This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
File:                     3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft (raw, json)
Hash identifier:          n4X/C+iIiukdhSytZT4ULYJTLxqTjBHE5HQPOEmS28Y=
Subject key identifier:   F4:B3:F3:8F:AD:3A:28:5E:BD:3D:EF:08:A9:BA:E3:FE:E3:A6:23:7A
Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60
Certificate issuer:       /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
Certificate serial:       1FE587B4E5FEF7E7B06119664F22565BB64B05EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
Manifest number:          0A
Signing time:             Sat 06 Dec 2025 07:10:08 +0000
Manifest this update:     Sat 06 Dec 2025 07:05:08 +0000
Manifest next update:     Sun 07 Dec 2025 07:44:08 +0000
Files and hashes:         1: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: tO3ng5ssl7OXoRcbQLn/q2hJzoTtQtHd+JHRdfRMwYU=)
                          2: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: nlTw0GIIpp6SyPsVEPHRac40g2ydnw4rzlurpGEhgGU=)
                          3: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: 7l6dXdKV/Qxm67y6Yp+xmZNlo7Mb3/J+6Jrg7LuDGnM=)
                          4: 3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl (hash: tfWkTRnqQElfPnI6BqREkv98Q9WVhW/wbRPwHx1z3f8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e5:87:b4:e5:fe:f7:e7:b0:61:19:66:4f:22:56:5b:b6:4b:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
        Validity
            Not Before: Dec  6 07:05:08 2025 GMT
            Not After : Dec  7 07:44:08 2025 GMT
        Subject: CN=F4B3F38FAD3A285EBD3DEF08A9BAE3FEE3A6237A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:86:d0:81:62:95:0c:ff:90:54:19:2c:71:
                    2f:cc:9a:3d:42:fd:b0:60:20:c4:e4:87:d1:5c:83:
                    33:24:a5:6b:69:90:e2:e9:2c:5d:3e:03:6c:6c:b2:
                    6f:b9:d0:c0:db:d0:16:b3:00:d6:54:d4:96:fa:92:
                    9f:98:ee:8c:31:9d:38:76:0f:38:b1:e8:5b:04:ac:
                    41:72:4f:48:ad:f6:81:f8:2f:d4:28:29:b4:71:5a:
                    e3:6d:42:53:f5:a6:64:11:59:60:09:86:b1:4e:61:
                    37:6e:42:83:d6:84:4e:2c:91:3f:a4:f8:e5:35:f2:
                    a4:80:4d:26:69:f1:9f:d3:52:c7:ef:76:30:1f:40:
                    00:21:24:1f:f3:d7:b9:59:35:74:17:e4:d6:b8:04:
                    8f:87:34:18:34:49:9e:60:90:42:b6:21:c9:5f:9c:
                    d1:84:5b:c8:89:d6:f3:4e:d8:c1:55:b5:7a:1c:02:
                    2a:7f:e3:67:01:e4:bd:fd:3b:73:e0:8a:02:d5:a3:
                    dd:fb:1f:79:f8:c8:3a:4c:b4:b8:1b:8a:88:83:f8:
                    d5:d2:64:b5:e7:76:26:8c:91:92:6b:d3:94:74:c6:
                    2b:b5:1b:70:61:ae:21:89:ae:06:d6:7c:ce:18:c6:
