This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft
File:                     3D10000E40C545C40D0B40A419954E6B6B94E80F.mft (raw, json)
Hash identifier:          sNXpR8WsgQUHPUwEXdJPduFGDlqqxBfNSoWXNaCOtB8=
Subject key identifier:   D1:0F:48:A1:90:DC:56:5E:D6:CD:D0:ED:43:AB:91:C7:9C:C5:AC:9D
Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F
Certificate issuer:       /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
Certificate serial:       2C2B2F6168D95D274F4A1507D79ECF69D5940397
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft
Manifest number:          0321
Signing time:             Sun 21 Dec 2025 20:51:33 +0000
Manifest this update:     Sun 21 Dec 2025 20:46:33 +0000
Manifest next update:     Mon 22 Dec 2025 20:51:33 +0000
Files and hashes:         1: 3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa (hash: hOarYccXAAG/SirinUShOfvyMPiIxns5fD4Nagfcr+E=)
                          2: 323830343a313363383a3a2f33322d3438203d3e20323633353531.roa (hash: /hIpNtuEzhiojgRNiztWaFYPpbFP5H++w4j3J6l6unA=)
                          3: 3D10000E40C545C40D0B40A419954E6B6B94E80F.crl (hash: Uc7k3G/3xijRUGGYy9o6dAe4okPRijvmJB5o7oNHkwI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl
                          rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 20:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2b:2f:61:68:d9:5d:27:4f:4a:15:07:d7:9e:cf:69:d5:94:03:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
        Validity
            Not Before: Dec 21 20:46:33 2025 GMT
            Not After : Dec 22 20:51:33 2025 GMT
        Subject: CN=D10F48A190DC565ED6CDD0ED43AB91C79CC5AC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:86:7b:0d:88:e3:c4:ff:8c:a0:bf:f5:68:66:
                    31:b9:80:a2:39:35:6a:b3:7d:2e:47:d4:bb:a2:85:
                    70:fa:b1:6e:35:c7:23:e3:22:14:27:6f:8d:ef:2d:
                    33:80:b3:93:59:8d:e2:67:61:65:69:9e:53:63:c2:
                    cc:1a:0f:cd:99:8d:7b:ac:60:89:69:d0:b6:89:07:
                    68:7c:ee:53:86:19:77:30:56:24:1a:ea:00:41:0b:
                    74:16:66:29:2c:fe:29:02:ce:1b:de:1f:98:4f:19:
                    7c:1d:77:b1:e2:43:c2:61:51:7a:4d:1c:64:e8:ac:
                    bc:0d:80:c0:5a:6a:6a:cd:75:01:06:24:bf:4e:be:
                    eb:fd:c3:1b:ed:ee:7d:0e:17:66:63:48:36:33:1b:
                    2d:4f:d2:22:89:64:82:2e:9b:2b:7d:c9:6a:64:44:
                    3e:a5:1e:42:81:4f:a3:fb:ac:fb:84:c8:f1:f4:ff:
                    43:fa:fa:5f:a0:41:03:e7:82:e1:8e:f2:ee:fc:4a:
                    c1:a5:5f:58:1c:e9:0b:52:10:63:59:9e:f3:a1:45:
                    c6:7d:bb:2e:db:3b:ea:13:fa:1e:8c:a5:0c:ca:4e:
                    e2:eb:c9:75:33:2f:71:f8:47:13:61:ba:8b:66:81:
                    65:91:02:bb:bb:98:47:00:77:16:00:e2:65:5b:f1:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:48:A1:90:DC:56:5E:D6:CD:D0:ED:43:AB:91:C7:9C:C5:AC:9D
            X509v3 Authority Key Identifier:
                keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:27:1d:05:5f:6b:53:42:76:6c:3c:ef:5a:df:78:ff:af:d7:
         4e:5e:e6:90:73:f7:df:f2:cb:cb:26:b9:da:4f:0a:87:51:76:
         a9:e9:d8:82:a2:da:e2:6b:48:fc:01:86:b9:28:42:28:c3:05:
         c6:c1:fe:74:84:bb:65:c8:42:61:f5:df:2d:6b:b2:34:7c:c7:
         2f:02:6c:83:f7:0b:34:4a:91:8b:ff:1e:2f:46:3e:0d:4b:27:
         0f:c7:69:9e:f1:f4:4a:3d:09:ed:db:77:84:80:5a:25:0c:81:
         9b:0d:52:31:1e:2e:0c:c6:5f:67:4e:ba:ef:6c:2f:58:4d:b7:
         86:be:e3:49:e1:f5:99:6a:1a:20:33:e2:0a:b0:c3:f2:24:47:
         3a:20:09:6b:94:53:b3:70:e0:17:ff:b5:b9:93:8c:1f:93:f6:
         28:31:da:36:cd:eb:cf:a6:68:c0:2f:ca:ff:6d:0f:ce:d1:34:
         20:02:d1:27:bb:59:80:f9:db:2f:7a:71:13:99:6e:6e:2e:7c:
         b6:2b:31:9f:86:00:48:2c:df:43:4e:27:65:18:1a:18:22:90:
         f4:bf:ab:de:c1:d3:49:fa:6c:4e:2e:3d:44:9a:bf:b8:c5:0f:
         b1:1c:5b:5e:73:de:a5:41:31:29:52:d2:18:19:70:67:76:bf:
         3c:8e:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:06:56 2025 by rpki-client