This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.mft
File:                     367A395C617DF249BBDEA2B243555E7D0463C336.mft (raw, json)
Hash identifier:          nqJuR4QDQLgK7LF24acUHSncNw5NJtUwEh2TAuRKoCA=
Subject key identifier:   DC:8D:1D:25:44:C5:69:EF:DF:B5:B4:3E:F8:97:06:06:D9:F8:F8:F9
Authority key identifier: 36:7A:39:5C:61:7D:F2:49:BB:DE:A2:B2:43:55:5E:7D:04:63:C3:36
Certificate issuer:       /CN=367A395C617DF249BBDEA2B243555E7D0463C336
Certificate serial:       1DDA8C5584861DD613A275E50DF0DA83B274F68E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.mft
Manifest number:          0306
Signing time:             Mon 22 Dec 2025 19:33:45 +0000
Manifest this update:     Mon 22 Dec 2025 19:28:45 +0000
Manifest next update:     Tue 23 Dec 2025 20:09:45 +0000
Files and hashes:         1: 323830343a386565343a3a2f33322d3334203d3e20323733343534.roa (hash: nXObm6ICYhD0XLJ8I92uYB7c/+uLLWyVtEGw0gz0VG0=)
                          2: 367A395C617DF249BBDEA2B243555E7D0463C336.crl (hash: LZZazMI+JByBJ2YYrwNQmOsVRCZa+wXO9I49NKo1PB0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.crl
                          rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:da:8c:55:84:86:1d:d6:13:a2:75:e5:0d:f0:da:83:b2:74:f6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367A395C617DF249BBDEA2B243555E7D0463C336
        Validity
            Not Before: Dec 22 19:28:45 2025 GMT
            Not After : Dec 23 20:09:45 2025 GMT
        Subject: CN=DC8D1D2544C569EFDFB5B43EF8970606D9F8F8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:4b:61:0e:d0:4b:d6:5f:c7:07:2a:61:2e:
                    2d:a7:9f:31:74:91:c3:8f:70:cb:20:df:bf:44:53:
                    cc:d2:aa:90:5b:c2:b1:09:0c:eb:e0:02:be:a9:39:
                    e5:3e:59:dd:ea:22:61:e7:43:9c:3f:c2:2f:7f:33:
                    9e:5f:03:87:5b:96:e5:7f:17:81:14:ff:a3:71:9f:
                    1b:e0:e9:c5:05:00:7b:21:41:7b:25:b3:08:93:4c:
                    16:e9:36:24:4e:85:06:2d:98:8f:ab:50:e2:c4:b7:
                    05:b9:cd:a2:74:ae:36:4c:32:18:cd:63:58:a6:3c:
                    7c:b2:29:3d:19:78:60:7a:f6:72:35:79:20:f2:4b:
                    d8:78:54:40:06:00:e3:bd:98:2d:5d:eb:10:3b:93:
                    dc:79:27:3d:13:bd:9c:48:6a:b5:40:66:80:2f:a6:
                    c1:ec:63:aa:c9:08:39:7e:be:d0:ed:51:1d:92:fb:
                    ea:78:9b:4f:94:e3:47:53:4e:8d:1a:15:4f:09:98:
                    3b:24:36:01:ca:25:21:40:70:e0:ca:c0:59:4c:fd:
                    85:fe:d7:db:30:ca:79:96:e6:88:5f:e6:fd:bc:a5:
                    82:0e:8c:cb:66:68:83:bb:bc:ab:4b:46:c4:0f:0c:
                    f7:31:4c:32:b5:34:94:a1:e8:36:ca:79:b3:7c:6a:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:1D:25:44:C5:69:EF:DF:B5:B4:3E:F8:97:06:06:D9:F8:F8:F9
            X509v3 Authority Key Identifier:
                keyid:36:7A:39:5C:61:7D:F2:49:BB:DE:A2:B2:43:55:5E:7D:04:63:C3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:46:6d:26:8c:9d:ef:0f:ca:89:9e:3f:d9:60:b2:05:eb:d8:
         10:3e:a0:b5:55:93:62:bc:c1:c9:f3:da:99:7b:86:f3:fd:07:
         4a:c0:7e:4f:5f:ee:df:11:3c:3d:6e:56:d5:16:d6:93:34:1e:
         55:15:0f:0f:2b:47:58:36:56:b3:5b:ea:99:30:34:69:56:95:
         46:ea:a1:e8:5d:c1:f1:f6:1e:40:5a:f3:3c:6b:40:6c:60:8d:
         1f:ab:46:e4:74:30:8f:d4:92:20:6e:5c:43:f7:8e:40:c6:46:
         e1:e6:1e:95:eb:60:4a:9b:1e:41:d3:d1:68:51:ec:87:6c:0f:
         27:73:5a:5c:4e:ab:30:64:fa:55:83:d2:7d:f4:cf:af:b1:3d:
         38:7b:74:9b:53:4e:06:a6:94:63:db:d6:81:42:dc:dc:12:21:
         7a:6d:e2:86:50:2f:89:3a:04:b2:a0:a9:94:38:39:02:ed:b2:
         6d:fe:49:70:96:5a:62:91:b5:38:69:0e:5a:1b:2d:29:0c:ed:
         bb:8a:66:09:c7:61:1d:e9:78:a1:17:9c:92:b7:b3:ac:ea:f6:
         8e:56:32:df:13:57:0f:17:32:4c:3b:7b:f4:3d:c2:53:07:4f:
         92:c2:2d:63:f1:17:a7:7e:79:cc:31:6b:8a:e2:1e:49:78:17:
         6d:b3:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:49:58 2025 by rpki-client