                    96:67:9f:f7:18:7c:69:b4:07:13:8b:37:cb:4c:3e:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:F3:8F:AD:3A:28:5E:BD:3D:EF:08:A9:BA:E3:FE:E3:A6:23:7A
            X509v3 Authority Key Identifier:
                keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:66:ff:f3:18:62:30:81:b3:01:b7:ee:d3:da:28:89:da:
         b9:08:09:d1:e8:18:45:83:b5:b1:2b:ed:73:0f:55:c2:7c:87:
         2b:07:fa:9b:2e:6b:8f:4b:a7:2c:34:18:96:53:62:59:52:99:
         e1:5f:14:1d:4d:ec:47:50:2e:7c:a6:fa:60:a9:e9:bc:18:8b:
         16:7d:3e:fb:03:b3:39:d0:08:32:d1:a7:09:d7:e9:90:d1:36:
         de:9d:18:e8:e3:c2:12:67:80:a6:2c:1a:dc:f3:b0:eb:59:ad:
         8a:17:6c:79:97:af:b6:90:df:1e:17:12:90:7c:24:36:3d:64:
         84:10:38:7b:b0:e3:8a:a6:70:8f:57:a5:2c:ec:aa:41:e4:96:
         8d:4c:14:40:ae:f3:4f:f9:13:88:10:fb:4e:34:30:40:8c:f3:
         09:77:13:35:02:cf:85:bf:d7:8e:0c:2f:67:fd:82:cd:b3:f8:
         89:a9:47:d9:10:d5:8d:05:eb:3e:fb:15:55:0f:32:82:08:b7:
         12:c2:7f:4b:7b:0d:17:f7:a8:b3:da:09:a4:3f:66:10:95:f6:
         39:a5:b6:ad:c0:ad:c3:41:63:47:86:14:08:3c:27:d7:bf:c1:
         b8:02:b8:5b:e5:17:7d:c8:aa:e2:43:c8:9a:11:4c:00:e0:a9:
         58:41:d0:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH+WHtOX+9+ewYRlmTyJWW7ZLBewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3N0YxQTM0RUM0QTU3MEQ5MjM2MkEzQjE2NUNCMDNG
QTFBODU2MDAeFw0yNTEyMDYwNzA1MDhaFw0yNTEyMDcwNzQ0MDhaMDMxMTAvBgNV
BAMTKEY0QjNGMzhGQUQzQTI4NUVCRDNERUYwOEE5QkFFM0ZFRTNBNjIzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYobQgWKVDP+QVBkscS/Mmj1C
/bBgIMTkh9FcgzMkpWtpkOLpLF0+A2xssm+50MDb0BazANZU1Jb6kp+Y7owxnTh2
Dzix6FsErEFyT0it9oH4L9QoKbRxWuNtQlP1pmQRWWAJhrFOYTduQoPWhE4skT+k
+OU18qSATSZp8Z/TUsfvdjAfQAAhJB/z17lZNXQX5Na4BI+HNBg0SZ5gkEK2Iclf
nNGEW8iJ1vNO2MFVtXocAip/42cB5L39O3PgigLVo937H3n4yDpMtLgbioiD+NXS
ZLXndiaMkZJr05R0xiu1G3BhriGJrgbWfM4YxpZnn/cYfGm0BxOLN8tMPqXpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9LPzj606KF69Pe8Iqbrj/uOmI3owHwYDVR0j
BBgwFoAUNHfxo07EpXDZI2KjsWXLA/oahWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh
blkvMC8zNDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NzdGMUEzNEVDNEE1NzBE
OTIzNjJBM0IxNjVDQjAzRkExQTg1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC8z
NDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxEpm//MYYjCBswG37tPaKInauQgJ0egYRYO1sSvtcw9VwnyHKwf6my5rj0un
LDQYllNiWVKZ4V8UHU3sR1AufKb6YKnpvBiLFn0++wOzOdAIMtGnCdfpkNE23p0Y
6OPCEmeApiwa3POw61mtihdseZevtpDfHhcSkHwkNj1khBA4e7DjiqZwj1elLOyq
QeSWjUwUQK7zT/kTiBD7TjQwQIzzCXcTNQLPhb/XjgwvZ/2CzbP4ialH2RDVjQXr
PvsVVQ8yggi3EsJ/S3sNF/eos9oJpD9mEJX2OaW2rcCtw0FjR4YUCDwn17/BuAK4
W+UXfciq4kPImhFMAOCpWEHQ8Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:31 2025 by rpki-client