This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
File:                     813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft (raw, json)
Hash identifier:          dm19vogHvK7huI9N9vh4qkKkvwI2TGt0KObfV8H4wK0=
Subject key identifier:   90:51:FC:62:01:35:03:E4:4B:B1:4B:66:14:9F:8E:F6:06:9F:E5:E3
Authority key identifier: 81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3
Certificate issuer:       /CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
Certificate serial:       15A0E43A4C0903D30F7FF94E9F43F7A293DEF478
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
Manifest number:          0348
Signing time:             Mon 22 Dec 2025 19:59:43 +0000
Manifest this update:     Mon 22 Dec 2025 19:54:43 +0000
Manifest next update:     Tue 23 Dec 2025 22:21:43 +0000
Files and hashes:         1: 323830343a386163633a3a2f33322d3438203d3e20323632393036.roa (hash: aUrlL5Uxya1z73y/XinWPkpdc8Hs9/GaciW3C8iNZD0=)
                          2: 813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl (hash: czX+E5X8EEXyT2Y7VHXfz/Emj5o0+Q02QLiz1GgKQBk=)
                          3: 3137372e32332e3234382e302f32322d3234203d3e20323632393036.roa (hash: eLjEd+4c3z4I70rQuj+2JJB3GO6Mq4yQS+/aL5ndX+U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl
                          rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 22:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a0:e4:3a:4c:09:03:d3:0f:7f:f9:4e:9f:43:f7:a2:93:de:f4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
        Validity
            Not Before: Dec 22 19:54:43 2025 GMT
            Not After : Dec 23 22:21:43 2025 GMT
        Subject: CN=9051FC62013503E44BB14B66149F8EF6069FE5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:02:e7:72:20:27:6e:34:9d:60:62:c2:9e:
                    05:6e:d0:05:b3:44:a0:ee:0d:f8:2d:96:d4:c9:e1:
                    77:d4:f1:12:d4:4b:d4:cf:c7:c6:08:ee:d1:63:17:
                    92:2c:0d:88:8d:f1:b3:dc:17:c5:07:d0:55:25:46:
                    80:25:98:07:06:83:e5:87:38:a0:f1:3e:04:86:eb:
                    d9:0b:ea:9b:e1:7b:b2:e8:e5:74:18:4a:0e:13:f4:
                    88:bf:25:f3:a2:a7:09:ae:b6:67:10:7a:36:ed:30:
                    99:19:99:0e:0f:6e:c6:30:75:75:c0:fb:ae:6c:85:
                    6d:a7:00:c2:b4:a9:47:b5:ea:5a:1c:49:c1:4d:b8:
                    23:ec:f5:be:8b:ff:40:21:b6:c0:3e:27:db:55:2d:
                    0f:8e:ac:ba:48:36:30:81:f7:6c:af:99:c9:04:7a:
                    c2:71:ae:09:d1:f0:f5:62:27:e1:5a:00:46:f6:2b:
                    65:2e:f6:01:f7:4b:30:84:dc:b0:2d:ba:52:24:23:
                    9e:13:3a:00:9f:bc:d7:be:75:83:71:cc:e7:52:3f:
                    e2:39:df:0a:57:68:f0:6b:23:5b:ce:ce:0a:24:14:
                    79:ef:f1:80:d9:b2:38:c0:ed:f9:7e:35:80:f9:7c:
                    53:6f:38:d0:1f:bd:c9:7e:bb:ed:b2:b0:d7:24:61:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:51:FC:62:01:35:03:E4:4B:B1:4B:66:14:9F:8E:F6:06:9F:E5:E3
            X509v3 Authority Key Identifier:
                keyid:81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:f8:b1:c3:dc:71:fa:79:f0:c6:ef:63:47:cd:dd:7d:2d:
         56:51:91:7e:27:18:58:96:c7:d2:0f:a8:79:27:92:9e:2a:71:
         ff:6d:ba:29:77:07:dc:20:23:75:24:a4:c7:65:dc:77:36:ab:
         64:88:7f:b4:68:14:b2:82:53:42:23:1c:6b:a5:c7:15:2f:25:
         91:4e:c6:30:9d:d0:f7:63:d7:c1:3d:90:4a:d8:57:e2:39:3b:
         75:f3:7c:70:67:34:d3:e8:2e:6e:d7:ba:f3:4b:1b:6e:8c:ef:
         2c:57:65:b2:63:78:87:ad:28:90:a7:d7:e0:f2:14:c5:db:96:
         24:12:4d:88:9f:4b:ea:18:32:61:c5:15:a9:bb:3f:62:6d:17:
         02:5b:6f:39:83:27:29:7e:2b:99:e7:c9:5b:cf:68:4a:e5:cc:
         0a:c7:eb:88:6b:83:97:77:b4:ed:a6:60:41:b0:f9:f8:4a:31:
         40:5b:5d:88:b0:9c:c5:57:2f:9c:5d:7b:72:42:08:1c:c2:b2:
         5f:62:35:9b:e8:02:dc:47:98:25:96:c0:3a:f7:4b:00:4a:bc:
         c3:0e:63:c3:be:51:3f:da:08:ca:e9:bc:95:65:33:82:bc:12:
         4b:1c:ee:8a:c5:bc:e3:b7:c9:53:9e:b5:3c:91:91:0d:53:9b:
         53:95:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:36:47 2025 by rpki-client