This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
File:                     585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft (raw, json)
Hash identifier:          Ib8L6ZlKV8pM7cXpbCi3q+tgt6191kGcCQ+WAuHjXL4=
Subject key identifier:   17:DA:7D:C7:E4:5B:B0:1B:B7:AF:C1:49:47:64:3A:FA:8D:40:08:79
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       39338D81D195B22F5F6605F0A2A60CD02DFBB63D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 13:56:51 +0000
Manifest this update:     Sat 20 Dec 2025 13:51:51 +0000
Manifest next update:     Sun 21 Dec 2025 15:27:51 +0000
Files and hashes:         1: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl (hash: lJiEaan93upeokAkKRg7VfcyUYZcd5naOXk9Rsyes2M=)
                          2: 323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (hash: aC08Xc+AWU2Gmn9FKnzrvxdKmO26eHCpZULre8VMh/I=)
                          3: 323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (hash: 7VYb9eVMn/JdVnewRd3uN1ztGHf7FqVnTEIvA9WR40g=)
                          4: 34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa (hash: 5cTe/r7IooW1P31zdsmcHlinxnkNAFe2rsZjLal0A/M=)
                          5: 323830343a363061303a3a2f33342d3334203d3e20323639313831.roa (hash: 6x8+o76rwpnYtElNSxkW/KyDWMmXx+okvMIMdSvdlNI=)
                          6: 323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (hash: IDneDWzTyr5SgSIAENGnHT6t+yatkXYogvFZdoAk/uI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 15:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:33:8d:81:d1:95:b2:2f:5f:66:05:f0:a2:a6:0c:d0:2d:fb:b6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Dec 20 13:51:51 2025 GMT
            Not After : Dec 21 15:27:51 2025 GMT
        Subject: CN=17DA7DC7E45BB01BB7AFC14947643AFA8D400879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5e:9d:5c:a3:a6:1a:c7:a5:99:fd:77:ac:e0:
                    8e:38:cc:31:3f:9a:c1:e0:09:26:81:b9:12:e7:3d:
                    5d:ce:2b:0f:40:ac:cb:77:1e:86:a5:ba:96:12:c4:
                    9b:30:ce:d1:4e:e1:12:e9:07:cd:33:09:e0:2a:bc:
                    d5:04:4d:07:b1:d8:00:7f:52:64:c8:85:d3:1a:8d:
                    68:ae:90:fb:ef:c7:3c:a4:85:6f:a8:5b:7e:27:cd:
                    6f:20:e6:e5:64:31:d0:40:02:71:fe:1a:9f:18:a9:
                    cd:3c:e9:85:f1:3f:7d:ca:fc:43:83:8e:e9:ae:2d:
                    b8:eb:27:f0:8d:d0:c3:65:e8:bd:19:09:a3:f2:8f:
                    df:f5:7a:0d:52:0b:92:6d:d0:90:74:79:6f:25:c2:
                    34:ca:d2:fa:ed:f3:81:f0:67:e5:c8:01:b0:0d:86:
                    77:cd:98:8b:64:1f:7d:79:f6:c3:61:bf:3b:6e:ce:
                    9b:4c:0c:58:5e:ca:cb:a6:aa:33:60:00:93:b9:6e:
                    0d:2b:a6:e4:9b:7a:a7:81:7e:5d:a3:09:5f:61:79:
                    c7:8c:a8:39:f3:b3:40:a6:1c:df:04:8b:f2:b4:5a:
                    77:b5:3f:d1:9c:f4:1b:36:3d:1c:cd:e6:c3:8a:1c:
                    f3:a0:21:f2:b3:41:3f:0b:05:69:58:23:2b:36:3a:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DA:7D:C7:E4:5B:B0:1B:B7:AF:C1:49:47:64:3A:FA:8D:40:08:79
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:e3:61:ae:aa:ea:bf:f4:06:b5:d3:f9:3d:21:93:c0:bc:6b:
         14:70:cd:81:b3:24:97:55:e0:34:88:60:ca:73:13:12:c4:16:
         09:51:8c:89:13:91:b8:f5:d5:ba:6a:15:31:30:31:bf:da:dd:
         24:5a:65:3f:9e:00:20:04:dd:8e:0e:db:23:d2:10:47:c2:8e:
         99:97:8a:db:ab:ee:6e:4e:6e:70:80:41:13:8f:3e:3d:7e:3e:
         aa:52:c3:02:6b:aa:41:e1:ad:65:54:8e:33:81:ea:70:e1:fa:
         f1:5b:b2:0d:e8:54:3a:6e:80:cd:a4:01:dc:ec:93:49:94:c9:
         14:83:fe:c7:0a:b4:8a:e4:61:2e:f3:4f:c5:eb:ae:91:73:fa:
         dd:ae:a6:1f:fe:3a:3e:07:c9:60:86:6d:c3:ce:2b:31:3e:4d:
         7e:e9:4c:8e:f7:69:b3:de:dc:82:21:79:61:c6:7f:b0:26:de:
         9c:5e:29:d5:8c:f8:f0:35:44:ff:43:97:70:7b:a5:8c:b0:e7:
         f7:a0:a7:bd:ee:8a:71:66:05:07:12:4e:a5:0a:57:8c:5d:93:
         fc:f3:ba:45:85:64:dd:66:1d:4a:f7:3f:d6:e7:08:7a:19:03:
         f9:de:79:ba:59:46:9b:8a:25:12:3d:c3:98:eb:c3:77:09:1c:
         11:82:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:45:23 2025 by rpki-client