This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
File:                     84398976322691988CABA640BBB2854AECDF6B87.mft (raw, json)
Hash identifier:          C6hX0nvcMsPR07adDGgPx2GS7Cgf+1XW/JIVQJYg/CU=
Subject key identifier:   42:25:2D:16:3A:9F:D9:72:80:B4:4B:6F:FD:54:0E:EA:E9:36:10:DA
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       5075430390CE863C16BD9570F0877F0BA4E0DC97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
Manifest number:          0348
Signing time:             Fri 19 Dec 2025 01:55:53 +0000
Manifest this update:     Fri 19 Dec 2025 01:50:53 +0000
Manifest next update:     Sat 20 Dec 2025 05:48:53 +0000
Files and hashes:         1: 34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa (hash: ut8i0jZpnlCMPCB3CJfpQb73ZvU4CADMgCaGjWV1rME=)
                          2: 34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (hash: 7zUiEVtaD8KQJ/F6pDQVWpW/FDKnkwVeoJp+AkQ6e6k=)
                          3: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: mMCAPGBeDhUcxnyOEkd0lg3w0aHt6z/TjY4K14KK1u0=)
                          4: 84398976322691988CABA640BBB2854AECDF6B87.crl (hash: 9I3OkrBJQltZcJBZlhDhHeetorz1FO+4Vo8PuhtLZac=)
                          5: 34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (hash: 8Ie1Q9KbCiZ9I8Q6+5cFYoSMow4J4E4PUTbUT9Ag/+0=)
                          6: 34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa (hash: PqXMdIlxskw70ZI51b+M1vaG9j21mjHarNRG/EWSBCg=)
                          7: 34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa (hash: GlLGPZ6hufSBquPkt/mRs0jxgDabJwabomTu0QzL8pY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 05:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:75:43:03:90:ce:86:3c:16:bd:95:70:f0:87:7f:0b:a4:e0:dc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Dec 19 01:50:53 2025 GMT
            Not After : Dec 20 05:48:53 2025 GMT
        Subject: CN=42252D163A9FD97280B44B6FFD540EEAE93610DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:d8:ca:01:27:e5:cd:49:8a:6a:b7:7b:e2:
                    c9:44:d6:75:45:8a:5c:60:6c:75:bb:06:bd:72:da:
                    f5:6f:44:14:41:a5:75:b7:d2:ad:e8:3d:f3:b3:2a:
                    5c:2c:f8:60:40:a2:e6:b8:73:2f:73:0f:37:d2:cb:
                    37:b7:24:eb:53:b3:6c:c3:75:09:9d:29:ef:a0:c3:
                    04:94:0d:24:b5:98:77:64:4d:ff:8c:48:b9:0b:f2:
                    ab:e7:7d:aa:77:d0:c1:2d:5c:54:0d:a8:14:a2:68:
                    7a:f1:32:99:16:4b:9f:d0:24:fb:3d:ca:9b:95:f3:
                    19:07:94:23:8f:e4:7c:17:8b:90:b3:14:db:93:7d:
                    e2:15:cc:73:15:97:93:e7:74:ab:c2:4b:14:ad:f5:
                    66:55:b6:7e:89:d2:50:8a:c5:50:f9:9e:83:8f:ed:
                    f2:01:5c:10:dc:7a:0b:81:fe:18:f1:e3:16:66:97:
                    c5:84:de:49:62:5f:ab:80:f3:7f:ae:2d:e9:c9:a8:
                    75:5d:d8:4a:19:23:83:8a:d4:2b:36:f5:94:63:a8:
                    c0:70:cf:ad:14:da:e4:82:a3:db:ed:86:ad:c2:17:
                    30:1a:0c:e5:cf:7b:a1:20:11:8b:87:1e:a3:a0:32:
                    c7:a9:7a:62:5e:73:29:45:f6:d6:3f:0d:8f:41:35:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:2D:16:3A:9F:D9:72:80:B4:4B:6F:FD:54:0E:EA:E9:36:10:DA
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:12:86:a1:31:4e:1d:f2:57:0c:e9:b8:ef:63:ec:1a:4f:0d:
         5e:d3:9a:11:b1:ee:da:0c:c4:1b:db:cc:07:95:74:96:c9:d1:
         93:83:4b:f2:7f:23:1b:90:1f:99:04:95:3c:40:c0:d8:c6:18:
         00:32:b3:17:92:53:ea:30:15:31:5b:52:d0:dd:4a:03:21:fa:
         78:59:62:ff:f1:bc:4e:63:7d:d8:09:37:28:01:f5:8d:43:26:
         a2:f9:2d:b2:09:40:cc:81:5a:a8:5d:91:64:e8:4f:d5:7a:9f:
         88:34:6d:d2:21:9b:02:6f:2d:97:3f:e2:6e:a9:b1:6d:05:a1:
         9c:c1:0f:90:9f:18:eb:b4:74:ab:47:0e:a2:92:be:14:e1:f5:
         f6:bb:36:0a:21:ea:27:02:e4:36:dd:5d:9b:7e:17:98:32:bd:
         b2:78:54:f3:26:8b:a8:fb:91:77:25:aa:00:fa:d8:3e:d0:a8:
         6e:ce:91:a4:3b:ec:d8:90:24:36:38:b4:b6:5a:0b:76:33:51:
         2d:cf:86:f2:cb:49:ef:ff:26:90:73:6a:f3:89:5a:5b:50:dc:
         7f:fb:63:b0:17:b9:f0:ef:fb:0a:43:91:f8:e1:8e:76:84:f7:
         15:4f:39:bb:9d:d5:e9:78:11:5c:cf:4e:26:66:c8:e0:0b:68:
         36:71:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:08:06 2025 by rpki-client