This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.mft
File:                     803A7C5B6496990909FCECFA71E79A79E3580104.mft (raw, json)
Hash identifier:          wTqNtDQikFxHEl6sWVKa2Hs1rHYNfNbKOKcrwJa4kTo=
Subject key identifier:   3D:D6:8A:2B:07:BA:2A:C3:1C:76:2A:96:4E:DB:77:C9:E3:A7:D7:23
Authority key identifier: 80:3A:7C:5B:64:96:99:09:09:FC:EC:FA:71:E7:9A:79:E3:58:01:04
Certificate issuer:       /CN=803A7C5B6496990909FCECFA71E79A79E3580104
Certificate serial:       0210243EE3E4249CE086BC09E2495D7740B0090D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.mft
Manifest number:          0307
Signing time:             Mon 22 Dec 2025 18:24:34 +0000
Manifest this update:     Mon 22 Dec 2025 18:19:34 +0000
Manifest next update:     Tue 23 Dec 2025 20:40:34 +0000
Files and hashes:         1: 323830343a366565303a3a2f33322d3334203d3e20323730363234.roa (hash: mLfGgGeWDbdyAEI99GRmLSYKCJxstDT5vzmel9bW/kw=)
                          2: 803A7C5B6496990909FCECFA71E79A79E3580104.crl (hash: r0aK8wQ3ezWEfdXRRzfwUZVbMNap+wmhajpZZdp9+TU=)
                          3: 3138362e3233372e3130302e302f32322d3234203d3e20323730363234.roa (hash: iivelYdoq3WrJPNMKVAGuvJsnbYKcXXIbMiXEqBnS/U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.crl
                          rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 20:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:24:3e:e3:e4:24:9c:e0:86:bc:09:e2:49:5d:77:40:b0:09:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803A7C5B6496990909FCECFA71E79A79E3580104
        Validity
            Not Before: Dec 22 18:19:34 2025 GMT
            Not After : Dec 23 20:40:34 2025 GMT
        Subject: CN=3DD68A2B07BA2AC31C762A964EDB77C9E3A7D723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:bb:b4:95:35:3f:c7:a0:30:d8:70:60:96:
                    56:b8:14:a1:7c:fa:95:00:90:7f:86:5f:05:be:56:
                    55:c4:e2:2e:dd:d5:dd:3c:4c:99:39:01:dc:92:8e:
                    c6:38:38:8c:97:9a:16:82:4c:ab:96:04:06:c2:8f:
                    f0:d0:81:9b:00:07:8a:7a:9f:86:f3:75:df:04:f1:
                    0f:36:e2:ef:ef:dd:e8:4d:e6:4d:91:3e:07:3d:4c:
                    9d:ba:a9:9a:1a:28:ed:19:20:b0:5b:15:1f:aa:1a:
                    be:f7:0f:8f:32:c5:85:97:1a:24:ed:d6:ca:0d:6e:
                    c0:f5:82:1d:f2:4f:0c:99:54:f4:66:d6:7d:2c:bf:
                    6e:7e:84:73:45:41:5c:8a:31:df:02:c0:14:20:f4:
                    1c:9d:7f:7b:e4:88:3b:06:27:66:8f:80:01:f4:53:
                    bc:a5:4d:d8:d2:bf:c3:a5:33:f6:72:7c:4d:5a:23:
                    e9:9a:dc:b3:58:fc:ce:05:02:c0:df:74:57:4c:22:
                    f6:a2:3d:90:01:a9:be:83:60:17:12:12:b1:e1:11:
                    98:a3:c1:70:07:e3:d2:f5:ac:b3:a1:e1:bf:34:8c:
                    8f:a7:f1:af:ae:4b:31:53:ca:4b:e6:cc:cf:9e:f1:
                    03:40:26:f4:aa:ef:b7:fb:e8:7f:27:01:a8:22:b4:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D6:8A:2B:07:BA:2A:C3:1C:76:2A:96:4E:DB:77:C9:E3:A7:D7:23
            X509v3 Authority Key Identifier:
                keyid:80:3A:7C:5B:64:96:99:09:09:FC:EC:FA:71:E7:9A:79:E3:58:01:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:dc:2d:3b:74:55:35:4e:1e:7d:21:61:be:6d:7e:ca:af:29:
         47:13:72:42:cb:6f:d2:da:74:df:bb:49:76:7e:b9:18:87:fd:
         37:34:9b:25:ab:25:b8:64:c9:2f:42:16:00:d9:10:cc:c9:50:
         fc:08:5f:38:5a:b5:e3:60:0a:d0:eb:30:11:31:5f:5a:31:88:
         e4:f5:a8:95:ab:f4:99:3a:f8:b8:c9:a2:f9:27:58:d9:96:61:
         6e:1c:d3:14:ae:77:c7:e2:42:17:e9:bd:9d:0b:59:fb:23:a9:
         26:6a:d5:e4:0a:8c:3f:b0:9b:b7:81:77:94:40:94:08:8d:b6:
         88:ae:fe:7d:45:87:76:1d:8c:e6:40:f7:ab:0b:24:4f:6b:2c:
         89:4c:f1:08:7e:9b:df:11:40:48:c8:a4:5e:d9:9b:18:57:24:
         c2:71:b7:d1:b6:11:8e:4c:58:1f:55:75:96:a0:0d:0f:db:d5:
         0d:6f:b0:e7:78:79:ec:43:c9:e3:92:5d:1d:a0:77:76:7d:33:
         5f:94:37:cf:c8:84:e3:88:64:81:ba:dd:f4:37:eb:dc:47:f3:
         27:e6:f9:b9:8e:cf:8f:93:a1:87:c5:06:09:2a:63:ba:89:6a:
         5c:5b:4c:08:1a:23:94:8f:37:b5:2f:5c:62:73:88:0e:14:4c:
         ca:d1:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:25:22 2025 by rpki-client