This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
File:                     3CF129D24760CA58DEE1B42CDACAE4407710A219.mft (raw, json)
Hash identifier:          F06CLX/AZ9PD5qc+EZGcREcIKlFp9DE0AHhyi5e+u+w=
Subject key identifier:   18:A0:EB:44:EB:9F:02:00:BD:5E:54:63:71:13:2A:B3:A9:7B:5E:CB
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       54CB46CFEB0C259758AFE13367396D34770325D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
Manifest number:          032F
Signing time:             Tue 23 Dec 2025 09:54:04 +0000
Manifest this update:     Tue 23 Dec 2025 09:49:04 +0000
Manifest next update:     Wed 24 Dec 2025 10:40:04 +0000
Files and hashes:         1: 3139302e392e37362e302f32342d3234203d3e20323731363432.roa (hash: qS7YOdWdMSn62fYjd4tTd9FWC5HbQvc5gaTCfZGqURY=)
                          2: 3139302e392e37392e302f32342d3234203d3e20323731363432.roa (hash: efOB6BUnFRkXMc/5Xb/3RhyF8NSmzmGLP+0nD5VgYIA=)
                          3: 3139302e392e37362e302f32322d3232203d3e20323731363432.roa (hash: vkdrLfrEgIF4V9ADn9mDWAlBjZbSAmaarjhEV5821lo=)
                          4: 3139302e392e37372e302f32342d3234203d3e20323731363432.roa (hash: qMk30ymCN/0mdqfHbnOIw7ruJwrflPlCaLrbhr/XDBE=)
                          5: 3CF129D24760CA58DEE1B42CDACAE4407710A219.crl (hash: p968LBQuucqjcYf2eKk1KPB9rhyisfsKScmZXETfSJU=)
                          6: 3139302e392e37382e302f32342d3234203d3e20323731363432.roa (hash: 3CSXvgD8gZZJY3OihNgW2wuvdgpLd+7AI9EKOovQkxU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 10:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:46:cf:eb:0c:25:97:58:af:e1:33:67:39:6d:34:77:03:25:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Dec 23 09:49:04 2025 GMT
            Not After : Dec 24 10:40:04 2025 GMT
        Subject: CN=18A0EB44EB9F0200BD5E546371132AB3A97B5ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:13:14:ed:c4:14:11:bb:3e:d9:2f:0f:0e:
                    5a:e0:6d:08:2e:bf:8c:d9:e4:83:3b:64:84:26:63:
                    f5:b6:ca:02:d6:b7:c1:ba:a8:75:05:4f:52:dd:3f:
                    84:66:1a:63:99:70:ae:3b:cc:0d:af:4f:3f:a3:d5:
                    29:75:bf:66:d7:2d:4b:70:81:9f:c3:1f:34:9b:67:
                    33:1d:81:e6:82:f1:7a:59:e6:1d:40:71:a5:7b:c6:
                    42:bd:cb:e0:ce:7c:35:d1:1b:9d:63:d4:0e:97:eb:
                    67:36:6a:46:96:de:79:f4:a3:55:3e:21:9b:0e:db:
                    e1:b4:1f:33:c3:7a:c0:6d:94:54:b4:f7:14:7d:5c:
                    46:67:69:4e:b7:95:95:b8:2a:b3:d8:a0:be:08:51:
                    b7:60:56:59:25:c9:59:67:0a:1e:a0:94:cd:44:0a:
                    c4:5a:c9:ee:72:4a:7a:bf:d7:50:9d:c5:06:df:c2:
                    21:56:81:35:9c:72:e5:d6:82:77:6f:33:66:80:23:
                    dd:ff:fd:bf:76:04:f2:0b:c9:8d:7c:b1:9b:cf:ca:
                    58:6c:72:1b:6a:91:ef:b4:54:27:b4:fd:60:42:61:
                    f2:36:e1:ea:62:5a:33:7b:b5:7f:5a:19:89:26:47:
                    26:a7:41:8a:1b:16:92:33:a7:59:df:39:7f:f5:59:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A0:EB:44:EB:9F:02:00:BD:5E:54:63:71:13:2A:B3:A9:7B:5E:CB
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:72:49:57:28:87:74:b4:2d:f5:fb:3f:28:61:00:1d:5c:b6:
         3f:f7:bd:c9:7d:af:67:4a:29:41:83:ad:00:bd:29:4d:90:cd:
         10:6d:4e:45:23:a4:32:ae:a3:29:09:4e:d1:0e:01:08:db:9d:
         00:a5:5b:9d:32:12:85:32:80:7c:62:cd:3a:c6:be:8a:bf:b7:
         06:e0:2b:05:11:d7:ff:85:6b:b5:05:0c:46:55:87:12:60:64:
         e9:ae:c0:e0:4e:b3:60:a8:d9:b3:a5:00:6e:22:56:31:f1:0f:
         e9:e1:cc:29:20:93:63:07:c3:4b:e8:1e:ab:9d:50:14:66:7a:
         6e:f1:45:ce:84:05:f9:61:f1:c1:2d:b7:69:c3:c5:f1:e7:b4:
         41:f2:e7:9a:79:3f:83:a4:bd:54:8d:48:85:15:df:6c:6e:3f:
         85:fc:17:92:e4:17:d7:ab:69:d4:90:80:f1:32:1f:6e:55:6e:
         92:1e:c3:03:88:8d:35:b4:09:1d:c7:09:75:70:c2:08:5a:7c:
         fd:f1:0b:4d:d5:a5:d3:43:1d:f4:4e:b1:3e:5c:a0:9a:88:96:
         8a:6a:68:ac:ce:d3:66:92:55:cb:b3:14:08:71:11:a5:14:ef:
         ae:43:b7:81:90:3b:06:ec:d9:27:ae:76:9b:c5:78:f8:b0:59:
         d9:89:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:16:59 2025 by rpki-client