This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          uzMGvDT1D2+rnPfO9YebNNp0spER4MYp8cDQlQopfL8=
Subject key identifier:   91:90:ED:BC:5B:EF:96:0E:C5:A3:43:45:84:B4:B4:11:34:64:5D:E0
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       171F7162C29FAFF3ECBA9BF05E6ECF91F3DFCD8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 04:30:00 +0000
Manifest this update:     Fri 19 Dec 2025 04:25:00 +0000
Manifest next update:     Sat 20 Dec 2025 06:29:00 +0000
Files and hashes:         1: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          2: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          3: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          4: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          5: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          6: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          7: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          8: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          9: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          10: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          11: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: MlnkqTNl+uIhGX4Bj2pdXwYoYGnx7YK7zVS2hkgNaY8=)
                          12: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1f:71:62:c2:9f:af:f3:ec:ba:9b:f0:5e:6e:cf:91:f3:df:cd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Dec 19 04:25:00 2025 GMT
            Not After : Dec 20 06:29:00 2025 GMT
        Subject: CN=9190EDBC5BEF960EC5A3434584B4B41134645DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:e1:65:e7:4d:8f:04:35:a9:f7:3b:33:8e:
                    de:43:d6:dc:6e:b1:03:87:95:c8:b6:f9:91:51:13:
                    fc:9e:53:72:f3:d1:49:be:1f:ca:c9:7c:74:b7:4f:
                    16:d5:33:31:ae:a6:e8:d3:cd:e4:81:dd:9b:32:0f:
                    21:40:b1:d3:b7:52:75:77:18:db:07:e4:48:cc:bf:
                    19:8e:52:e0:52:bb:b3:88:d8:f1:80:65:1a:5e:76:
                    d5:a6:44:03:34:b2:f3:21:52:92:44:cc:e9:b9:74:
                    02:c5:37:e6:9e:1a:cb:09:2f:4b:8f:c9:d5:1f:19:
                    2f:b3:a1:07:3f:f0:fe:c9:a1:f1:0a:35:61:ee:b2:
                    27:25:ef:9a:53:7a:01:6d:b2:c3:8c:d6:bb:58:4d:
                    01:c1:9b:51:72:2f:2b:38:b5:e9:38:e9:64:32:da:
                    4b:45:87:ff:4f:96:13:b7:97:5b:75:b8:2e:7e:67:
                    55:83:de:12:57:32:42:20:5a:3f:9b:12:73:77:a8:
                    7f:68:a9:11:8a:36:90:75:ae:49:24:58:40:81:a7:
                    1d:eb:01:2a:84:f6:e1:c9:e6:12:35:eb:46:df:65:
                    15:2d:48:44:63:48:d4:54:47:ee:80:ef:9f:63:bc:
                    2a:31:58:db:cb:3c:4b:6d:9e:e1:10:39:b7:79:45:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:ED:BC:5B:EF:96:0E:C5:A3:43:45:84:B4:B4:11:34:64:5D:E0
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d0:9c:db:08:57:72:1d:ca:64:0d:35:08:aa:7e:8f:19:49:
         3b:3a:c7:d2:6b:ac:3e:3a:88:31:0f:11:44:6c:b3:bf:c6:b7:
         bb:0e:04:87:da:c4:d4:bc:cf:c4:d7:cd:d2:d1:a9:6c:49:aa:
         8b:83:eb:81:e2:28:5a:ba:28:75:16:ff:aa:d7:d8:dc:16:d1:
         74:48:74:30:a7:85:65:c3:84:3b:f0:08:fc:67:dc:38:d1:15:
         e9:e8:e5:b4:6b:38:a9:04:71:cb:a5:13:1d:c9:4c:0a:7c:b6:
         a2:0e:9b:4d:d4:c4:bb:1c:3f:56:82:39:40:55:a2:10:f7:42:
         cd:a5:f1:4d:ab:f2:d7:91:8c:c3:f3:7a:99:1e:88:ae:f4:4d:
         04:75:c4:59:da:de:5f:e7:30:5b:3b:40:fc:ac:8b:c6:08:43:
         cc:ce:60:13:a1:30:b8:0a:61:9b:66:f2:05:e8:49:5b:1d:97:
         6f:e2:a1:88:e5:17:94:2f:8e:b7:2e:e6:37:26:c6:e6:52:d4:
         d6:c6:58:b9:ce:2a:c8:07:e3:cc:fe:a9:68:4d:16:45:aa:d8:
         c2:54:60:a8:73:4a:51:c0:3c:7d:74:7d:69:ec:da:a7:21:4e:
         72:77:71:b5:5a:bc:3f:46:5e:b1:73:97:0c:0f:c9:6a:c9:45:
         92:82:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:03:37 2025 by rpki-client