This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
File:                     203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json)
Hash identifier:          /2Q2QQZuBff1APLYoa1tms1yeoP55U+aWyYM2LWLhx8=
Subject key identifier:   BD:81:D9:B0:1F:EF:45:40:92:09:CD:2C:BD:BF:27:B1:EF:E5:CB:D0
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       6C3F3E6FF74D8DDDA4D244F84A5233D15EEE6EC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
Manifest number:          0342
Signing time:             Fri 19 Dec 2025 10:48:13 +0000
Manifest this update:     Fri 19 Dec 2025 10:43:13 +0000
Manifest next update:     Sat 20 Dec 2025 13:18:13 +0000
Files and hashes:         1: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=)
                          2: 3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa (hash: hjkvUrLUUU0VQ67o4ucvyUwTiD+eK2nBuFfG35L4KVE=)
                          3: 3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa (hash: sJuPnLliL5BAll/ob66pS6k5uH1gd8zUIA6VXGteRg4=)
                          4: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=)
                          5: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=)
                          6: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: Bx0ZLD8h1R5NzngHl1MWzQFg7mshOsdtp+JiKyQDae4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3f:3e:6f:f7:4d:8d:dd:a4:d2:44:f8:4a:52:33:d1:5e:ee:6e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Dec 19 10:43:13 2025 GMT
            Not After : Dec 20 13:18:13 2025 GMT
        Subject: CN=BD81D9B01FEF45409209CD2CBDBF27B1EFE5CBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:ab:e9:d9:e9:cd:d0:69:12:b1:3d:4d:5a:
                    23:b6:2f:7b:5d:8c:12:3c:16:04:ad:a8:b7:fe:83:
                    02:c2:e0:88:94:3b:40:63:81:90:bc:78:0c:e1:f5:
                    4f:ac:ea:24:bb:85:da:71:a6:3e:83:92:1b:82:03:
                    18:59:31:5d:4e:2a:36:07:03:83:e8:c1:68:bf:b3:
                    0f:f7:48:eb:b8:46:ab:b4:9b:65:2f:46:bc:c5:a5:
                    b5:8e:c4:9e:83:03:de:e6:4c:a7:dc:0d:04:e4:92:
                    65:4a:c2:c6:70:9b:7a:3d:85:cd:2c:50:0d:6f:13:
                    6b:e8:e9:72:d8:84:12:ee:2e:e4:61:34:8d:52:c0:
                    57:b1:86:41:bb:2c:67:69:5e:a7:db:de:83:7b:c7:
                    8f:29:46:c0:98:a0:15:25:c4:8d:12:da:e8:c1:66:
                    cf:0f:a1:92:f4:c9:2f:6f:16:cb:ee:76:d8:24:ff:
                    c1:68:18:5f:a3:72:f1:ee:68:58:c2:02:c6:be:6d:
                    26:e1:4e:e4:d8:e0:3e:be:7c:61:4e:ed:78:45:f8:
                    28:a9:ff:87:dd:d0:e7:0a:8d:7a:a6:10:1c:8d:ea:
                    48:4d:7b:cf:05:9c:2f:28:35:70:a5:0b:e8:3f:03:
                    f6:d7:d3:78:f5:e9:b7:2c:06:a5:66:1f:af:50:c0:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:81:D9:B0:1F:EF:45:40:92:09:CD:2C:BD:BF:27:B1:EF:E5:CB:D0
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:91:f5:46:cc:39:c5:62:7c:b5:61:2b:25:9a:23:be:00:
         5f:23:24:49:68:f1:74:69:01:a1:33:8f:a2:81:2b:ef:8d:a8:
         84:ee:8d:a4:7e:db:6f:4b:f0:ec:77:81:01:8a:e1:58:81:15:
         8e:d5:e4:cf:91:2e:67:e9:70:f1:d6:59:2c:77:6a:12:2f:34:
         05:22:c6:f5:7c:a8:e2:c0:17:7f:43:34:a4:36:07:5b:a5:73:
         a1:38:95:4e:a4:e6:f3:ab:ee:54:dc:d5:b3:e3:5a:32:34:e4:
         55:e1:a4:14:fd:ef:d8:86:68:ca:9e:4f:ec:fe:06:15:f8:4f:
         bc:0b:f2:9f:ca:9d:1d:50:52:09:dd:c0:df:ff:53:c6:a6:b6:
         21:f9:ac:29:04:c0:73:81:f5:8a:3d:8a:0f:94:34:15:f9:f5:
         79:dc:72:98:dd:da:7a:87:da:40:14:f0:f3:a6:25:b4:ee:1b:
         c5:f9:64:70:c6:cd:38:6a:42:04:ea:3b:a7:72:02:cb:e0:71:
         d8:38:f7:ef:00:0e:0d:f6:f5:0c:0e:3e:26:af:39:73:67:c1:
         28:18:09:35:7c:72:49:28:a4:68:04:33:80:60:15:c3:1e:55:
         0d:04:5b:8f:4b:52:b7:79:64:ea:9d:4c:a3:64:7d:d0:ee:65:
         2e:af:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:00:34 2025 by rpki-client