This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
File:                     3701790BFCD740698BF2D59FB7800495728B1041.mft (raw, json)
Hash identifier:          pH5LAr5Ic2tZlyKypc89ybbpMEjq8/pQQuhc5mvYL8U=
Subject key identifier:   09:BB:BB:A6:20:D5:3F:5B:28:2E:35:1F:39:5F:C6:C2:F5:AE:F0:AF
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Certificate issuer:       /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial:       5F92DC4B5A090C26CC4B49C3522E62BC12077914
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
Manifest number:          0342
Signing time:             Fri 19 Dec 2025 10:03:13 +0000
Manifest this update:     Fri 19 Dec 2025 09:58:13 +0000
Manifest next update:     Sat 20 Dec 2025 13:15:13 +0000
Files and hashes:         1: 323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (hash: a3N/V8aHqktmXHIi586Wg0nt7SnrzILQK/aIuH3xgL8=)
                          2: 3701790BFCD740698BF2D59FB7800495728B1041.crl (hash: 3WWn673O3W5NCe/kxBxrxNoXx8EA+t0pnsvls4d+P/w=)
                          3: 3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (hash: CWhLjy2BUsQhohvVV10YgDUmAcI9UwT6x3hS2g96DFo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
                          rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:92:dc:4b:5a:09:0c:26:cc:4b:49:c3:52:2e:62:bc:12:07:79:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Validity
            Not Before: Dec 19 09:58:13 2025 GMT
            Not After : Dec 20 13:15:13 2025 GMT
        Subject: CN=09BBBBA620D53F5B282E351F395FC6C2F5AEF0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:d1:45:80:22:42:0f:3a:19:0a:89:78:db:
                    56:ac:95:fc:18:de:34:91:94:33:92:f9:26:3f:d4:
                    2e:82:8c:4b:be:1c:4d:26:d7:f5:d1:44:d5:1e:74:
                    1e:4c:42:f6:89:21:ab:bb:02:72:b8:88:d2:e2:eb:
                    5d:dd:8a:dd:12:95:aa:24:01:50:89:c3:25:1a:56:
                    72:a3:db:6a:c9:73:ce:7b:84:00:30:5c:33:9b:56:
                    a3:bf:5a:53:b9:38:2d:c4:0b:a4:2d:d1:81:31:2c:
                    aa:42:c7:39:29:98:78:2e:8d:f8:91:1f:bb:87:33:
                    85:99:8b:b6:97:e6:74:d2:77:c2:f4:4a:d7:8e:a7:
                    f5:db:6e:e3:20:74:33:07:da:db:81:63:5f:8f:29:
                    4f:bf:fe:1c:91:2a:07:6a:b6:c4:2f:78:ac:94:ee:
                    fa:f7:c8:67:4a:6b:81:e4:5b:5b:c0:c6:68:8a:24:
                    5a:50:5c:f3:b1:72:b8:7a:05:ea:d9:c6:08:52:ab:
                    88:a6:48:a8:92:15:ec:30:f7:47:d1:72:13:2e:f9:
                    0b:6a:a5:98:da:e6:a9:49:09:fa:43:4a:d2:3f:e6:
                    f7:d8:93:3a:2b:da:f9:da:30:85:0d:ce:c1:0f:0b:
                    9e:27:0e:77:c8:28:00:9e:33:31:47:1b:4b:56:66:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BB:BB:A6:20:D5:3F:5B:28:2E:35:1F:39:5F:C6:C2:F5:AE:F0:AF
            X509v3 Authority Key Identifier:
                keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:82:4d:bd:5f:d5:0b:f6:71:4c:78:30:68:8f:a5:f0:05:
         45:85:25:ee:0b:38:0c:75:73:66:31:5a:f4:70:49:0c:1c:47:
         fa:01:68:43:20:24:7e:93:7f:0b:71:05:7d:62:8b:07:ee:04:
         13:01:9b:8b:01:5e:c8:ab:32:8d:ea:e8:b0:5d:c0:90:cc:eb:
         3e:82:cb:fe:ee:f5:29:6d:42:dd:b4:58:6a:0d:7a:9b:57:34:
         14:9e:1d:ab:45:52:e5:c6:14:f9:0e:da:b2:6b:92:a3:e2:b6:
         68:a8:98:f2:3a:2d:07:8a:11:97:c0:e3:34:a2:1b:3a:1e:c8:
         c1:0f:8e:64:26:19:43:ff:1c:ce:ae:6e:6c:38:cb:51:8a:25:
         d7:b3:f9:ab:c0:8c:0b:3b:f0:5b:97:f1:54:09:df:1e:5f:0b:
         36:49:96:2f:56:81:79:0e:b6:c3:36:7e:3a:64:60:0d:03:9a:
         95:33:bf:62:07:0b:7e:1d:c4:73:e4:f6:cf:e9:3c:da:dd:0a:
         80:c4:9e:9d:b7:0b:e0:0e:f5:e2:ef:0c:b3:c9:d3:27:ad:7d:
         79:ce:51:15:74:73:39:85:ed:73:70:86:6a:03:90:12:60:0d:
         68:8d:23:4b:62:9f:08:65:ef:cd:7f:d8:45:a2:11:49:fb:d8:
         f6:83:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:05:40 2025 by rpki-client