This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
File:                     3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json)
Hash identifier:          XLB7cySw9tx93fOAH3Jgpdz5Ytvt87eSkdM75DdYHzM=
Subject key identifier:   BC:38:BE:F9:81:80:E0:7B:80:B3:AD:AE:8A:83:BE:DE:65:85:63:0F
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Certificate issuer:       /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial:       3CB275D181D5E1EC75DD372A8305D3FAAA884885
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
Manifest number:          01D4
Signing time:             Mon 22 Dec 2025 15:07:32 +0000
Manifest this update:     Mon 22 Dec 2025 15:02:32 +0000
Manifest next update:     Tue 23 Dec 2025 17:05:32 +0000
Files and hashes:         1: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: 5gf4A5jTNLH9AoV4kZlw2Knr+KxiGra6HbwLEn+B+sg=)
                          2: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: y4BU9tAgBE8KAu9lC6vS02GM0gSjit3IUwZsrYSuI7I=)
                          3: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: 0aFXlJkY7vY6nHQ13emZkyqJtImkUYXm8oiHUaeQtmM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
                          rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 17:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b2:75:d1:81:d5:e1:ec:75:dd:37:2a:83:05:d3:fa:aa:88:48:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Validity
            Not Before: Dec 22 15:02:32 2025 GMT
            Not After : Dec 23 17:05:32 2025 GMT
        Subject: CN=BC38BEF98180E07B80B3ADAE8A83BEDE6585630F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:d5:a6:1f:40:c9:db:7f:ba:0a:93:2c:69:
                    7e:85:5a:ec:a8:f2:6d:cc:e9:ea:d8:4d:a6:0a:5a:
                    0a:cb:43:e6:3e:01:00:33:85:3f:81:c1:1a:78:20:
                    02:01:eb:3d:4e:cd:0a:4b:21:d5:8e:4a:21:f7:a5:
                    6d:f9:02:af:7e:23:a6:02:11:d2:dc:53:a5:f8:bb:
                    aa:53:6b:29:cb:d6:c2:fc:2c:b2:d4:74:be:fa:9a:
                    bb:ab:d5:1a:08:f0:61:03:41:75:38:2f:2a:69:6d:
                    4f:55:55:5a:85:62:96:a5:65:80:d7:a3:3a:5f:47:
                    08:f0:e8:dc:3a:13:37:44:c2:db:2d:62:4a:5e:04:
                    15:dd:b8:41:93:cb:fc:b1:99:5f:a3:1a:60:54:1c:
                    36:8f:42:48:b8:f0:ec:8d:91:c7:db:7f:0b:6a:5b:
                    63:49:72:a1:15:a3:6d:b9:26:07:f0:80:9c:37:4e:
                    93:2b:6d:66:a5:5c:a2:98:e1:68:58:52:fb:81:79:
                    53:0a:99:12:ae:87:46:34:33:cf:d5:b1:e8:9a:4c:
                    7f:79:ad:e6:5d:38:9b:db:ca:7b:8f:9e:df:90:e6:
                    d6:81:8d:58:36:4a:f4:6f:05:e2:53:34:b9:17:0f:
                    73:43:9d:ba:d2:3f:99:8d:81:db:1c:52:68:c4:b7:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:BE:F9:81:80:E0:7B:80:B3:AD:AE:8A:83:BE:DE:65:85:63:0F
            X509v3 Authority Key Identifier:
                keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:44:ad:3a:cd:b4:bf:c0:1a:a8:cf:e1:21:da:c3:01:21:ca:
         52:3f:4e:a9:c1:92:2c:11:4f:ea:91:98:1a:87:fb:a9:b5:4a:
         cd:1c:61:5f:d1:e5:2b:27:fa:fd:b3:07:8c:cf:64:82:59:9c:
         04:0e:c7:db:f3:29:b3:a7:d2:54:f7:a9:46:9b:47:a8:8d:e4:
         ec:79:df:23:9e:1b:bf:ba:82:74:46:cc:b7:7b:01:7a:a1:13:
         98:ac:2e:17:8e:4a:c0:e3:2d:1d:28:74:58:dd:e3:91:a4:d2:
         cd:77:7f:b0:d2:8f:31:31:cc:93:5b:2b:fd:d4:10:f7:78:e7:
         91:7a:f8:9e:fd:88:86:1c:06:25:cd:01:4b:c3:aa:e2:40:3c:
         b3:4e:7f:8d:c6:a0:8a:d6:cd:1b:3f:2d:3d:d6:18:32:71:86:
         5d:b9:ee:42:4e:72:54:9f:30:22:c7:57:74:03:17:12:a9:a8:
         a1:69:6a:10:9c:36:9c:83:5d:13:e9:22:a6:b9:0a:49:2d:2b:
         f8:7c:bf:9c:30:ea:2d:f5:03:ac:49:98:34:9b:c5:3f:bc:13:
         ee:c2:8b:df:f3:e2:24:aa:51:a9:d7:bf:e9:0a:ec:11:83:52:
         db:bd:6c:21:d6:9a:d1:5d:17:66:b2:49:62:2f:82:6a:1f:0f:
         4a:c8:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:47:57 2025 by rpki-client