This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
File:                     1A3ED1628CA42B3B4C8213417B61162F196BD434.mft (raw, json)
Hash identifier:          ucbttW1Abh7X5G2ibssgisarHZ21xcdxRYDKVEunqOw=
Subject key identifier:   08:20:80:7E:8F:8F:B5:C6:0C:6F:D0:54:0B:6E:40:4A:55:75:FD:8A
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Certificate issuer:       /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial:       7BE800D71EC889DC0F8B9C5E118EA98C542B8B72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
Manifest number:          0346
Signing time:             Wed 24 Dec 2025 08:49:18 +0000
Manifest this update:     Wed 24 Dec 2025 08:44:18 +0000
Manifest next update:     Thu 25 Dec 2025 10:45:18 +0000
Files and hashes:         1: 1A3ED1628CA42B3B4C8213417B61162F196BD434.crl (hash: N7k1Zs00lZGP1E6BmjWtiUyeBj/Gg/JASW8hbZE2SDE=)
                          2: 323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (hash: hvcsJL+15g+sHCIcoaqDoNFc49qRkcfVNAlRBE7gMII=)
                          3: 3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (hash: Pmk25y2Umg9oJFme2ExEpYGQMhSUFKOVTccOjUFoAZA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
                          rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e8:00:d7:1e:c8:89:dc:0f:8b:9c:5e:11:8e:a9:8c:54:2b:8b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
        Validity
            Not Before: Dec 24 08:44:18 2025 GMT
            Not After : Dec 25 10:45:18 2025 GMT
        Subject: CN=0820807E8F8FB5C60C6FD0540B6E404A5575FD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e6:f9:32:20:29:1f:2c:3e:48:c1:e0:c9:b5:
                    43:75:20:b1:2c:f2:36:34:84:3f:b7:40:5c:d4:c8:
                    fe:b3:38:0f:c4:db:ba:3c:e8:86:11:c3:70:47:60:
                    44:0d:fc:9b:02:9f:7f:de:90:61:79:7c:c7:89:cd:
                    45:53:61:72:5e:d9:44:b5:08:f6:00:36:43:b0:71:
                    e2:75:93:a7:2d:ed:cf:14:c2:89:a1:1a:20:65:00:
                    0f:3f:fb:f4:a5:70:68:e5:87:2d:d1:6f:7c:69:46:
                    e9:75:46:0a:ca:40:a5:df:6b:9d:60:cb:c5:46:24:
                    bc:44:c4:93:b0:c4:24:1a:9d:62:69:d7:c4:f4:94:
                    a1:89:fd:6c:db:c3:2f:30:a6:48:60:43:1d:c1:40:
                    33:a2:e1:db:d4:7d:3b:42:ff:52:bb:40:35:03:6b:
                    94:f1:dd:56:9a:e1:b6:1e:e9:5a:b9:d7:a6:75:80:
                    2e:65:f3:29:b1:d3:9e:ad:03:ed:18:7e:3f:ed:aa:
                    76:69:90:10:1a:d2:c1:21:44:99:d3:5e:33:bb:43:
                    57:61:d4:15:8c:78:52:46:1f:63:21:fb:16:d2:b8:
                    9b:a0:2f:2a:10:20:14:c8:10:90:07:c8:1b:bd:56:
                    6a:c2:13:24:2e:cd:67:95:07:1d:e3:81:35:ed:a1:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:80:7E:8F:8F:B5:C6:0C:6F:D0:54:0B:6E:40:4A:55:75:FD:8A
            X509v3 Authority Key Identifier:
                keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:f8:ed:05:88:91:08:e2:04:d5:66:58:86:c5:85:e9:33:
         a8:c9:04:cf:c0:80:e5:16:44:61:32:d3:cf:d5:88:96:7d:3d:
         67:a5:b3:25:f2:fe:c3:e0:30:2f:a9:f3:b5:8c:0b:ee:ed:ef:
         4a:bc:12:5d:64:9a:ca:ba:b2:50:91:ac:e4:9b:bf:49:1b:67:
         b0:5c:c6:35:17:5c:be:02:71:bf:03:e6:d3:f9:43:6a:9d:10:
         be:cf:1c:51:41:83:87:91:28:88:2b:73:d5:51:dd:26:c0:c3:
         dc:a3:45:82:7d:9f:66:7f:32:6f:90:e7:aa:9b:d4:b8:c5:cd:
         61:65:91:b0:8f:25:ef:a8:0c:9a:65:c9:70:a4:bd:82:e8:4b:
         1f:b2:a8:60:e7:2a:ec:01:27:28:81:cf:4c:3f:5d:0b:66:b1:
         cf:25:5f:34:c5:50:e7:14:35:c6:f0:f6:fe:97:56:21:01:e8:
         bb:a0:e0:87:d7:cf:22:8d:ab:4d:37:fa:5e:d7:45:f9:4d:b7:
         76:5a:cb:b8:67:12:6d:ee:52:b5:a9:b5:e3:c2:a5:a3:20:7e:
         c0:1a:4f:b5:5a:4b:03:e9:27:30:10:7f:29:38:88:5b:b4:be:
         0f:c2:bd:4f:6a:80:bf:dc:96:3a:06:3b:14:a4:f5:2e:cd:4f:
         88:25:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:14 2025 by rpki-client