This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.mft
File:                     344D475815D7589B4DF7A89667E09AD7156C9FA3.mft (raw, json)
Hash identifier:          0yVX/XEN8mlP9dupVPTMZUk2h5gGvFVweiwSbwT4xeM=
Subject key identifier:   F4:79:CD:E1:48:A1:B8:72:10:BE:58:BD:2E:10:6D:91:B1:56:35:35
Authority key identifier: 34:4D:47:58:15:D7:58:9B:4D:F7:A8:96:67:E0:9A:D7:15:6C:9F:A3
Certificate issuer:       /CN=344D475815D7589B4DF7A89667E09AD7156C9FA3
Certificate serial:       78574CFB9C04C65933415062432FF48D715F4484
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344D475815D7589B4DF7A89667E09AD7156C9FA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.mft
Manifest number:          03
Signing time:             Wed 24 Dec 2025 05:02:51 +0000
Manifest this update:     Wed 24 Dec 2025 04:57:51 +0000
Manifest next update:     Thu 25 Dec 2025 06:21:51 +0000
Files and hashes:         1: 344D475815D7589B4DF7A89667E09AD7156C9FA3.crl (hash: JPsfPmtXyfqdR9sWZDtvU/+6tpOlsQsKStrvQOrGcmg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.crl
                          rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344D475815D7589B4DF7A89667E09AD7156C9FA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 06:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:57:4c:fb:9c:04:c6:59:33:41:50:62:43:2f:f4:8d:71:5f:44:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344D475815D7589B4DF7A89667E09AD7156C9FA3
        Validity
            Not Before: Dec 24 04:57:51 2025 GMT
            Not After : Dec 25 06:21:51 2025 GMT
        Subject: CN=F479CDE148A1B87210BE58BD2E106D91B1563535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:63:ad:57:98:e3:ec:0e:fe:8e:6b:38:18:
                    3a:ec:8c:eb:c1:16:43:7e:e0:73:6a:39:ce:f7:2b:
                    09:70:37:86:e3:57:12:ef:41:7d:89:9d:78:c5:ef:
                    3d:c3:6c:46:f2:36:e7:cd:28:23:3a:86:7b:3b:30:
                    59:96:36:63:6b:ae:d7:d0:45:b9:0e:73:51:03:b5:
                    e3:cf:ce:40:c6:c8:53:e9:d0:3e:2a:71:fd:24:23:
                    42:d8:61:7e:6a:2a:05:7c:18:69:fe:eb:af:61:c9:
                    55:96:f8:35:a4:2a:4e:1e:d1:4c:1c:17:47:52:a3:
                    69:2f:5a:c5:ec:96:b7:48:1b:be:dd:38:93:5c:55:
                    a7:79:66:44:60:ad:f5:ec:af:a0:b5:e4:54:69:03:
                    ce:6d:5c:77:f1:76:fc:ea:ec:cc:71:da:4a:9d:d1:
                    d6:c2:4b:c5:93:23:2e:7e:7c:cb:56:46:e4:aa:74:
                    3a:a5:f9:00:f9:a5:f2:01:fb:f2:01:91:fb:13:87:
                    bd:1d:e0:a6:db:78:d2:b0:e3:b9:d4:e3:51:0c:0f:
                    b0:d2:23:44:dc:d4:b1:52:d5:94:70:e2:55:8a:9c:
                    4e:28:a7:7e:27:e9:94:cd:f3:2e:00:3e:72:05:d4:
                    02:e1:00:e1:bf:89:f6:45:9b:d9:0a:73:36:75:7e:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:79:CD:E1:48:A1:B8:72:10:BE:58:BD:2E:10:6D:91:B1:56:35:35
            X509v3 Authority Key Identifier:
                keyid:34:4D:47:58:15:D7:58:9B:4D:F7:A8:96:67:E0:9A:D7:15:6C:9F:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344D475815D7589B4DF7A89667E09AD7156C9FA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/344D475815D7589B4DF7A89667E09AD7156C9FA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:bb:56:f9:65:49:4a:a5:73:e8:44:13:69:e2:2b:ee:37:
         6a:6c:6c:a4:c4:56:fd:c5:46:d6:b2:7f:ad:01:58:2a:f7:eb:
         06:4a:b8:18:29:21:8c:05:09:30:4e:27:ea:8e:a6:62:57:55:
         37:52:8e:73:c9:07:72:2d:f3:0e:55:1f:ee:2f:a0:13:56:2a:
         85:7a:ee:31:d7:db:61:11:49:e0:df:dc:4d:c9:85:dd:2d:9e:
         27:d4:cc:08:ed:41:0b:cf:6b:79:e0:ce:84:27:74:a9:fd:8d:
         1b:e0:b2:7f:12:62:39:11:27:35:68:1f:16:7b:87:bd:c6:7d:
         dd:cd:78:09:1d:d0:42:0b:09:05:08:59:44:1b:8d:65:27:13:
         15:3b:3c:52:e5:00:a1:ca:17:60:9e:bf:d5:76:6f:e7:0a:d7:
         fb:9f:09:c5:b7:17:42:90:27:45:62:7d:6f:6d:d7:a3:8e:07:
         42:ba:3e:0c:4b:c0:fe:8b:2b:6f:57:af:14:b1:26:28:ff:88:
         a9:e5:21:2d:92:ee:29:60:92:8f:1f:26:0b:2e:44:02:1b:71:
         b9:24:41:d2:6f:2c:1c:dc:07:89:38:9d:1c:16:e2:b3:49:9b:
         6a:c4:1e:52:cd:9e:e6:7c:74:d3:67:79:82:6a:95:b9:b5:52:
         d0:95:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:20 2025 by rpki-client