This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File:                     57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier:          L6qxrF0efP0v23q0nzmZihdOxB/pxWEDHYznVlknrPE=
Subject key identifier:   77:2A:60:FC:F4:43:91:AE:5F:25:C0:15:42:5A:E4:64:A3:64:E2:FC
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       1363CAA1DEBEDBA9331E15A200518D84CFFE506F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 17:50:00 +0000
Manifest this update:     Fri 19 Dec 2025 17:45:00 +0000
Manifest next update:     Sat 20 Dec 2025 19:20:00 +0000
Files and hashes:         1: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: 5MPPlDShKVjYItiN+1CcTT2GhsPKBB2Mm13CtGUvX7s=)
                          2: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: IV+umiwcbaphbwtIAU5dnHoPxm5SaOa5Tk+QrVwz8l8=)
                          3: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: VCvDrQd+QVT3HeVPzsxrfh+4Lco4C+uJntp7xlF++P4=)
                          4: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: fkHQEuSOHoE5dVY5xvX/W+XcEReHvc3/OU7hBrpsvBg=)
                          5: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: 6qZ8zmpuOaFhMXoayskpgmq+BGiXMMGpn7OSIsZ6ijU=)
                          6: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: B7jNt1FGYUgMflo+0ZsY9hYhkRswxvyJpESyxoI6HXo=)
                          7: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: fmfNmeRygsVh71ENtTNaatQpnGkRypqsQcbCzD+SuOI=)
                          8: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: yNpE3IEN8x94OueC84lrCBdj1zZLI9BtE7e50Zrvi40=)
                          9: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: Ufh1eKwDLRCi3LSwXGHN9eEBRlZKln7tVqkgAUmJ7Cc=)
                          10: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: Yo9N50i0UAuYHeWjAg+SI605yTGATvIE3cyJHfNaZHs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:ca:a1:de:be:db:a9:33:1e:15:a2:00:51:8d:84:cf:fe:50:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Dec 19 17:45:00 2025 GMT
            Not After : Dec 20 19:20:00 2025 GMT
        Subject: CN=772A60FCF44391AE5F25C015425AE464A364E2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:4a:fe:9f:61:ec:d6:57:1d:d4:e3:c0:30:
                    cd:e4:b4:02:44:32:85:e2:f5:55:f7:b1:14:08:ec:
                    7f:09:ac:54:6e:01:72:03:e0:13:8a:ca:b5:80:81:
                    22:7d:71:76:02:fd:f6:27:c9:dc:b7:a6:da:53:d8:
                    b8:7c:99:57:64:bb:66:b4:ff:04:68:cc:11:ec:79:
                    ba:61:d8:ca:80:58:10:a1:d1:dc:a5:03:59:04:6e:
                    bc:ba:6b:e1:77:09:95:14:02:7f:7d:d9:da:5c:2d:
                    62:54:af:35:b5:71:2e:dd:56:44:8a:57:39:c7:fa:
                    45:3e:9e:e8:3d:96:d2:77:25:e8:91:ea:8c:7e:fc:
                    c2:65:66:7e:9f:18:2f:32:94:d8:f9:62:c2:0b:b4:
                    bd:12:20:29:38:5c:79:e1:b0:ea:ab:4b:f0:23:65:
                    43:50:09:ec:fc:46:05:48:8e:d5:9a:05:78:06:bf:
                    43:c8:90:46:a6:9c:e2:61:f9:13:d5:24:c7:f3:0c:
                    80:06:48:85:35:97:bc:a3:0a:e2:7f:5e:27:15:0a:
                    73:9e:ca:e1:d6:1e:cb:44:65:02:b0:19:60:79:c6:
                    8f:95:4a:9f:32:d1:d7:43:e0:1f:8c:cd:7a:e3:25:
                    32:52:62:51:52:25:92:f4:fe:11:47:e5:0f:b5:2f:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:60:FC:F4:43:91:AE:5F:25:C0:15:42:5A:E4:64:A3:64:E2:FC
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:4f:26:54:5b:90:99:83:60:38:9c:a2:77:f9:c5:da:2b:
         4e:be:1f:9a:8f:2c:07:4a:bf:c4:31:9c:7b:5a:fc:a7:24:e8:
         f7:3b:e7:34:8d:b8:53:85:bc:e0:cd:d3:54:0b:c8:26:cc:8e:
         75:08:f1:fe:6b:59:20:56:52:ad:d7:6c:d9:15:b8:df:24:7c:
         c4:79:08:40:ca:8f:36:0b:fa:e3:1c:8a:be:c3:77:6c:ec:03:
         35:82:92:0b:a6:e6:16:3b:87:26:21:14:58:03:1e:39:f6:ef:
         e7:a5:ed:67:56:42:43:d8:f4:4e:fc:d6:db:64:7a:34:2e:2d:
         83:ae:f7:9a:2f:dd:22:ef:35:9a:76:a6:1a:9c:f9:f3:62:ed:
         fc:61:89:d5:be:c7:24:42:87:71:01:07:78:46:e7:b6:50:54:
         4d:d8:63:08:c4:59:5d:e3:0c:cb:eb:14:95:d6:9f:e1:ba:9a:
         9d:97:38:59:b6:5e:fe:32:0a:98:fa:4d:7d:4f:ef:b5:c6:99:
         bc:a5:ae:2d:78:19:02:75:1c:f6:ac:04:91:87:d2:72:1a:e6:
         61:5e:53:83:28:46:24:d8:80:e2:d1:d0:cd:b4:d6:fb:94:54:
         21:80:aa:c6:1b:98:e7:bb:3d:4f:a3:5b:e5:a1:4c:c4:13:68:
         57:8f:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:14:29 2025 by rpki-client