This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          em8DM8E0vIzKqNOhTer0sCNmqGrNxrc1hhBF2XxKUh8=
Subject key identifier:   7D:A9:1A:A3:7C:13:E6:C5:3A:A5:00:E4:16:73:E7:35:72:44:BF:7D
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       478D19712C8DFF2CC2BCFCA2FD45DC20AA093B29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          0340
Signing time:             Sat 20 Dec 2025 02:33:14 +0000
Manifest this update:     Sat 20 Dec 2025 02:28:14 +0000
Manifest next update:     Sun 21 Dec 2025 06:15:14 +0000
Files and hashes:         1: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          2: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          3: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          4: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          5: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          6: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          7: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)
                          8: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: HVjkMQHo2ffk9pcXHSWGtksU86ZV/Cfz/1wNkMBOANU=)
                          9: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          10: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
                          11: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          12: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          13: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          14: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          15: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          16: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          17: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8d:19:71:2c:8d:ff:2c:c2:bc:fc:a2:fd:45:dc:20:aa:09:3b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Dec 20 02:28:14 2025 GMT
            Not After : Dec 21 06:15:14 2025 GMT
        Subject: CN=7DA91AA37C13E6C53AA500E41673E7357244BF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:f4:c7:98:4a:42:d9:d0:6f:c2:e8:2c:d1:
                    62:e5:0b:4d:96:07:03:5f:bb:3f:c1:1a:71:56:dd:
                    15:fe:0c:3b:28:46:9d:d8:c7:13:fd:2f:f4:db:73:
                    a3:5b:c2:83:9d:17:50:46:fb:8b:29:a1:ad:e3:05:
                    bf:8d:27:7f:b3:07:68:e1:a7:11:ae:0c:8f:ed:7e:
                    38:a3:63:2f:ed:f4:4b:c2:6c:cd:1c:48:8c:9e:f8:
                    44:ac:1d:53:83:f4:92:bc:da:16:ed:eb:b2:99:eb:
                    af:44:8f:8a:b3:5e:39:c7:da:e2:f3:b1:43:94:07:
                    4d:eb:03:72:10:72:75:ac:5e:f8:df:44:0f:2a:aa:
                    f9:43:c8:9e:1b:16:a2:b7:37:13:49:fe:e2:4f:c0:
                    35:62:63:c9:9c:c7:5a:a1:ec:8c:9a:c3:77:bf:b4:
                    45:98:a8:f2:34:d6:27:28:af:79:1c:9e:a5:6c:c7:
                    12:46:e9:be:28:33:3f:05:1a:be:1d:2f:af:79:45:
                    3e:8f:b6:fe:b6:8c:34:35:84:da:5d:ee:4c:4d:c1:
                    f0:ea:6a:b2:c0:1e:4c:6a:54:74:43:b6:f4:2c:68:
                    4f:3a:19:71:cc:71:93:7a:d7:f0:ed:4d:d7:f2:6d:
                    8a:d5:42:f5:e5:2b:d1:35:5d:e5:a0:16:68:61:fe:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:1A:A3:7C:13:E6:C5:3A:A5:00:E4:16:73:E7:35:72:44:BF:7D
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:13:d0:a1:93:51:0f:48:57:0a:66:3e:73:11:05:2f:8c:e9:
         68:64:25:f1:0b:eb:10:9b:5e:60:dd:7e:83:8b:df:e9:30:23:
         83:2c:cf:6c:a2:a9:9e:25:af:bf:62:78:0e:7d:cf:1d:0f:02:
         50:b1:2a:6a:59:d1:5f:23:eb:7e:a8:fa:5b:de:9f:2c:be:83:
         6c:fe:ae:16:39:7c:7d:e3:77:e3:3e:98:90:b9:84:43:11:56:
         e6:b1:0f:92:27:7d:34:ab:22:c9:c7:d1:a7:6c:2b:37:a3:86:
         09:e2:a8:d7:b9:f8:14:81:fa:eb:aa:f6:f7:a8:38:69:85:81:
         d0:f3:d8:5c:7e:bb:1b:c0:e2:76:1f:d5:01:8e:50:2e:8f:65:
         70:69:9f:19:02:d3:ff:9d:89:24:d1:d9:81:94:96:32:3e:b9:
         f2:eb:ac:50:60:35:12:68:c4:d2:5f:c3:e6:22:94:a9:68:e7:
         0d:b9:c8:60:b9:f4:03:80:21:60:97:a5:ab:f3:45:22:a2:2f:
         93:f8:d8:e2:e0:c4:81:d7:19:c1:ec:19:ec:b6:c1:07:88:d9:
         55:fd:1e:ee:60:44:4a:e8:48:9a:65:6a:33:e9:8a:95:4c:90:
         aa:26:6c:b9:c2:d8:f1:10:4a:04:5c:b6:3c:c2:1c:67:f6:e0:
         cf:15:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:59:48 2025 by rpki-client