This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
File:                     1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft (raw, json)
Hash identifier:          l1H+qaoUPGz29DJjknLYeE5QJIMzNpeYT4IScH9+pJw=
Subject key identifier:   BD:EA:ED:CD:16:C7:4B:D7:D2:1C:F2:C8:0B:05:FC:8B:E3:70:04:24
Authority key identifier: 1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
Certificate issuer:       /CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
Certificate serial:       423537D5F404729F3F58930EAEA8DAC4C30DEC78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
Manifest number:          0343
Signing time:             Mon 22 Dec 2025 21:22:26 +0000
Manifest this update:     Mon 22 Dec 2025 21:17:26 +0000
Manifest next update:     Tue 23 Dec 2025 21:51:26 +0000
Files and hashes:         1: 34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa (hash: 1SFPOvJ9lye4lFgtvXcFhbdra6XtmHRDxPf8I8PvN8Q=)
                          2: 1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl (hash: wwklVP/25gS4O7QCQY++tNbv1TKyGV3v7Zie4F/P0R8=)
                          3: 323830343a343765343a3a2f33322d3438203d3e20323637303833.roa (hash: 1v8pL+C70NZWzToEglS3XH00+5FHkUUfx6lANKct5Sk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl
                          rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 21:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:35:37:d5:f4:04:72:9f:3f:58:93:0e:ae:a8:da:c4:c3:0d:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
        Validity
            Not Before: Dec 22 21:17:26 2025 GMT
            Not After : Dec 23 21:51:26 2025 GMT
        Subject: CN=BDEAEDCD16C74BD7D21CF2C80B05FC8BE3700424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:65:fd:d0:ef:13:89:93:01:8f:46:6e:9e:
                    8a:5b:2d:0a:f1:c3:50:c8:83:1d:c4:94:6f:46:1a:
                    4c:39:c5:4b:c4:1d:2f:4c:2d:68:b5:af:96:89:65:
                    bb:fd:ea:66:0a:b7:13:5a:39:51:de:8e:0b:40:b7:
                    b0:31:f7:f7:54:7d:04:35:fd:84:4c:ae:b2:f5:65:
                    98:7c:c2:be:e6:c4:8e:78:01:35:2c:77:0c:97:4f:
                    74:85:03:9b:a5:18:2d:60:13:3e:91:6a:33:6a:58:
                    a7:19:76:2a:df:63:24:c9:bb:9f:6b:43:42:40:4b:
                    e1:f7:1e:77:af:2d:6f:fb:38:30:e1:91:1e:7a:a8:
                    aa:b0:13:02:3a:11:8e:1d:ca:88:a7:7a:3c:67:03:
                    69:a8:cc:07:da:c1:50:bf:32:86:87:31:c1:72:b8:
                    88:19:71:cf:8c:91:f5:f9:0f:28:87:1b:65:1d:bf:
                    bd:64:0e:8e:98:8a:88:49:4a:07:ef:43:9d:30:70:
                    83:83:1a:b3:75:94:a9:82:8b:45:42:e8:d3:e2:03:
                    bf:92:1b:fb:37:eb:2d:b4:8c:76:22:31:d1:5e:f4:
                    dd:70:90:48:1c:30:8a:de:7f:0a:a8:05:1e:17:86:
                    54:03:8b:d2:73:10:4e:b9:bd:82:3d:d9:a7:ac:e1:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EA:ED:CD:16:C7:4B:D7:D2:1C:F2:C8:0B:05:FC:8B:E3:70:04:24
            X509v3 Authority Key Identifier:
                keyid:1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:45:c8:8c:d8:8e:0f:a3:1a:a8:a7:53:cd:c6:00:09:ff:63:
         23:55:ed:e1:d9:8d:85:81:35:2a:58:6e:8a:a9:68:e0:00:e4:
         d1:05:11:1e:bd:a3:df:6c:21:87:85:00:5b:2d:5a:71:9e:eb:
         b3:4f:60:17:4f:4c:90:63:04:a6:76:67:d7:6a:95:ce:f1:8e:
         e3:29:4e:d0:71:29:76:5d:82:dc:c9:65:b7:d7:27:d7:9b:2e:
         73:8b:24:52:5d:98:b7:36:81:93:b8:47:7a:04:6a:bd:6e:dd:
         63:47:3a:be:3a:28:62:16:de:b7:ea:61:f6:d1:55:f4:ac:61:
         bf:67:a3:17:9b:10:92:29:19:c9:33:0e:1a:a8:d5:f4:06:a0:
         f7:7a:eb:f0:90:dd:fa:be:3a:16:19:34:f5:72:b6:fc:75:38:
         32:ed:a1:da:b7:6c:20:cd:02:e3:59:84:69:73:7c:51:0f:22:
         c7:83:ab:35:a3:48:72:cf:74:ba:d0:0d:f0:93:80:6a:18:11:
         e3:86:77:84:d0:ff:45:e1:2d:81:b9:55:da:73:40:57:10:ea:
         0e:dd:c3:13:f9:e9:d5:91:b0:5f:0a:28:54:b8:2f:2e:75:ab:
         82:1f:c3:f6:82:d1:9a:cf:2f:76:bc:b2:a0:9c:3c:5c:11:82:
         f5:66:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:02:14 2025 by rpki-client