This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
File:                     3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft (raw, json)
Hash identifier:          XHdq9oKmFZEjEHg+2YXX6JtsM3f3mEmQ2BZRgwxVlto=
Subject key identifier:   42:7C:BE:71:39:6F:A5:87:48:E4:2B:12:ED:5F:82:A7:08:F4:1D:3B
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       5978620A7BE42F303E3A3DE4F7041C669471046B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
Manifest number:          036C
Signing time:             Sat 20 Dec 2025 05:08:34 +0000
Manifest this update:     Sat 20 Dec 2025 05:03:34 +0000
Manifest next update:     Sun 21 Dec 2025 08:32:34 +0000
Files and hashes:         1: 323830343a3662633a3a2f33322d3438203d3e203533303738.roa (hash: 22jKhp6IQBEep/A5PAYZ6IjnqJvqll8uYCP1oyLN4to=)
                          2: 3133312e302e36342e302f32322d3234203d3e203533303738.roa (hash: hpYbZLjxwUBaGEXJA1EANokNGa9/vXAOk0GpYs9QKAs=)
                          3: 3230312e3135382e36302e302f32322d3234203d3e203533303738.roa (hash: RtLbcqR8/3YDGzfNGbZbaucDiywBqGkid5qw/mE7sdY=)
                          4: 3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa (hash: fCD7FthU6WKoidsH28JhaZ06zfDAC12Eiu+9Twb1bRU=)
                          5: 3138372e39342e3230382e302f32302d3234203d3e203533303738.roa (hash: Oi8HKAlXDmUovKIi7l6yiijJSGD/KRzyUCebw2VqI/w=)
                          6: 3136382e3139342e3133322e302f32322d3234203d3e203533303738.roa (hash: oOTzxC9NhunYba0aP38a/ghXq4y49lqX3o2LedS636o=)
                          7: 3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl (hash: cUsfzVURkm2/wShaqX77ZptSPdhbrBVEBRUPbmWbq8U=)
                          8: 3136382e3139352e3136302e302f32322d3234203d3e203533303738.roa (hash: BIZZCKSRVzmwzPvKuhflsQcj1/Bc+D/jRvP8vy3DBRc=)
                          9: 3138362e3139332e31362e302f32302d3234203d3e203533303738.roa (hash: XKuEuwCq8WL6IhFiaCXlSkQ3XvgnKaQgqigU2X9pURA=)
                          10: 3137302e38302e3235322e302f32322d3234203d3e203533303738.roa (hash: Dn+/PSrC0aLbCMBvDobQlUZlQxDmr2gl84WB0YnYW5U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
                          rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:62:0a:7b:e4:2f:30:3e:3a:3d:e4:f7:04:1c:66:94:71:04:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: Dec 20 05:03:34 2025 GMT
            Not After : Dec 21 08:32:34 2025 GMT
        Subject: CN=427CBE71396FA58748E42B12ED5F82A708F41D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:bf:81:73:f5:51:ad:5a:e6:c0:fc:53:14:
                    5b:d8:1c:d3:cf:28:c6:17:0f:86:88:a1:c6:30:f8:
                    bc:4b:51:71:34:ec:50:32:0c:4a:9c:1e:dd:b4:5a:
                    78:33:20:a8:31:48:c6:fa:e4:c4:a5:79:9b:cb:0a:
                    05:81:6c:f9:4b:71:fc:ce:4e:19:e9:84:96:a7:27:
                    ea:ab:78:57:7c:cb:c8:88:e0:6b:fe:8a:fc:7b:85:
                    5f:f6:7e:dd:8b:8e:14:ee:7a:5b:3e:c7:ab:40:06:
                    40:76:3d:35:8a:e6:bb:04:e9:cd:7e:48:e9:62:1d:
                    0e:6f:c0:80:18:d5:63:c8:dc:32:bb:11:34:fc:8a:
                    1a:03:d5:dd:d1:f1:1e:8c:78:5a:7f:37:a6:71:74:
                    0b:82:a1:42:f7:ba:6e:94:9b:7e:30:2f:58:53:07:
                    c2:ab:07:01:2d:92:6c:e8:81:93:82:ce:26:6f:41:
                    4d:c9:fd:a3:c3:d8:38:6d:1c:96:c8:49:a1:33:87:
                    a1:97:52:59:b3:b3:3a:b8:04:df:87:ee:29:06:ec:
                    c9:b5:b2:67:87:1f:f8:3c:34:a2:c5:2a:1b:ce:c4:
                    d4:03:a9:ea:17:30:72:d9:85:07:7c:34:0f:7a:3c:
                    55:b3:dc:59:7e:9f:49:25:2a:32:28:59:5a:bb:5c:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:BE:71:39:6F:A5:87:48:E4:2B:12:ED:5F:82:A7:08:F4:1D:3B
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:33:c7:09:ac:52:3b:a8:10:2a:99:84:b2:b0:90:01:cf:
         3d:0f:0c:8c:8a:db:cf:e3:94:81:56:62:2c:8a:94:ef:07:9c:
         b7:61:2b:70:68:0c:3a:65:31:95:2f:b6:f9:0a:65:7b:20:07:
         0c:03:1c:e5:58:cd:2e:e1:2c:ac:5a:e0:99:fc:e9:36:5f:8f:
         ec:96:55:b2:e5:bc:81:cf:0a:65:fd:6a:3b:a9:d1:45:77:27:
         33:bf:9c:95:ca:06:9c:86:8c:f2:34:cb:f8:a3:8b:52:d2:70:
         d4:01:9b:9a:2c:dd:c1:d1:21:60:5b:7e:a1:ea:af:d1:52:2d:
         e9:c4:23:22:79:37:7f:97:f3:cb:d2:1c:a8:6b:1d:eb:9b:aa:
         7c:5a:d6:94:5d:83:cb:b1:02:a4:55:31:b5:be:1c:f6:93:5c:
         4b:f6:5d:19:31:60:39:ea:fe:5d:2b:fd:c5:8d:9f:ae:b0:23:
         93:d8:59:a8:59:10:3a:f5:a0:75:7f:1e:33:89:cf:86:80:6e:
         66:9e:54:2c:e6:f8:dd:b7:bd:1e:dd:42:de:00:39:c7:82:2a:
         d8:01:9f:82:62:c8:0e:a3:34:8f:05:71:d1:86:9a:4c:44:ba:
         73:43:d7:94:aa:d1:a9:6f:85:04:ca:9f:90:3f:7c:56:43:62:
         fe:d7:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:50:51 2025 by rpki-client