This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
File:                     CC038C42F33B3D558931769A27D97E3412751117.mft (raw, json)
Hash identifier:          jBIxDZAKffS0F3/d4FjTrsfjqmLXci0S/BkiqCv+jSc=
Subject key identifier:   58:35:07:82:EC:4B:5E:B4:6F:0F:94:6F:45:86:78:DE:32:D3:13:E3
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       5BB0302D3B2AF3EC69C251E63B16ACACE6E82A6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
Manifest number:          034D
Signing time:             Mon 22 Dec 2025 03:48:32 +0000
Manifest this update:     Mon 22 Dec 2025 03:43:32 +0000
Manifest next update:     Tue 23 Dec 2025 05:48:32 +0000
Files and hashes:         1: 3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa (hash: Rq9XRzKnWKUVkNfYKEbrZYiLh69s9bl6B9vU7oXLlU0=)
                          2: 3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa (hash: Hxic0zc1qRx4CA2UDTVeOqPJKqWfLQMrOn0H3sbkso8=)
                          3: 34352e362e3234312e302f32342d3234203d3e20323634333836.roa (hash: WHSbq0/+FZFnkOmGhfmYLcPGIMlX1Meoxz9qVJFO1Os=)
                          4: 34352e362e3234302e302f32342d3234203d3e20323634333836.roa (hash: uHeS7RCqj7iIIW70kNHK8DdSTodTdS1+Zm+hZPfX+MI=)
                          5: CC038C42F33B3D558931769A27D97E3412751117.crl (hash: mcZCYBNX9lvgKxCxwzGcB4A66HY8iwK2rfj+G0xjrSk=)
                          6: 323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (hash: SuPeGxxO5wAeBb+YxrQkduz7TjexbkD0jj7peGH2l8Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 05:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b0:30:2d:3b:2a:f3:ec:69:c2:51:e6:3b:16:ac:ac:e6:e8:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Dec 22 03:43:32 2025 GMT
            Not After : Dec 23 05:48:32 2025 GMT
        Subject: CN=58350782EC4B5EB46F0F946F458678DE32D313E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:33:fd:7c:f6:cf:af:4f:60:2a:60:33:17:
                    d6:44:63:63:10:b1:bd:a6:3f:a0:27:49:cf:46:83:
                    6e:52:f4:2c:1f:a0:d8:8e:bf:b5:2a:b2:f7:21:80:
                    8e:83:c8:5f:a1:9b:2f:11:41:22:13:a5:1c:ac:bd:
                    61:10:fb:1d:72:a5:fb:b3:b3:db:25:f7:63:c6:67:
                    82:53:ef:73:96:2e:b6:72:29:c8:c4:69:b7:c6:28:
                    4b:7a:2c:c2:c8:9e:ef:e7:30:98:b4:96:c6:28:73:
                    a3:8d:83:58:2f:a0:a0:d1:2e:39:31:e4:b0:f2:8b:
                    9e:c3:13:c5:ff:12:50:36:6a:6d:7b:d5:b1:58:c1:
                    4e:fd:ec:c8:f5:f4:c7:89:ee:c5:2c:24:aa:40:20:
                    39:92:cd:89:a9:cd:eb:1a:af:25:c2:33:de:48:a9:
                    99:5a:5a:a8:d0:2f:4c:23:4b:6f:b0:1c:1a:b2:75:
                    64:74:d7:55:35:34:c6:64:bd:b6:13:84:7d:81:b9:
                    b6:78:00:1c:39:79:50:59:a7:54:81:f7:28:4a:04:
                    1a:46:bf:0d:51:98:f5:b1:f6:88:f4:7f:d6:57:c6:
                    8f:f9:33:36:b8:a7:6c:f7:d0:93:d8:b3:5e:31:b2:
                    56:63:0f:ac:af:8f:6c:bb:41:5d:9f:66:cb:ce:aa:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:07:82:EC:4B:5E:B4:6F:0F:94:6F:45:86:78:DE:32:D3:13:E3
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:a5:1e:2d:22:77:8d:d8:8a:10:05:c6:9c:da:2c:4b:89:
         8f:1c:d3:f2:ec:bd:32:bf:c9:0f:c5:d1:f5:ab:16:b1:f6:c8:
         e1:39:b1:ef:66:15:c7:7f:9a:a2:f4:69:5b:f1:0d:53:5a:49:
         b9:2c:f8:53:f9:fe:78:cf:73:66:c7:e0:38:b2:83:7d:18:bd:
         ae:7d:ce:77:18:11:c8:1c:da:63:2b:6e:05:3d:68:d0:4e:30:
         d9:06:f7:b1:a0:9f:f5:26:cc:99:56:16:bf:d7:72:07:6f:c8:
         d1:b0:5a:80:92:9c:bf:e3:23:6f:5b:45:28:00:5c:a1:37:01:
         0a:23:8d:3d:1a:f1:67:9f:22:9d:3d:df:b6:e2:64:f2:0c:80:
         e8:ce:cb:f2:dd:fb:a9:65:62:98:d7:f7:74:a7:b0:56:0c:9f:
         3a:f5:1b:83:ce:7e:b5:5d:80:a0:5c:3e:09:bf:8e:70:3f:96:
         6c:fa:22:32:e0:45:ef:21:58:47:a3:a7:e1:eb:11:a1:7f:3e:
         da:1a:64:2d:6a:a3:8a:74:fa:c6:2f:e3:49:f6:86:ff:a0:f6:
         8b:83:57:1a:eb:1a:b5:3c:bf:cd:ee:08:f4:80:ec:88:5b:07:
         92:39:e3:63:fc:2c:9b:bc:f5:a5:eb:84:01:c4:bf:99:a0:46:
         fc:eb:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:16:15 2025 by rpki-client