This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
File:                     DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json)
Hash identifier:          LEy4D3PySB0B1DRQTRFB1RlNUjhxDu/SER1NpFK0DVY=
Subject key identifier:   A4:A0:D9:2A:25:53:A8:90:85:99:C3:5E:29:48:70:B8:8F:EC:F2:A4
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Certificate issuer:       /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial:       7CE0264571F0F356CBF22478F08ADAB78EC79913
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
Manifest number:          0343
Signing time:             Tue 23 Dec 2025 01:00:00 +0000
Manifest this update:     Tue 23 Dec 2025 00:55:00 +0000
Manifest next update:     Wed 24 Dec 2025 04:56:00 +0000
Files and hashes:         1: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=)
                          2: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=)
                          3: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=)
                          4: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: Ija0vPb6dE2FymYYVmSqMK3AWnOJIteiti3+bZwbDSM=)
                          5: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
                          rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 04:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e0:26:45:71:f0:f3:56:cb:f2:24:78:f0:8a:da:b7:8e:c7:99:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
        Validity
            Not Before: Dec 23 00:55:00 2025 GMT
            Not After : Dec 24 04:56:00 2025 GMT
        Subject: CN=A4A0D92A2553A8908599C35E294870B88FECF2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:d1:63:4a:a0:66:0c:cc:7b:4a:06:7b:99:
                    aa:0b:a4:19:73:9b:fe:c3:0f:1b:1f:3f:79:35:c5:
                    af:d1:23:73:64:91:48:e5:c7:4d:a2:b0:af:54:26:
                    92:44:f7:c2:0f:58:bd:38:5d:57:02:d8:d9:4b:d8:
                    56:39:d1:99:3a:92:93:3d:9d:97:24:c0:3e:ac:1a:
                    e2:a5:27:2f:f0:ec:1c:a1:b2:aa:1a:c2:24:55:5c:
                    bc:ce:17:32:f5:f3:93:3e:b0:6f:0e:cf:c1:27:cc:
                    73:54:d2:d4:2f:8f:2e:36:44:07:7c:12:b5:7e:06:
                    e2:c1:09:07:38:82:4c:33:11:73:54:34:d6:f7:ef:
                    cf:d5:09:df:09:b2:43:ec:28:e7:35:d9:6a:0e:79:
                    74:31:53:bf:eb:d9:68:e3:20:56:37:2c:82:16:13:
                    51:df:2e:0a:05:ef:92:04:b7:26:64:8a:f7:36:a8:
                    e3:eb:6e:a5:14:90:8e:0b:89:58:b2:1f:8b:5b:41:
                    1c:17:8b:23:16:56:42:ec:97:d7:28:d8:08:d6:66:
                    da:57:10:fd:2f:9f:be:7c:3a:32:5e:20:d6:d4:01:
                    4a:53:2b:e1:fe:f5:f0:19:c3:7e:48:94:b7:78:b7:
                    94:5c:fb:61:0c:08:b8:76:7d:c1:b0:77:a2:7e:6b:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A0:D9:2A:25:53:A8:90:85:99:C3:5E:29:48:70:B8:8F:EC:F2:A4
            X509v3 Authority Key Identifier:
                keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ac:b4:25:99:23:65:a9:f5:7b:0b:5f:96:53:4a:ee:c2:b2:
         89:26:b2:fc:93:52:bb:93:62:45:10:02:70:40:ef:78:2b:08:
         e5:a8:64:6a:49:15:23:d5:8f:79:5f:2c:3c:3f:cc:12:2f:38:
         37:f2:48:66:d9:23:48:0d:9d:c8:ad:ec:a9:ce:da:95:51:c0:
         74:83:6c:8b:ae:87:1e:6a:65:d4:06:24:d5:fd:0e:b3:73:0d:
         fa:8f:1d:68:00:ea:d2:0b:25:70:26:7b:43:c4:9d:44:d4:0f:
         05:54:e4:1d:ea:76:3c:d8:31:9f:99:62:39:d9:d4:56:dd:ba:
         97:5b:a7:1f:e9:b0:54:8c:de:3d:3c:35:29:78:11:1d:ec:2f:
         fc:f9:cc:82:f8:35:51:cb:4a:97:c9:26:b0:6e:47:c3:f7:a0:
         61:32:a0:ca:a0:ab:31:0f:08:f5:b5:80:b1:6b:6f:35:d1:66:
         08:59:85:0c:de:4f:59:cc:23:90:c6:a8:bd:f4:1a:c4:2e:15:
         7b:f4:6b:0e:ea:fb:f8:f3:fc:82:b7:10:47:2e:89:73:b5:68:
         a4:ac:36:bc:57:7a:df:98:73:93:3d:13:49:e0:be:25:55:d0:
         04:cc:59:07:fb:00:89:74:dd:7e:b1:04:9c:4b:6a:b0:57:09:
         ad:40:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----