This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File:                     57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier:          hmJfGPi7CsTGyhWOaiJxN3R0gMI8jwN/v0VRd4xxtgA=
Subject key identifier:   5D:CF:22:D7:F4:3E:E0:62:FC:5B:92:4E:0A:14:65:E9:6A:11:38:D5
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       65C6143EDE1224811BB0C89D70BDBCDAC4F84CE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number:          033F
Signing time:             Fri 19 Dec 2025 01:10:00 +0000
Manifest this update:     Fri 19 Dec 2025 01:05:00 +0000
Manifest next update:     Sat 20 Dec 2025 01:50:00 +0000
Files and hashes:         1: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: VCvDrQd+QVT3HeVPzsxrfh+4Lco4C+uJntp7xlF++P4=)
                          2: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: 5MPPlDShKVjYItiN+1CcTT2GhsPKBB2Mm13CtGUvX7s=)
                          3: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: fkHQEuSOHoE5dVY5xvX/W+XcEReHvc3/OU7hBrpsvBg=)
                          4: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: B7jNt1FGYUgMflo+0ZsY9hYhkRswxvyJpESyxoI6HXo=)
                          5: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: 6qZ8zmpuOaFhMXoayskpgmq+BGiXMMGpn7OSIsZ6ijU=)
                          6: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: Ufh1eKwDLRCi3LSwXGHN9eEBRlZKln7tVqkgAUmJ7Cc=)
                          7: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: IV+umiwcbaphbwtIAU5dnHoPxm5SaOa5Tk+QrVwz8l8=)
                          8: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: yNpE3IEN8x94OueC84lrCBdj1zZLI9BtE7e50Zrvi40=)
                          9: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: fmfNmeRygsVh71ENtTNaatQpnGkRypqsQcbCzD+SuOI=)
                          10: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: l+wk8TZj73C0qrkJeVqULUdspVp96yKz31vI7QGL1Dw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c6:14:3e:de:12:24:81:1b:b0:c8:9d:70:bd:bc:da:c4:f8:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Dec 19 01:05:00 2025 GMT
            Not After : Dec 20 01:50:00 2025 GMT
        Subject: CN=5DCF22D7F43EE062FC5B924E0A1465E96A1138D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:0b:30:9e:c4:dc:53:b4:85:ce:60:0b:57:
                    16:92:4b:b8:ff:70:51:3f:28:bc:eb:f4:84:7b:1a:
                    b4:13:7c:45:34:f5:80:6a:f7:91:c4:98:cb:c9:ee:
                    27:a9:68:44:3c:6b:78:d6:6a:e1:10:b2:30:43:7a:
                    db:44:9c:d7:1e:b1:bb:1c:3b:e4:7b:bc:8f:af:b4:
                    15:71:be:1f:88:d2:ca:97:60:fb:50:73:fc:31:90:
                    72:99:a4:3f:2c:81:19:7a:8f:a2:a6:62:30:55:16:
                    41:b9:6c:36:ce:1e:8c:09:95:c1:75:1e:ed:95:e8:
                    bd:7d:86:a3:d5:1a:81:67:8e:10:30:4b:f2:63:8b:
                    d0:be:72:20:e0:54:4d:3e:17:ea:c8:f4:37:99:36:
                    4d:d9:f2:da:a2:c4:a0:4a:e5:47:0e:b7:20:64:a8:
                    1b:3a:2a:56:72:4e:11:79:36:e6:10:e7:26:58:b2:
                    e9:16:2d:2a:82:3b:b3:4c:83:2b:88:a5:6f:8f:71:
                    0f:02:a3:95:ca:76:50:01:e5:a1:93:92:ae:85:42:
                    9e:a9:c6:2e:c5:30:0c:e8:60:4c:55:db:80:5e:53:
                    c7:aa:46:63:ea:cf:45:a2:9e:ab:77:f0:3e:3a:bb:
                    0a:d2:96:7e:37:e7:99:dd:24:0c:55:10:b3:21:1b:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:22:D7:F4:3E:E0:62:FC:5B:92:4E:0A:14:65:E9:6A:11:38:D5
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:64:af:d7:a9:fa:86:46:5b:72:14:9f:47:f5:4e:e1:18:
         ab:63:af:7b:38:72:b0:87:22:d4:3b:a3:29:9e:00:cc:17:4b:
         6d:b4:70:33:0c:4f:18:a7:2b:fb:8f:58:69:be:99:b4:86:2f:
         40:f9:30:77:32:10:4e:d8:4c:34:6d:67:71:51:46:b1:d0:7e:
         0a:6c:c8:ac:1e:60:ba:aa:4e:9b:19:25:e3:59:33:58:f3:80:
         7d:f8:92:12:a5:a1:88:1f:0e:8b:9d:7a:77:62:e1:4a:0b:71:
         24:ea:d7:42:ba:85:87:38:9e:68:65:e4:52:d5:7c:4d:3b:c9:
         cb:71:c8:1e:08:66:9b:3b:7f:f7:cc:37:13:54:a7:6d:d3:d2:
         d7:d0:c6:9a:cf:66:74:99:42:5a:73:b9:d5:06:72:c1:6e:46:
         6a:d1:bb:32:54:29:a2:da:14:87:69:a3:1c:83:d5:3f:ed:65:
         37:2f:6d:c2:f8:aa:c7:25:7e:c8:ef:e6:ae:24:a4:5b:69:22:
         e9:ea:5c:97:96:c0:b7:83:0c:bf:4d:98:e7:5a:9b:71:b1:f3:
         17:56:24:ab:c8:c7:85:7b:da:6e:84:79:78:74:1e:19:80:05:
         a5:b1:24:fc:ac:13:31:94:c1:fd:f2:67:b9:9b:45:36:2e:f2:
         e5:3d:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:42:57 2025 by rpki-client