This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft
File:                     E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft (raw, json)
Hash identifier:          FrYGb68ZRx6NWab/IYz6nqjdBPMMwyXft3ha/4geXuA=
Subject key identifier:   10:74:FE:69:DA:51:D2:9F:7D:4C:AD:A9:BF:E0:2B:63:4A:D0:1C:62
Authority key identifier: E1:C7:1E:03:3F:9F:B5:C6:89:EC:63:74:AF:C1:30:B5:65:3E:F6:2C
Certificate issuer:       /CN=E1C71E033F9FB5C689EC6374AFC130B5653EF62C
Certificate serial:       70A30F0202B8EE032EACF91CCE93E0BAFF7AF348
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft
Manifest number:          0345
Signing time:             Sun 21 Dec 2025 04:30:44 +0000
Manifest this update:     Sun 21 Dec 2025 04:25:44 +0000
Manifest next update:     Mon 22 Dec 2025 05:15:44 +0000
Files and hashes:         1: 323830343a313739633a3a2f33322d313238203d3e20323633313539.roa (hash: nLTtmKuRdfLF5MAAWAaMqKfrGI3WbR+yF1cw9si6Lc8=)
                          2: 3137372e39332e3136302e302f32312d3332203d3e20323633313539.roa (hash: sYDwONACW3n9aKunEduSrgGf67e3RDrMATV2AEgZn6o=)
                          3: E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl (hash: li/1HryhpDC70vgYF3lunl1uvUxqN2BlekXaiznIKGU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl
                          rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 05:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a3:0f:02:02:b8:ee:03:2e:ac:f9:1c:ce:93:e0:ba:ff:7a:f3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C71E033F9FB5C689EC6374AFC130B5653EF62C
        Validity
            Not Before: Dec 21 04:25:44 2025 GMT
            Not After : Dec 22 05:15:44 2025 GMT
        Subject: CN=1074FE69DA51D29F7D4CADA9BFE02B634AD01C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:6d:3d:18:3d:3c:ce:36:1e:36:81:54:f7:
                    86:04:f3:93:bc:06:9c:6e:18:cb:9c:3a:a3:31:aa:
                    22:42:7b:aa:b4:66:06:14:19:18:99:19:cd:c1:39:
                    1a:29:70:99:73:7e:51:44:af:4b:cd:4d:34:5c:3e:
                    4c:8b:4a:d7:1d:bd:ae:84:c7:7e:a2:ba:76:cd:42:
                    6e:67:88:27:ea:2b:97:0d:bb:86:66:fa:aa:94:62:
                    f4:b9:ac:d9:46:ca:c1:f2:15:e7:58:6c:75:5c:4e:
                    5e:3c:6a:22:a4:1a:ce:07:aa:49:9e:c4:70:f9:6c:
                    61:5f:68:4c:89:53:b3:22:7d:5e:a8:1f:24:6c:d8:
                    bd:35:74:2a:e8:ef:72:77:5e:c3:c6:c0:7d:6e:44:
                    df:e5:3b:e9:15:c3:0a:d7:8f:15:74:9f:a6:96:ca:
                    34:95:30:53:6d:94:fc:94:b7:a7:69:89:33:21:aa:
                    2c:4a:17:35:06:6c:e6:44:ee:b2:a1:c9:9a:80:61:
                    60:4b:32:47:ca:dc:e2:d8:06:74:a5:94:9a:83:e0:
                    62:28:9d:9a:a4:ae:1b:ac:b5:bf:10:d6:02:26:67:
                    76:c4:a5:c7:09:f4:93:38:fd:89:22:05:0f:df:0b:
                    6e:a4:34:88:c4:10:a2:c2:97:88:77:51:3e:36:4f:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:74:FE:69:DA:51:D2:9F:7D:4C:AD:A9:BF:E0:2B:63:4A:D0:1C:62
            X509v3 Authority Key Identifier:
                keyid:E1:C7:1E:03:3F:9F:B5:C6:89:EC:63:74:AF:C1:30:B5:65:3E:F6:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:d2:1e:07:aa:84:9f:e3:a2:1f:92:56:46:9c:8f:6c:d0:
         25:37:78:09:cc:51:c1:6d:da:58:1b:c2:05:2c:e7:56:51:d8:
         2c:10:25:c6:f1:09:a1:2c:e1:48:82:33:c2:55:9b:8c:7e:9f:
         51:22:25:cb:79:d0:5b:18:75:54:b9:88:9f:56:34:bf:3a:cf:
         a0:70:ac:47:88:82:40:69:aa:9e:51:27:77:d1:73:9d:31:81:
         ec:05:de:be:3d:44:a0:4e:2c:4b:c9:a3:df:02:9c:05:c7:3c:
         aa:fc:f8:01:e7:79:3e:60:48:a3:ab:11:08:b9:26:3c:35:3b:
         67:a1:9f:93:5b:ba:70:e2:d0:91:a0:8b:ab:7b:98:b5:50:ce:
         87:3e:5d:cc:19:11:5e:5c:68:57:53:af:86:dd:4a:30:be:da:
         76:af:a2:52:85:79:d6:46:78:30:7b:86:ad:2d:2e:d6:cd:60:
         25:84:c7:ae:f7:55:46:65:36:90:e5:02:53:ae:6d:08:8c:e7:
         4d:31:16:79:95:c0:b1:b2:92:39:32:93:83:ae:bb:b2:fd:21:
         ea:c0:01:23:b0:62:ab:a6:f0:bb:35:1f:d8:27:8f:8c:44:21:
         28:33:3f:c8:53:1e:bc:c5:ae:d0:00:f7:2e:21:84:70:29:66:
         6d:39:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:28:58 2025 by rpki-client