This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
File:                     B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft (raw, json)
Hash identifier:          z9XOY3r67LiZLGxtP+uw9uMlO8Py694XYucgSs62okk=
Subject key identifier:   95:BC:69:02:E3:9D:E5:77:54:5E:0D:3D:B4:D5:B8:84:6A:97:EC:B7
Authority key identifier: B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B
Certificate issuer:       /CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
Certificate serial:       320A78BD6B10E069A0EABA92531853EBC6D01431
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
Manifest number:          0350
Signing time:             Mon 22 Dec 2025 17:29:15 +0000
Manifest this update:     Mon 22 Dec 2025 17:24:15 +0000
Manifest next update:     Tue 23 Dec 2025 20:39:15 +0000
Files and hashes:         1: B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl (hash: Elj63iB5Hv519MAXw7UaUz0ImC57K0444W4MOGRXQto=)
                          2: 34352e3138352e3130312e302f32342d3234203d3e20323639333638.roa (hash: 5+tRShmBiDV8GaKBwMyMeq9//INf1ED4E9jd1cpd2Mw=)
                          3: 34352e3138352e3130302e302f32322d3232203d3e20323639333638.roa (hash: UQhQsOgn36EjK3paX41KT3moQYvBhQn0tHrFh6xTrqw=)
                          4: 323830343a363338633a3a2f33322d3335203d3e20323639333638.roa (hash: T9IceYPW/a3fvqwgRAzbWKRt5aJjkFLo9iOBnB0GSEs=)
                          5: 34352e3138352e3130332e302f32342d3234203d3e20323639333638.roa (hash: gDCbatDAQJOpr5gFEKSnjLKmmNSFfgeumZltLXgeKIg=)
                          6: 34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa (hash: 36374LnkpjePt0tQOkfIUr6L+EKV8FhqQQU0PhCCark=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:78:bd:6b:10:e0:69:a0:ea:ba:92:53:18:53:eb:c6:d0:14:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
        Validity
            Not Before: Dec 22 17:24:15 2025 GMT
            Not After : Dec 23 20:39:15 2025 GMT
        Subject: CN=95BC6902E39DE577545E0D3DB4D5B8846A97ECB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d2:70:6e:99:75:3b:51:5d:39:5b:d4:5b:c3:
                    8e:62:44:2d:0b:80:df:f7:d9:e6:71:c7:90:d3:71:
                    c9:e7:da:6a:4c:bc:f1:79:1b:63:8e:00:d9:df:46:
                    85:93:c7:bb:92:b8:13:99:55:1a:75:43:95:8a:a8:
                    79:7d:9b:74:75:e2:20:f0:a5:56:3b:03:a0:30:cb:
                    b1:3d:e8:e6:56:26:7c:3f:06:94:2b:b3:1a:45:50:
                    81:f1:92:cd:ce:18:e8:55:7c:c5:36:0f:23:0d:55:
                    87:64:2e:ea:09:be:35:b7:78:c5:7d:33:22:3a:2d:
                    0e:17:1a:2f:29:6a:0b:d1:76:14:0e:17:e5:70:ef:
                    ad:46:37:23:ad:1c:66:00:a5:0e:84:c7:d5:e9:b3:
                    b6:3b:97:52:89:3f:6b:25:79:35:fa:e5:ef:7d:44:
                    ea:c9:1c:d1:36:91:ca:34:97:59:61:35:e2:6f:6c:
                    b8:8d:b2:7e:1c:5c:c2:d0:c3:fb:d7:1e:8c:4c:b8:
                    01:64:24:9a:f2:03:51:9a:fe:f1:92:28:23:4d:e4:
                    0b:0c:1e:fa:3f:75:8e:68:3e:d4:7f:34:26:9f:f7:
                    14:ea:6f:d2:23:da:90:97:aa:4a:e6:ac:c7:f9:dd:
                    72:67:3f:5e:ca:86:96:df:66:21:b6:d3:98:3e:da:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:69:02:E3:9D:E5:77:54:5E:0D:3D:B4:D5:B8:84:6A:97:EC:B7
            X509v3 Authority Key Identifier:
                keyid:B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:3d:ca:33:e2:4d:51:55:65:dd:b7:6b:b4:35:8c:89:a5:
         e9:3d:6a:44:ff:f7:7e:92:7e:72:35:3f:85:3f:73:59:85:f8:
         75:be:fb:11:f1:b6:32:87:6f:9a:12:8a:0f:68:63:d9:14:31:
         8b:6c:57:2c:a6:9e:fb:37:b8:6c:1e:89:6f:76:e5:2d:45:78:
         8c:4f:49:08:0a:f8:6f:40:23:58:39:9c:ca:cf:90:c0:1e:e0:
         ba:a9:43:e2:d8:ee:4d:61:03:d5:30:09:95:1d:89:0b:c8:f8:
         f0:c4:8e:7a:24:04:f1:cc:ae:4c:91:f9:9c:b6:ed:1c:02:17:
         48:4f:61:db:00:05:66:6c:77:ed:db:f6:89:15:5a:10:cc:34:
         6c:3d:c1:2f:79:1a:87:30:5b:11:20:c9:62:1f:df:3f:22:47:
         9e:91:97:f5:59:65:00:0a:89:18:55:1d:6b:3b:e2:e1:42:3b:
         38:23:1d:d9:0d:82:12:ed:e3:3d:35:2a:33:84:5d:ec:60:36:
         1a:ac:e3:07:b3:15:23:d0:18:d9:62:7e:82:db:8b:6f:7a:ba:
         9b:77:3c:da:2d:ee:9c:e6:59:28:b9:5c:6f:20:ac:ed:f2:b5:
         25:2f:e8:f3:d5:84:d4:f4:48:90:15:26:6a:58:8a:2c:96:fa:
         e7:b9:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:25:54 2025 by rpki-client