This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
File:                     E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft (raw, json)
Hash identifier:          M5uzsaW5SzZ5jNou2aTw1+RsjIWwi1weg2aypQAxvT8=
Subject key identifier:   FB:30:F9:AD:12:38:04:42:34:1B:FE:94:8E:87:A9:06:70:73:E7:A4
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       48F982DA60D7C7038ABC01A36EE22544F9FB1AAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
Manifest number:          032E
Signing time:             Fri 05 Dec 2025 15:43:36 +0000
Manifest this update:     Fri 05 Dec 2025 15:38:36 +0000
Manifest next update:     Sat 06 Dec 2025 18:54:36 +0000
Files and hashes:         1: 3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (hash: DVXwFyqN0imeQTPx6R3D3m6zemRSF6lzPAXT5hVEkQc=)
                          2: 323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (hash: ib5wwtLsKgTDM5CY4yd+jcJDIiz5WfxG5a3BFVpeIRE=)
                          3: E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl (hash: GQufcxR5ArscBit6Ua4ARERcKP4fIF0QeKxBseL4+zk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 18:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f9:82:da:60:d7:c7:03:8a:bc:01:a3:6e:e2:25:44:f9:fb:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Dec  5 15:38:36 2025 GMT
            Not After : Dec  6 18:54:36 2025 GMT
        Subject: CN=FB30F9AD12380442341BFE948E87A9067073E7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:b5:be:d2:91:52:9a:93:4d:72:3a:03:f9:
                    61:90:c4:a4:49:7d:64:41:e0:6e:93:0d:1e:38:19:
                    b9:d5:54:27:ff:96:06:e7:96:60:de:9f:f8:f7:53:
                    0c:d3:cf:2f:42:e0:d5:01:10:9f:b6:6a:8f:f6:03:
                    19:10:04:56:1f:62:81:a7:a1:3c:4d:07:fb:7d:d6:
                    83:c5:42:b6:10:77:fb:91:24:fe:5c:52:00:79:07:
                    65:5c:ea:5c:46:7d:c0:f0:70:ba:f1:02:4e:15:8d:
                    38:c9:bb:1a:f6:35:80:2a:7d:0c:71:af:80:b7:03:
                    e2:d4:b7:50:33:9d:e5:51:04:73:60:fe:58:94:0b:
                    85:fd:88:60:59:e7:75:7d:67:95:98:c2:c1:77:fd:
                    3c:0a:44:7f:85:cd:9b:d1:97:d8:ec:e1:14:9f:1c:
                    8b:db:ae:14:84:c1:01:1d:28:c0:0b:db:a2:3f:47:
                    f6:43:e6:64:d2:c9:7b:c1:40:86:5b:65:52:8a:ed:
                    ef:53:44:ea:1b:21:9e:c4:d9:8a:bf:44:75:5e:c5:
                    fb:7d:8c:4e:7e:ea:5c:80:25:c5:20:c1:27:13:74:
                    0c:83:3f:05:ca:5e:1c:02:7e:90:8e:bd:d7:96:e2:
                    80:7f:7e:a3:84:b2:a8:c1:97:e0:88:0e:9e:2a:55:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:30:F9:AD:12:38:04:42:34:1B:FE:94:8E:87:A9:06:70:73:E7:A4
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:35:00:77:5d:b6:8e:81:79:3b:04:43:57:11:c2:0e:2c:0d:
         a2:0c:94:b8:b8:ce:5c:c4:a0:11:43:81:92:57:09:6a:75:44:
         27:cc:f0:d6:f0:08:a2:7c:e5:12:f4:35:45:b6:05:ad:f3:93:
         aa:4d:60:f9:aa:02:ad:b2:32:b8:a3:68:3f:26:c0:92:49:50:
         b4:ae:af:8c:99:41:dc:38:51:c0:a9:85:14:20:af:ba:14:c0:
         49:be:01:fa:c2:68:a5:b0:9f:80:1f:53:90:da:0c:46:c3:07:
         17:81:ce:c4:65:cc:cc:1d:d9:87:5f:90:6f:f4:a5:29:91:7e:
         f3:bb:c3:28:28:f4:8f:3e:65:54:01:09:b4:1a:3e:f0:e0:29:
         f0:be:4b:e8:b1:6b:20:1a:25:df:b7:49:a5:ad:20:34:ef:81:
         e8:7b:4d:c5:e2:28:00:d2:d5:a1:20:55:60:4f:02:b1:d0:bf:
         8e:d3:98:cb:9a:d2:83:0a:72:7b:d6:40:8e:87:e1:aa:da:36:
         ba:1f:a9:8d:b4:08:38:49:73:f3:bb:ef:71:2a:e6:09:fe:ab:
         c1:b8:f0:73:31:0c:7e:64:e8:21:87:95:33:d4:dc:ab:b1:bd:
         bf:64:c3:eb:14:e5:59:1a:d8:63:fc:15:d9:84:df:4a:a5:4d:
         ee:1f:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:44 2025 by rpki-client