This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
File:                     ACDD408319E526575F0E327DBFC28EC9CECDF412.mft (raw, json)
Hash identifier:          PF0indszbpHCl6MMJIT0ePjTv/mQXijuYNO6DnVUz/I=
Subject key identifier:   A3:B5:1D:96:D4:FA:5F:D4:EB:2A:37:86:BA:5C:39:C7:65:70:15:F0
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       75C1E54CD20040D2D010D1862D2428359B881AE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
Manifest number:          0335
Signing time:             Fri 05 Dec 2025 21:18:22 +0000
Manifest this update:     Fri 05 Dec 2025 21:13:22 +0000
Manifest next update:     Sun 07 Dec 2025 00:05:22 +0000
Files and hashes:         1: 323830343a353337343a3a2f33332d3333203d3e20323638353835.roa (hash: EL46Y9sagnkSEY+rwBZlOspv52g5meHe59XNHqFusMI=)
                          2: 34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (hash: T2K2agyEH6EHk1tSCNvQb4sBYhelDEcHcJqQ60VwW9c=)
                          3: ACDD408319E526575F0E327DBFC28EC9CECDF412.crl (hash: UFNAzRFGiCHE4Qm2nFbQKA+UF31Ta1I90hBBU7i0Fdk=)
                          4: 323830343a353337343a633030303a3a2f33342d3334203d3e20323638353835.roa (hash: 5mnv+ElXZFe46KDOyPnL+awiHtW19Kq5EZeW5IG3sPw=)
                          5: 323830343a353337343a383030303a3a2f33342d3334203d3e20323638353835.roa (hash: kFgwh+klCTAG9h9ykECRO0XVf5M41Wt8afgD5rPDau4=)
                          6: 34352e3136342e382e302f32332d3233203d3e20323638353835.roa (hash: +8aLdTFB0p/SdDEf9cg0sDcXJHnTs+7kAJoY2D7lGu0=)
                          7: 34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (hash: xmDdgR04TqBxu7MEmpmuIz19DIQ8rxAWQ5waHyGRjiM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:e5:4c:d2:00:40:d2:d0:10:d1:86:2d:24:28:35:9b:88:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Dec  5 21:13:22 2025 GMT
            Not After : Dec  7 00:05:22 2025 GMT
        Subject: CN=A3B51D96D4FA5FD4EB2A3786BA5C39C7657015F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:f5:46:31:ea:9d:ca:54:67:d3:6c:e7:a1:
                    33:1f:9d:64:33:b0:d8:6b:fd:c9:42:1a:e7:06:0f:
                    83:70:59:03:73:78:55:bd:22:dd:0d:19:6a:64:99:
                    c7:d7:4c:ea:9c:be:fd:6e:60:fb:9d:f7:ac:37:96:
                    9a:ab:51:d5:d3:39:3a:b2:19:92:dd:66:94:9f:9e:
                    06:31:90:57:23:6e:16:66:c0:6f:14:54:4c:6a:25:
                    43:c8:86:0d:a5:47:b3:61:5f:51:e1:ac:b4:68:49:
                    2d:df:6b:7f:c0:f9:ab:d7:cf:04:40:50:48:dd:46:
                    ba:c9:7f:9e:16:16:aa:fc:ce:12:17:0f:2f:04:b4:
                    e0:79:1f:56:6b:31:d8:70:24:91:2d:53:0f:58:36:
                    54:19:42:f0:b7:af:7d:7e:d4:49:eb:cf:dd:f0:53:
                    95:d8:95:d2:ec:7a:b7:4a:58:f7:7a:e6:08:01:1a:
                    b2:a3:bc:61:de:83:d2:f8:ea:fd:0f:dd:3e:75:91:
                    d3:11:36:74:40:ec:32:62:c2:df:89:28:e8:a5:96:
                    44:91:fb:7c:cc:b7:84:88:95:29:ac:7f:8c:37:d2:
                    8f:91:ce:47:bd:ae:1f:2d:27:6d:3c:24:e5:88:e1:
                    86:70:44:41:46:d1:6f:30:ae:b6:48:91:92:2e:0a:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:1D:96:D4:FA:5F:D4:EB:2A:37:86:BA:5C:39:C7:65:70:15:F0
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:4a:a3:cd:41:8f:db:b0:8d:f2:85:73:ed:67:21:7f:f6:
         f3:ed:db:f1:72:80:2c:bd:48:9e:41:c3:2c:97:cb:bb:ac:68:
         00:21:67:c7:3a:70:b1:58:c4:d2:1d:c3:73:42:a8:dc:2f:d6:
         e9:77:65:4f:ca:fe:90:c3:a4:a9:9d:6c:1c:c8:12:74:d4:45:
         bf:07:9e:1c:e3:87:22:30:42:be:4f:5e:6e:ac:f4:a0:13:47:
         ea:08:24:db:9b:99:98:07:5c:5c:43:d4:78:49:5f:eb:10:ee:
         3c:cc:b5:ef:6f:89:15:69:1a:9c:3f:51:df:da:78:39:ad:86:
         22:bb:0a:3e:f1:ea:86:9a:e0:21:ec:53:4b:7d:cf:eb:6f:af:
         85:15:0c:ec:c7:d1:10:a7:27:3f:03:0c:fe:74:89:f2:6a:97:
         ef:da:63:1c:59:02:22:14:bb:00:f6:d3:c0:1e:52:a4:9d:f5:
         e6:b9:6b:90:c2:b6:e6:12:cc:90:49:02:f4:ba:59:d1:66:89:
         a9:0e:8c:6a:78:a9:27:1b:44:c5:b7:1b:74:58:be:6d:cb:d7:
         d2:e7:8d:63:db:61:36:92:54:e5:af:99:a3:e7:f3:ac:3f:8a:
         77:e8:fe:24:ee:b7:a1:67:b9:78:74:1d:ad:80:2e:5d:38:f6:
         0d:5b:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:29 2025 by rpki-client