This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
File:                     1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft (raw, json)
Hash identifier:          HKnBDsXYoTet7WTdCnb4AQsNiyiw19X9xOuG4qXQg9g=
Subject key identifier:   40:81:55:1D:87:2A:19:C5:AF:52:0E:A0:72:6F:7B:80:35:C0:A5:46
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       2AAB8ED13813515847D25F9DED4E6DEEBE441794
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
Manifest number:          0352
Signing time:             Sat 20 Dec 2025 21:17:28 +0000
Manifest this update:     Sat 20 Dec 2025 21:12:28 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:28 +0000
Files and hashes:         1: 34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (hash: PrgC4LOzfAlaSB1zocGyKmcbdkVwofQrrGw2XfZmg0A=)
                          2: 323830343a363538303a3a2f33322d313238203d3e20323639343935.roa (hash: XOz28XqRjHpVA12Sm/Qo3GU/2/0tXwXz+GU7JOlODos=)
                          3: 1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl (hash: 7hLA+4BlT4sGO7y053Y+a8wWTr2kh/QVqwYpRJLDsaE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ab:8e:d1:38:13:51:58:47:d2:5f:9d:ed:4e:6d:ee:be:44:17:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Dec 20 21:12:28 2025 GMT
            Not After : Dec 22 01:02:28 2025 GMT
        Subject: CN=4081551D872A19C5AF520EA0726F7B8035C0A546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:77:a9:65:ff:52:f5:1d:a9:47:87:3c:2a:
                    3e:a4:08:4b:51:d3:87:c6:c4:4f:40:32:5a:22:e8:
                    80:f5:d7:ad:e9:4c:ce:76:7a:24:ae:8d:ce:be:5a:
                    c9:db:d2:ec:2e:22:c0:c3:e3:ee:69:41:5e:b1:87:
                    ba:6b:e5:36:7f:09:9d:78:e7:3a:74:1f:59:cf:4f:
                    b9:86:cd:37:f2:3b:82:31:f4:7d:60:91:32:63:01:
                    d0:41:d8:d6:a9:41:01:23:e2:91:b7:f8:d3:37:fb:
                    23:29:ae:cd:41:b4:fc:09:f0:83:69:3c:d1:df:88:
                    66:ec:b2:c4:c1:a3:f7:5b:d1:ec:f2:a0:43:ba:c2:
                    07:78:af:3d:fa:02:70:63:7a:0b:2e:3a:ca:4a:ff:
                    cb:71:24:cd:4f:aa:fb:97:3c:03:24:dc:a2:b5:29:
                    35:38:ad:60:00:e9:69:ad:3d:2e:d2:3c:cf:af:be:
                    17:9b:ca:42:e8:8b:09:fb:e7:64:48:bc:f7:3e:25:
                    60:20:ad:53:c0:21:90:ea:8e:0a:d2:9b:c7:a5:2b:
                    f6:0d:54:b1:bc:13:f6:80:3b:c3:dc:25:be:3d:ee:
                    8f:ff:50:82:ed:2c:93:cb:a5:82:a1:1b:2a:21:e0:
                    83:8d:84:d1:4d:a4:2c:e1:05:02:48:2b:2d:b9:03:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:81:55:1D:87:2A:19:C5:AF:52:0E:A0:72:6F:7B:80:35:C0:A5:46
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:3b:7f:67:64:cb:ad:a8:2e:56:c9:47:57:e2:45:ce:55:
         68:a6:94:6d:fc:d1:21:af:a5:ce:f7:ce:05:83:84:44:61:4a:
         62:b1:c8:d1:f0:6f:63:ed:f7:03:11:3b:61:73:b2:8c:e3:59:
         12:35:26:28:c3:94:a9:d5:8d:00:72:0f:3f:60:3a:ec:93:f9:
         ca:d5:70:39:06:0a:1e:27:de:88:80:14:36:22:f7:82:53:bd:
         40:59:e8:d7:83:af:29:57:da:7c:61:6e:f6:5c:44:09:fc:1b:
         94:02:a2:67:5a:17:a0:4e:0c:57:3b:0b:f8:65:26:69:d5:be:
         69:92:5d:07:ec:70:e9:64:41:4c:54:7f:ed:0b:51:ec:43:3c:
         0f:60:fc:c4:fc:1d:1c:48:57:84:ef:36:af:b0:e7:ff:c6:f1:
         19:b1:31:cb:c1:5f:84:2d:21:94:0f:40:7b:d6:5a:72:74:37:
         79:65:69:81:67:e5:07:cc:4d:ab:5e:96:6a:a3:21:0b:62:e0:
         3f:3b:bf:a8:57:39:7e:96:db:48:45:3e:42:db:91:3c:13:b0:
         d4:e2:2f:cc:6d:a0:49:c0:54:e9:49:5f:98:13:9e:1b:0d:82:
         b0:e2:4e:7c:54:17:35:a7:6e:3c:af:49:53:2e:eb:a1:61:da:
         4e:8c:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:29:09 2025 by rpki-client