This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
File:                     0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json)
Hash identifier:          XN2PMy4NmkeoPHPl8fpUY1kX9FJVCFYV/bqSK18eG0s=
Subject key identifier:   66:DD:86:A5:E7:AC:B0:B0:3A:70:1B:39:AA:E9:AF:40:5A:39:AD:55
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       7EE70A278ADA7C52AA55D095F50E0B7D9A22C19D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
Manifest number:          0348
Signing time:             Sun 21 Dec 2025 08:50:27 +0000
Manifest this update:     Sun 21 Dec 2025 08:45:27 +0000
Manifest next update:     Mon 22 Dec 2025 09:11:27 +0000
Files and hashes:         1: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: 2dadztaER+9gyBL5gmUFWVyA0Rshw1nGZx22j2sUlE8=)
                          2: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: CvPt6i/FKK2bJ2KHKaQ02WILQwDUCCrNQlOgIBapYng=)
                          3: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: LUH2yAHcOCYbQeQ61S9tdq8XglG8/XesN/q4q7TNUdM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e7:0a:27:8a:da:7c:52:aa:55:d0:95:f5:0e:0b:7d:9a:22:c1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Dec 21 08:45:27 2025 GMT
            Not After : Dec 22 09:11:27 2025 GMT
        Subject: CN=66DD86A5E7ACB0B03A701B39AAE9AF405A39AD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:6d:f4:80:4c:5f:5d:83:f4:e7:84:21:72:
                    ef:ef:74:21:b1:c5:3d:70:bb:73:c5:3a:73:9f:9a:
                    8c:01:5b:1e:4e:a7:42:47:f3:ef:ba:ab:2f:70:72:
                    24:9d:bf:0f:91:76:2c:28:9c:aa:d4:3c:7d:e6:d2:
                    9d:ad:13:8f:fe:38:53:05:61:5b:d3:9a:58:77:3c:
                    e3:01:97:9d:f1:45:4b:e0:bf:0d:7f:aa:cc:dd:1c:
                    15:94:7f:18:68:ca:9b:a5:7a:52:ee:f5:6d:7b:b1:
                    a4:aa:9d:a3:24:37:7f:99:61:8c:9a:fc:f3:e0:50:
                    b0:1d:4b:b2:cf:07:5d:33:1c:a0:00:97:30:d1:20:
                    c1:9d:74:9e:9a:4b:52:dd:a8:19:c1:6e:11:a9:c7:
                    db:50:58:56:af:83:e1:df:e6:6d:8c:0a:9a:43:96:
                    13:e3:ce:22:4f:b3:70:dc:18:20:d7:21:21:f4:36:
                    a0:ff:6e:31:93:4c:dc:5f:70:ed:46:9f:ec:6f:3d:
                    b8:c5:06:65:60:fc:72:ae:b3:94:57:13:52:49:59:
                    a3:b6:6d:45:5f:9e:7e:1c:3f:aa:8e:32:2f:c4:ea:
                    c5:13:87:c2:a1:c7:5c:12:10:f0:12:8b:5d:a7:5a:
                    ee:e0:d7:fc:ac:bf:9c:9f:c1:39:c6:8c:ac:f6:b9:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DD:86:A5:E7:AC:B0:B0:3A:70:1B:39:AA:E9:AF:40:5A:39:AD:55
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:db:55:77:0f:36:ed:2c:b0:09:a2:d3:48:28:6d:58:f2:
         7e:99:3f:f1:8a:2f:a7:f2:08:85:de:77:03:5f:d2:dd:ea:2b:
         a2:56:12:2d:1e:de:c8:69:2b:c3:56:a8:e1:c6:5c:fe:61:a2:
         30:5f:1f:7e:26:5b:0d:95:99:fb:13:5d:0d:de:50:e3:1f:73:
         df:4b:e8:08:cc:b5:34:60:b7:58:4a:84:e1:33:f5:fb:74:04:
         ff:93:d1:25:c3:3b:53:66:10:ce:f2:c8:0a:31:8a:dc:15:f9:
         1e:ab:4c:86:70:01:4d:f6:8e:da:e5:ab:96:42:df:78:08:47:
         36:e3:d8:b3:10:ae:52:9c:41:d9:a9:df:3e:0c:67:5a:e8:ca:
         4f:23:82:e7:31:51:86:2a:66:c5:58:fe:cb:ad:7a:8e:0f:2f:
         79:55:20:7f:e0:3f:e1:9a:eb:c6:82:42:27:2b:83:77:4e:83:
         c2:11:fd:15:92:ac:cc:e4:f7:0a:55:e2:c7:c6:8f:da:68:43:
         98:d1:7f:04:f9:fb:23:6d:4b:cc:2e:13:5d:1e:c0:29:c2:47:
         c6:32:95:49:fd:13:09:5a:80:2f:f1:8c:20:3a:22:1d:94:e1:
         2d:f4:4f:fc:a6:77:90:dc:48:83:53:41:cd:6e:1d:ea:8d:e1:
         50:2f:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:44:23 2025 by rpki-client