This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
File:                     0B31CCC1E89F4389597737BE4B57373331925A2F.mft (raw, json)
Hash identifier:          TZQBifrmKSi80pi5/Hoxewxgf3Y1SYjDOdQozs2XSzg=
Subject key identifier:   38:B2:45:50:21:09:83:B6:05:E7:1F:12:F9:E2:4D:AD:58:1E:F5:52
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       3F72399FE5AFEC0F283472EF0591927BCBAB9938
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
Manifest number:          0345
Signing time:             Tue 23 Dec 2025 08:37:14 +0000
Manifest this update:     Tue 23 Dec 2025 08:32:14 +0000
Manifest next update:     Wed 24 Dec 2025 11:38:14 +0000
Files and hashes:         1: 0B31CCC1E89F4389597737BE4B57373331925A2F.crl (hash: HGhmSQkx7t8Cb+vmt0Pwo/o/sGEZ+L5uX/Usoe8/3/I=)
                          2: 323830343a323262383a3a2f3332203d3e20323634313138.roa (hash: QintocWeO7Yqrzqx5pzjb44wffkwsb5rkNFckuALbO8=)
                          3: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (hash: WD7M6wU3eaRd4QLn0BTsaWspALy2joQNSK7F8VMXY7o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 11:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:72:39:9f:e5:af:ec:0f:28:34:72:ef:05:91:92:7b:cb:ab:99:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Dec 23 08:32:14 2025 GMT
            Not After : Dec 24 11:38:14 2025 GMT
        Subject: CN=38B24550210983B605E71F12F9E24DAD581EF552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:0d:a9:9d:27:9b:4c:92:80:e9:db:61:66:
                    6c:f0:91:5f:a5:6d:03:16:bd:e1:17:ea:ba:fe:10:
                    7f:29:d1:0e:e0:9e:97:ef:bb:25:ba:2f:96:9a:a9:
                    ce:74:be:7f:4c:10:8e:78:4e:22:87:02:20:66:c1:
                    1c:5b:35:61:4d:4b:72:5b:61:0b:e0:33:82:58:5c:
                    5b:8e:5a:f1:05:b0:25:b8:92:2b:8b:de:fb:30:d2:
                    59:bb:31:d3:91:33:85:f5:e2:39:83:8f:cc:af:e5:
                    31:1b:7b:61:cf:e0:1d:03:ea:a0:01:7d:b5:de:4d:
                    7d:9b:2a:da:87:03:73:ae:0d:d8:9a:c1:cc:2e:cb:
                    c9:03:d8:99:7f:00:c9:1c:87:07:f8:c9:79:0a:d4:
                    87:cc:c2:05:42:6b:31:bf:c0:b9:6b:de:17:39:d9:
                    7e:9a:d3:5c:71:0b:41:f5:b3:e1:d9:45:d6:89:92:
                    0a:c0:65:7c:b2:c3:e5:b1:90:b5:c3:26:cc:ab:6f:
                    87:0c:81:6d:20:05:ed:ef:78:fd:01:2a:4d:db:c0:
                    72:4e:6d:c7:a0:68:e4:71:bb:77:79:1c:15:c3:24:
                    a6:8e:10:4f:5a:27:1f:50:8f:5e:b9:f0:19:43:29:
                    4a:60:63:72:9e:67:52:dd:a5:d1:86:7f:b2:76:3e:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:45:50:21:09:83:B6:05:E7:1F:12:F9:E2:4D:AD:58:1E:F5:52
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:a3:40:b8:d7:fb:60:1d:d3:d2:78:67:3e:3f:8b:0a:e0:
         6e:77:b3:d0:4b:f4:2c:a4:a5:45:f4:4b:cf:fa:94:b8:24:02:
         e1:3a:3c:6b:4b:1d:ef:b5:b6:34:a0:a6:1f:ec:2d:6e:27:d7:
         7a:37:7b:5a:41:19:c9:a4:bf:20:e0:25:c6:a9:61:04:d1:1c:
         78:ac:26:1e:2c:de:82:26:a1:bb:7b:a4:1d:72:a7:cf:3f:7d:
         14:a3:a9:3b:14:91:0f:a8:7f:cd:3a:18:f7:57:9c:03:90:98:
         4f:a7:4c:c3:9e:a8:c7:0e:4f:03:c8:b0:93:d8:50:16:90:7b:
         d1:eb:75:1a:f2:40:ab:e4:31:c4:64:5a:bb:e5:8e:a5:c8:1a:
         e6:d3:cd:bb:7c:ec:66:8c:8e:d4:b0:ea:0f:14:9b:b8:d0:8d:
         85:a7:d5:37:47:6d:7e:12:0f:0d:8f:ac:69:85:80:2c:82:9d:
         af:78:0b:bb:79:d7:70:cc:8f:f7:8c:53:df:f6:d1:23:8a:9c:
         10:21:5a:ac:11:6e:2d:e9:73:ba:0c:6f:df:cf:4e:bc:57:87:
         c0:6b:82:90:6b:8b:99:b3:bb:6d:60:bc:1a:d1:00:02:4b:2e:
         44:9d:9b:59:e7:7d:0e:7d:1f:cc:c7:a6:26:d2:de:db:85:dd:
         69:ea:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:21:25 2025 by rpki-client