This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
File:                     357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft (raw, json)
Hash identifier:          l/00PV9A9+FryJeL7SFI7IOWbQIELhARFuYjJ6CzVe8=
Subject key identifier:   52:06:94:A7:6A:67:26:4E:47:05:31:27:48:95:F1:4B:1D:E4:35:54
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       703FFA4C3FA721693D0E3D655D077FCFB1E11992
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
Manifest number:          032C
Signing time:             Sat 20 Dec 2025 02:57:42 +0000
Manifest this update:     Sat 20 Dec 2025 02:52:42 +0000
Manifest next update:     Sun 21 Dec 2025 06:48:42 +0000
Files and hashes:         1: 34352e3136392e3135392e302f32342d3234203d3e20323638313136.roa (hash: UKbA3xtojHWRKljuXm8Rn4fCf3qItyLDVPfPjD3UCw4=)
                          2: 34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa (hash: KFYPGotuoBBVUgUgZEZEqnBZzV30AR7eWH3EpVOvDio=)
                          3: 34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa (hash: eqqfYP5Kh8QIH7clBXSyBhqialr/Y42KYJ0I6naQTsk=)
                          4: 34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa (hash: LBBRxAm1NuTZIL2xCkHz3joELasKM//dRUSXbtdYKZk=)
                          5: 34352e3136392e3135382e302f32342d3234203d3e20323638313136.roa (hash: nn1II6dJ8s4MEe7QoUpaWFdkR2uQukgWW+oIh6a1sLc=)
                          6: 357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl (hash: E3mCqleCDQ2GDorsY5uC+JycNstAvRni2XGaPIjqq04=)
                          7: 34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa (hash: ymbi2Lfx4ZtV8gF2MRQp8E/O2Ogj/N6UCPxsNEcjK1o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3f:fa:4c:3f:a7:21:69:3d:0e:3d:65:5d:07:7f:cf:b1:e1:19:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Dec 20 02:52:42 2025 GMT
            Not After : Dec 21 06:48:42 2025 GMT
        Subject: CN=520694A76A67264E470531274895F14B1DE43554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:9e:be:d3:bc:a9:a5:ad:c7:fb:8c:43:8c:
                    60:c0:2e:81:ea:a9:9a:39:08:8f:70:20:32:0f:cd:
                    cd:44:0c:7a:9b:47:c6:61:43:be:cf:60:1a:73:c3:
                    86:6d:71:19:57:f1:8c:e5:3f:2b:a8:48:75:87:c4:
                    36:d5:30:25:ea:99:9d:d0:93:0b:1e:ee:90:67:79:
                    eb:37:74:84:65:cd:fa:9a:4e:66:df:39:3d:1f:59:
                    dc:02:0f:09:d3:cd:e3:4b:39:c2:15:ec:93:b4:5c:
                    c9:36:dc:8a:c6:18:39:fc:04:d5:fc:3a:bd:ea:eb:
                    3a:44:cc:c9:3b:05:b6:28:1c:44:bc:96:69:4a:78:
                    a6:1e:81:d3:3a:47:24:16:09:02:b3:fc:c8:c3:b8:
                    1d:97:97:dd:76:57:00:9f:4b:f8:9f:93:64:07:73:
                    d7:d4:62:0a:0d:9e:80:c5:61:83:22:5e:34:13:6f:
                    f0:06:41:c0:d5:49:62:e6:12:22:08:1b:80:1a:2e:
                    26:56:49:a4:e0:ce:1d:5c:3e:20:b5:91:2b:7a:34:
                    ca:fe:76:9f:53:50:ae:76:dc:3f:e0:55:5e:0c:f0:
                    d8:4a:f1:06:91:69:a2:8e:28:0b:3a:98:bc:b0:33:
                    ba:64:14:86:78:43:8c:c1:b1:09:74:a6:d2:76:61:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:94:A7:6A:67:26:4E:47:05:31:27:48:95:F1:4B:1D:E4:35:54
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:0e:13:b4:48:a2:d6:67:cf:c3:f2:98:98:a2:65:41:e0:50:
         45:6f:b9:3d:fc:7f:d3:76:b6:3e:5b:f1:dc:a7:7c:ed:af:1b:
         51:35:3b:16:9c:1f:2f:58:2d:65:01:1c:3e:89:94:01:6a:a9:
         24:f4:15:fb:98:f3:19:10:93:e7:c3:6d:8d:bd:f2:b4:61:67:
         8d:f2:08:94:93:a9:20:93:d5:e4:9d:cb:bf:e1:1a:f8:b1:a1:
         b1:4d:85:b6:ad:aa:be:89:d9:66:00:78:ac:f8:1f:b0:e4:7e:
         3c:36:b7:3b:ff:3c:dc:5e:42:7c:37:1e:b7:c8:bc:b8:45:5f:
         2f:a8:f2:df:9d:96:37:a7:44:d2:55:a5:55:b1:35:94:a5:8d:
         21:76:dc:49:d9:a2:67:c6:80:d4:a1:1d:19:a3:1e:26:a0:99:
         52:94:9e:39:c9:dd:68:c2:f9:1c:7e:c1:75:dc:b6:26:6f:4f:
         ec:d7:47:dc:8c:61:1e:09:25:9e:30:08:77:d8:6c:d7:92:92:
         0b:ba:cc:0e:c7:45:65:41:26:20:03:44:b7:cd:84:35:16:d0:
         83:71:85:3d:35:d7:d8:b5:2d:8a:69:2a:60:48:40:4c:7e:8b:
         c4:79:3b:ec:57:7e:ed:d8:e0:e9:e5:9e:a1:0b:a2:dd:ef:fa:
         7c:9f:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:39:34 2025 by rpki-client