This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
File:                     C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft (raw, json)
Hash identifier:          dAn40/PzhGvMnzUW2OkHDpVSo85e22d0d4Hv3tls1ls=
Subject key identifier:   4F:D4:5B:73:5F:72:65:55:39:8D:DC:44:2B:10:BE:9F:9E:C2:DA:AA
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       5B38CB8F46E6DBB6BBE5DFC43D5186914CD9251B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
Manifest number:          0327
Signing time:             Fri 05 Dec 2025 19:17:59 +0000
Manifest this update:     Fri 05 Dec 2025 19:12:59 +0000
Manifest next update:     Sat 06 Dec 2025 19:18:59 +0000
Files and hashes:         1: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (hash: hK0RvLcyNSgCl0OefYmupkPtIV86pZQUVOqr/p0l17w=)
                          2: 323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (hash: GaknIdLjhRyMuM+KZjIfMiI2+3fKWm8ALqR2m5gvgfg=)
                          3: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (hash: zPcZDOL66f4T54HzJWFF8O5qHyApg5MkyxiuE2xahB4=)
                          4: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (hash: 55fkKjzYY4cFKrZUo6KorCBrFStzFQqMNCaqWAsKOv0=)
                          5: 323830343a366166633a3a2f34372d3437203d3e20323730333730.roa (hash: mHTv35Nux4fuTbTGsyoyNamWCX1rgRoWohihOQwxFxs=)
                          6: 3139302e38392e3134382e302f32342d3234203d3e20323730333730.roa (hash: zeDsAcUaXY669rDbJ6aIZH1/in4UwVeBflH+SdJm+YU=)
                          7: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl (hash: 3g5RiULqrBpfPbQE9HwsAw9XVZdHMPKTYZJpkHKHhzQ=)
                          8: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (hash: wJQaneXZS/6Zie6oSb3HaDESCv5U+oUcaO+avfMOr/U=)
                          9: 3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (hash: TcSJ3nnp3UX3ckQz9iGwHcjZoJJVwSZw+IAejxBzYDo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:38:cb:8f:46:e6:db:b6:bb:e5:df:c4:3d:51:86:91:4c:d9:25:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Dec  5 19:12:59 2025 GMT
            Not After : Dec  6 19:18:59 2025 GMT
        Subject: CN=4FD45B735F726555398DDC442B10BE9F9EC2DAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:82:5f:3c:61:05:8d:fc:f8:a7:ec:9d:46:8e:
                    53:fd:42:6c:8e:35:36:7f:92:29:db:0d:f4:08:12:
                    0e:89:d7:6f:76:1b:a9:69:39:57:03:9b:7f:d2:92:
                    0b:3e:74:f8:3e:0b:ab:2c:b1:17:e1:68:b9:1c:2b:
                    64:50:29:99:d2:9a:ee:fe:a4:e5:3c:2e:27:c4:70:
                    61:fe:0a:ea:5b:c1:a0:54:6c:38:10:d7:c1:e3:b8:
                    3e:af:7f:51:1b:5d:56:0f:75:17:79:64:12:d8:b6:
                    52:4b:8b:07:3d:ef:37:59:87:73:0e:54:a9:01:a1:
                    c2:e7:8e:4f:d4:f7:a7:19:96:99:87:f8:8c:36:32:
                    9b:98:5f:5d:02:ab:fc:8f:f4:4f:0a:ca:5d:b9:17:
                    5e:83:85:5c:23:59:cb:bb:89:f4:03:2c:7d:54:ae:
                    b2:28:63:3f:0c:89:37:ba:e5:ab:75:b7:9e:b8:18:
                    bf:40:51:24:2e:bd:b4:33:76:74:a4:7b:c1:6e:61:
                    9b:b4:56:c5:8b:65:34:93:e1:19:05:3c:90:ad:77:
                    19:f7:a3:5b:26:d3:bc:09:cc:8c:9c:4a:8b:16:eb:
                    51:c1:04:99:eb:d0:5e:7c:6a:fc:e2:e6:10:92:7c:
                    33:04:6a:66:d6:e3:47:7f:04:54:af:a8:90:b1:57:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D4:5B:73:5F:72:65:55:39:8D:DC:44:2B:10:BE:9F:9E:C2:DA:AA
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:41:33:90:30:ee:62:cd:8b:5b:4c:55:e5:e7:2e:32:5c:
         7a:46:01:e5:a2:fd:e7:df:85:7b:e6:76:5b:84:0f:c5:79:02:
         d2:b9:0d:c5:41:97:30:47:5b:72:5d:e8:df:2a:a4:e4:47:56:
         ef:c6:78:e9:89:11:a3:fd:34:bb:c1:6f:08:a9:f2:ea:9e:68:
         dc:4e:04:9d:ce:87:30:24:dc:62:03:5d:d0:cf:de:26:ec:7e:
         e1:1a:7e:5b:82:b1:87:80:b2:49:21:27:f5:aa:dd:a9:87:d5:
         54:1a:af:a9:92:6a:fb:68:69:44:c6:6d:a2:15:5f:a1:af:63:
         b9:bd:7f:94:1e:ba:2e:f8:ab:bc:44:55:91:93:28:91:26:46:
         e4:be:32:4f:93:93:ca:2e:0a:75:62:44:ae:d0:90:c4:5f:30:
         cc:3f:42:21:ce:f1:61:31:c0:00:98:12:4f:b5:af:20:2c:c6:
         ed:05:93:25:73:fc:b0:23:d0:c5:c5:5f:bd:03:dc:8e:56:00:
         a8:6e:c0:65:9a:e1:c0:2c:4d:0f:bf:01:6d:f3:15:50:54:d9:
         bd:07:66:c3:39:40:76:46:9e:37:c6:a6:11:fe:2b:b4:47:d5:
         df:1a:5b:01:ba:ad:bf:19:e5:06:da:60:a1:68:9a:69:75:b3:
         5f:c5:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:25 2025 by rpki-client