This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
File:                     3438EF474B88120C954212EE504ACF2C02AF3889.mft (raw, json)
Hash identifier:          vsEq0LHt9ZukM91QOTe+VSrs9UtUUyMauyZDM0ZQW5o=
Subject key identifier:   0F:9A:49:9D:7C:B7:38:A2:A7:CA:BE:8B:08:53:75:CC:48:79:74:51
Authority key identifier: 34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89
Certificate issuer:       /CN=3438EF474B88120C954212EE504ACF2C02AF3889
Certificate serial:       3F3C88DBF21ABB6C0266BF6AED08418CD6FAF172
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
Manifest number:          0148
Signing time:             Sat 20 Dec 2025 01:39:32 +0000
Manifest this update:     Sat 20 Dec 2025 01:34:32 +0000
Manifest next update:     Sun 21 Dec 2025 02:44:32 +0000
Files and hashes:         1: 3438EF474B88120C954212EE504ACF2C02AF3889.crl (hash: B88c1ff20u3Ks4KXElLLuDd25MG7cuNLdqwSpTMK0+s=)
                          2: 323830343a3837633a3a2f33322d3438203d3e203238323032.roa (hash: 3U8v5wWVU5DKuoqKxOZlyA4aH6wQWVHyDsBw39wyRng=)
                          3: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (hash: fzlJfuNfGs98/1MXM9FAPOukrmfvjUc9Upo5Ah/hiSo=)
                          4: 3137372e34342e302e302f31372d3235203d3e203238323032.roa (hash: /U/OngAc0MYV9SINp90LnkMguo0z2IqQ0Y1lvs4W4uw=)
                          5: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (hash: 4NnsqoSeT+5Zn5TL9p8ulO45uiNKI73CuiSSE2jhQp8=)
                          6: 3138392e39312e302e302f31392d3235203d3e203238323032.roa (hash: Hu0ei8r8XFIYW5cidhumkYDbO6Mg8ZzPdHu1MTyIKx8=)
                          7: 3137372e3133302e3132382e302f31392d3235203d3e203238323032.roa (hash: Z6pIhsjnVhIGFKWYZKvCVj5vy8bkp1QZ7wOc64Sp6nY=)
                          8: 3138372e3132302e36342e302f31382d3235203d3e203238323032.roa (hash: CUmohz5mDhwwGIiRcgFRXXFnq1N8P5j4aNSMS9oPTwc=)
                          9: 3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (hash: FcLauEny8HFG+9CDE+cOc2OPV8xlyXFVblqydZFLii8=)
                          10: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (hash: k4ZEWqStZqdeiizwzpxYS/y21HrZDTgVMksarnxQxvM=)
                          11: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (hash: 1/pyHMIAfL06J0VEIZqoHDUBduatU86nbTixn3aNe10=)
                          12: 3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (hash: yweAROg5FhlocO1xEgi3/tdYFuc2BclWrzJHyGWs2t8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl
                          rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3c:88:db:f2:1a:bb:6c:02:66:bf:6a:ed:08:41:8c:d6:fa:f1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3438EF474B88120C954212EE504ACF2C02AF3889
        Validity
            Not Before: Dec 20 01:34:32 2025 GMT
            Not After : Dec 21 02:44:32 2025 GMT
        Subject: CN=0F9A499D7CB738A2A7CABE8B085375CC48797451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:30:2a:dc:ab:1c:59:07:c8:6d:22:4e:ff:
                    73:fe:da:48:d8:9d:54:b0:28:8b:17:c6:e4:4d:f1:
                    06:a1:24:21:55:89:c7:1a:9d:cf:61:06:e9:f3:1a:
                    69:db:db:97:8c:9c:bb:a4:e7:cb:a7:81:2c:9d:a4:
                    2d:be:d1:80:c1:a8:19:ac:d5:de:e9:41:78:d9:fa:
                    9a:50:1e:35:97:b3:1b:83:e1:40:ff:34:2b:cb:dc:
                    b9:5a:88:d1:82:67:40:7d:ca:fc:4a:4f:0f:ea:e1:
                    4b:92:7b:36:ed:db:f7:22:24:34:26:f1:08:11:c6:
                    76:94:c3:85:e5:58:8f:0f:b7:d8:0e:fe:1e:83:bd:
                    61:e6:71:b2:93:ea:38:a2:b4:a7:ac:da:42:00:e6:
                    92:0a:08:91:90:57:ce:b1:96:ce:58:56:c5:8c:45:
                    75:bc:4b:c6:47:1c:97:f2:17:28:8b:a1:fb:02:aa:
                    08:a6:2d:18:0d:fe:41:0c:0e:e0:90:64:a9:6d:bb:
                    ce:ee:7e:c5:39:2d:8a:34:fd:8d:cc:42:ab:7a:19:
                    05:2f:82:31:33:bc:c0:cc:0b:54:d1:88:09:64:be:
                    01:41:c3:11:18:38:0f:38:e6:96:5d:33:ac:4a:dd:
                    bb:a9:e1:5a:34:75:88:55:ab:ba:05:63:f5:1c:91:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9A:49:9D:7C:B7:38:A2:A7:CA:BE:8B:08:53:75:CC:48:79:74:51
            X509v3 Authority Key Identifier:
                keyid:34:38:EF:47:4B:88:12:0C:95:42:12:EE:50:4A:CF:2C:02:AF:38:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3438EF474B88120C954212EE504ACF2C02AF3889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/3438EF474B88120C954212EE504ACF2C02AF3889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:d3:b8:12:63:1d:7c:8e:f1:9f:51:87:bc:c4:95:bc:07:
         d9:f2:f3:c1:8f:ed:c2:5e:85:f8:b2:bd:28:58:95:cc:97:12:
         cc:b8:70:95:6d:77:f4:14:02:b7:55:6d:cc:8f:3a:86:1c:0c:
         ba:88:71:06:81:50:b7:8b:84:d5:f2:57:b8:01:39:ef:fe:b4:
         cc:e5:e2:26:4e:d0:6e:b9:43:5c:b6:23:09:ea:44:ca:2f:c3:
         05:7b:1f:8d:34:5f:06:3c:09:6f:cf:a6:6d:88:7b:6d:ee:46:
         e1:c1:55:f9:a2:3f:16:d3:bd:a8:a6:ff:ae:42:5d:16:33:1b:
         f0:82:70:d6:3d:23:a0:eb:f4:9b:7e:e0:dd:2c:ba:59:f6:c5:
         f2:f7:12:e5:2d:1c:f8:a8:04:f4:6d:d4:fe:be:e6:cc:b0:bb:
         d6:c5:d1:d3:1e:fa:e1:9d:2b:7d:d3:15:9d:fb:08:11:65:59:
         12:9b:ce:7e:85:89:36:64:eb:5e:7a:85:c6:2f:36:8e:8e:b0:
         96:29:26:2f:28:73:17:2b:6e:2c:65:67:81:60:37:53:21:22:
         2f:d6:15:1c:5c:5b:3a:b8:57:fe:7a:69:70:a3:5d:86:b1:95:
         8d:f7:58:e8:fa:f5:dc:b5:74:30:ad:f6:5f:d1:e8:fd:c4:1f:
         fc:9e:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:11:40 2025 by rpki-client