This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.mft
File:                     542D9C840562F883EEEB31312431BBFDA6230C9F.mft (raw, json)
Hash identifier:          TjbHl8eJVLbnV9ZH7F08jycRE37zo27PjS8r6C5j4ZY=
Subject key identifier:   F9:E2:A1:08:78:5F:E6:D1:EB:40:59:54:5E:85:9A:75:32:91:A1:BC
Authority key identifier: 54:2D:9C:84:05:62:F8:83:EE:EB:31:31:24:31:BB:FD:A6:23:0C:9F
Certificate issuer:       /CN=542D9C840562F883EEEB31312431BBFDA6230C9F
Certificate serial:       54548C6DD5FD889DD1F6A2325AC35378E300FDC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.mft
Manifest number:          0346
Signing time:             Tue 23 Dec 2025 00:26:04 +0000
Manifest this update:     Tue 23 Dec 2025 00:21:04 +0000
Manifest next update:     Wed 24 Dec 2025 04:12:04 +0000
Files and hashes:         1: 542D9C840562F883EEEB31312431BBFDA6230C9F.crl (hash: CbDn5DLvp4Xm30dW9XWlxDZvbboNzW1sAoVsNh1T2Ns=)
                          2: 34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa (hash: 9qmBtHLgCoBY5PqFuTr61pWhy3ChB4YMvWgyZqvPBMY=)
                          3: 323830343a346437633a3a2f33322d3333203d3e20323638313939.roa (hash: CAM/WYef7uiYYymXCh6rT5Ckopg0xyaL5/FxV+wW1hM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.crl
                          rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 04:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:54:8c:6d:d5:fd:88:9d:d1:f6:a2:32:5a:c3:53:78:e3:00:fd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542D9C840562F883EEEB31312431BBFDA6230C9F
        Validity
            Not Before: Dec 23 00:21:04 2025 GMT
            Not After : Dec 24 04:12:04 2025 GMT
        Subject: CN=F9E2A108785FE6D1EB4059545E859A753291A1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:99:a2:73:51:d6:1d:da:69:85:e4:39:a5:
                    34:a4:41:94:f2:f7:3b:37:f5:13:3e:75:61:56:59:
                    48:fe:60:91:9e:03:02:e9:98:0b:a4:57:8b:48:23:
                    83:f9:8f:92:fc:e2:23:ae:ab:05:87:ed:c3:7e:eb:
                    d1:31:9d:9e:01:2c:30:7f:1f:f1:4c:33:a2:d4:4c:
                    49:e0:28:1b:0d:d8:8a:9f:8c:77:e5:0c:e7:d2:1f:
                    fb:05:a9:42:d0:4f:04:1b:f4:eb:d1:fd:10:44:b9:
                    58:37:85:a4:af:60:d5:82:62:28:ee:ca:ad:33:2d:
                    81:df:ec:22:49:f5:86:9b:fe:c8:a4:24:bc:47:90:
                    5c:e4:c2:f0:34:7b:e7:41:d2:36:ee:93:f7:50:2f:
                    85:50:91:9d:f7:0d:4c:c7:90:0d:76:61:ca:83:b4:
                    6c:84:1f:b5:ff:fe:b1:61:bd:9f:3d:82:e7:a0:9a:
                    4e:25:88:c6:f1:35:8c:30:1a:67:2a:b2:49:c9:94:
                    a3:59:e1:ea:16:30:6d:ad:18:8b:88:f3:7e:3d:a2:
                    1d:6f:ed:b4:27:4a:46:48:d5:12:40:67:81:c8:58:
                    3e:2b:41:ad:2b:00:f5:3c:f5:36:0f:58:9c:6f:77:
                    b8:c7:e6:a3:09:47:9b:a0:cc:de:6c:10:e0:51:08:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:A1:08:78:5F:E6:D1:EB:40:59:54:5E:85:9A:75:32:91:A1:BC
            X509v3 Authority Key Identifier:
                keyid:54:2D:9C:84:05:62:F8:83:EE:EB:31:31:24:31:BB:FD:A6:23:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7c:61:63:8a:ef:2a:d9:6b:32:28:34:45:14:f8:43:11:64:
         e4:ee:11:43:80:73:f4:4e:b6:58:e2:00:d2:57:d1:4f:1c:81:
         a3:a6:24:34:c5:58:c7:0e:03:e5:fb:26:d3:91:ee:d7:99:d6:
         bc:00:c0:a6:65:64:82:f2:87:01:4f:bc:8a:fe:37:3a:10:da:
         72:69:08:9f:7f:da:54:01:bd:d3:0e:7f:97:94:d8:7a:ab:84:
         07:a9:2a:df:e1:a9:18:8a:61:ee:f2:8d:e9:82:1f:cf:39:09:
         fe:5e:93:48:d0:05:1b:69:6c:30:10:f8:e7:b0:74:02:c1:c4:
         e3:fa:47:9b:21:a3:0d:f6:5a:88:3b:b3:f7:89:c9:1f:c0:5a:
         b6:05:ee:8a:36:f8:91:11:a0:b6:ae:65:9b:2a:51:98:ae:2b:
         0d:43:c3:97:e1:14:2d:12:6e:14:7f:0a:a6:01:5c:a1:e4:9c:
         5b:2a:7b:0b:bb:4b:2b:b2:73:f9:2b:30:7c:8b:d4:1a:d8:c9:
         d3:e3:9a:49:8a:10:c8:45:b0:42:19:96:a8:92:fe:6e:ef:fe:
         e2:af:1b:78:7e:6d:90:56:b1:5d:68:f4:87:8f:d2:52:d1:d1:
         90:5c:f1:73:18:b9:5f:49:00:c9:f9:b6:23:9d:98:36:3f:6f:
         c1:df:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:40:16 2025 by rpki-client