:72:d0:73:0d:
                    e1:61:4e:21:a1:4d:74:c7:54:74:e4:0d:73:28:74:
                    d7:16:61:f2:85:4c:80:c3:03:f2:06:bc:98:fd:51:
                    eb:ba:92:6f:36:d7:bd:8d:d8:03:64:91:d3:9d:16:
                    9c:06:85:05:a5:1d:c6:c2:95:81:51:ef:22:cf:c3:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:B8:F2:23:84:F3:15:0F:A9:08:6D:57:45:94:8A:BA:26:8D:43
            X509v3 Authority Key Identifier:
                keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:31:cc:b7:96:34:e3:c5:21:b9:ad:65:37:25:64:c6:81:
         40:c9:ac:9e:00:eb:4c:38:c4:22:ac:33:3d:f8:67:21:b6:a0:
         3a:ee:42:bd:9c:79:03:6d:6d:68:35:47:4a:86:3f:24:90:3b:
         98:86:3c:d5:52:16:13:f0:71:8a:cb:7a:f6:19:68:78:23:74:
         87:56:5a:25:fa:47:36:23:b8:e1:46:d0:62:ad:ea:38:9f:c8:
         c3:d7:12:4c:ba:ba:c5:a7:b3:58:ab:14:b8:54:dc:d4:25:26:
         4a:1d:51:7b:47:4f:30:89:42:04:48:d1:6e:44:9c:47:5b:60:
         9a:4a:39:d4:c6:05:b4:3a:62:c0:5e:42:c5:db:be:e4:00:4b:
         1e:17:01:27:f7:a0:8d:60:6c:c9:56:31:91:06:e9:93:dc:33:
         b9:ca:db:da:95:65:ca:40:2c:dc:5d:9b:97:14:7c:a2:25:d9:
         b3:a9:b5:27:e1:5c:36:30:07:54:7d:00:79:eb:fb:2a:35:e8:
         38:83:c1:c7:3c:37:ad:4c:60:cd:0b:73:56:01:b0:a7:ac:8a:
         63:2d:60:c8:f9:70:1b:a5:98:60:12:21:59:01:b0:39:a6:f3:
         ce:d6:8a:69:ac:b6:43:97:24:36:b8:88:62:e6:52:7c:ec:f7:
         fb:81:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:34:12 2025 by rpki-client