This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
File:                     0B31CCC1E89F4389597737BE4B57373331925A2F.mft (raw, json)
Hash identifier:          Qb0VNZUyzMC9g6JucKQEjdMQaGMy+krI+yEWd1fD7lQ=
Subject key identifier:   62:19:07:E7:BD:9E:47:1C:29:25:89:2E:7D:86:1A:3B:5A:73:26:A3
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       305E63BDF5D38C80B20440967E3215D547A8A159
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
Manifest number:          0342
Signing time:             Sun 21 Dec 2025 03:36:40 +0000
Manifest this update:     Sun 21 Dec 2025 03:31:40 +0000
Manifest next update:     Mon 22 Dec 2025 07:10:40 +0000
Files and hashes:         1: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (hash: WD7M6wU3eaRd4QLn0BTsaWspALy2joQNSK7F8VMXY7o=)
                          2: 323830343a323262383a3a2f3332203d3e20323634313138.roa (hash: QintocWeO7Yqrzqx5pzjb44wffkwsb5rkNFckuALbO8=)
                          3: 0B31CCC1E89F4389597737BE4B57373331925A2F.crl (hash: kVSN1Kdtc+PpCunX6cJU5sfENtUnJDSRzybcVYQhrm4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5e:63:bd:f5:d3:8c:80:b2:04:40:96:7e:32:15:d5:47:a8:a1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Dec 21 03:31:40 2025 GMT
            Not After : Dec 22 07:10:40 2025 GMT
        Subject: CN=621907E7BD9E471C2925892E7D861A3B5A7326A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ae:78:f7:0a:8e:76:16:e4:9d:cc:8b:7c:0f:
                    45:a8:3d:51:48:3a:c2:ef:49:16:b8:0b:26:04:d3:
                    dc:08:98:ac:8b:b3:67:d8:6b:c4:32:36:37:4a:e8:
                    3f:60:ef:eb:73:6a:c4:a2:34:95:88:94:0d:82:81:
                    63:e7:f0:71:7e:f7:79:fe:51:6c:5e:85:18:ab:2c:
                    2a:94:f6:41:5b:c4:ed:2e:b2:77:84:dc:53:97:37:
                    38:1b:5a:f9:a1:25:1d:e5:6b:d8:7e:bc:9a:4c:83:
                    ad:58:de:03:68:02:0a:6e:f5:01:70:93:41:d9:44:
                    00:91:d3:2f:85:5f:c1:93:f0:e1:06:73:8c:8c:b7:
                    e3:9c:48:ad:3b:a7:c3:2e:93:f4:3c:d3:2c:80:3a:
                    da:bb:ba:a7:52:5b:c1:f2:6e:37:43:51:b8:9a:41:
                    0f:ab:e1:d2:0e:36:13:14:e8:56:0f:4d:66:73:f1:
                    8d:3b:0d:6e:60:3c:a9:8f:5a:8c:5a:a1:7e:f8:9f:
                    87:3a:8a:5d:16:ca:13:32:f3:fa:e1:5b:61:37:48:
                    ee:44:f7:21:f5:e2:ea:0f:64:8d:c5:ab:15:e1:d3:
                    4a:a1:58:76:57:2e:cf:ba:68:04:e9:02:29:7f:70:
                    a4:92:c1:46:c9:da:ef:5c:b0:3b:ff:4f:08:04:a5:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:19:07:E7:BD:9E:47:1C:29:25:89:2E:7D:86:1A:3B:5A:73:26:A3
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:f2:64:04:d8:02:1d:e3:0c:a5:e3:c4:95:e9:54:c5:3e:
         3b:16:59:e3:23:f4:fa:70:e5:d6:4e:74:75:d6:61:72:50:9a:
         ae:75:f8:e4:52:ef:2a:54:5b:b9:a7:93:0e:36:44:f4:43:c5:
         0a:57:88:49:08:af:92:da:67:b4:e8:2b:72:bc:5b:32:58:32:
         9e:f6:54:b7:50:89:ef:c8:13:5d:09:7b:19:80:ef:f5:d1:30:
         f7:c9:03:ed:af:b4:3a:b5:81:1d:49:10:0d:a4:2e:12:69:68:
         b9:3f:8f:f9:1c:a2:6d:dd:70:d9:77:c4:0d:d5:f0:8c:72:5c:
         f5:97:54:a7:17:5c:84:4c:5a:a0:6b:a7:16:d5:da:75:63:d8:
         fd:60:11:5f:55:d3:76:2b:d5:f7:6d:c9:be:8f:03:9f:ff:62:
         3d:25:af:62:76:03:a6:5e:b2:0c:f8:26:9a:b0:93:e0:6b:26:
         7f:e7:f1:6b:3b:37:c6:cf:f4:ff:bf:a9:e2:c3:e1:4e:55:73:
         bf:d9:1d:64:25:b0:a9:b0:3d:1d:26:35:2b:17:39:d0:a3:8e:
         af:e2:35:ea:0c:c1:dc:31:e3:bd:40:5a:7e:3e:47:47:1d:43:
         47:61:77:9d:d8:5c:70:fe:4b:79:44:b0:4c:36:6b:22:72:73:
         f2:5d:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:44:28 2025 by rpki-client