This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
File:                     038EA35AF01B781289F24933082A9857B17EAE3A.mft (raw, json)
Hash identifier:          l/4xrZG+U/p8DDNgFY1ixUh/ArbnE+XLHiaR1VbjnVI=
Subject key identifier:   9F:A4:2F:30:16:58:C0:A6:5B:B8:A2:62:36:23:F0:A4:A4:0F:0B:93
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       2E2200ED8DEAC520F3294F2EC7C2D4977189EA6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
Manifest number:          022C
Signing time:             Fri 05 Dec 2025 20:28:51 +0000
Manifest this update:     Fri 05 Dec 2025 20:23:51 +0000
Manifest next update:     Sat 06 Dec 2025 22:12:51 +0000
Files and hashes:         1: 038EA35AF01B781289F24933082A9857B17EAE3A.crl (hash: 4oLW8AAD1JCooDCpIn8ZrZ5NSqNIA58zI8wEsfSgJ6o=)
                          2: 3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa (hash: ZtLi9pepBluNDAhUNA2nZQ2BvSAboQFvEs5nlsuzdfY=)
                          3: 3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa (hash: zMnDbfmkPgHskdtlQ1eZNoUoL2BaMaCxCcWPiG/ZVN8=)
                          4: 3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa (hash: qqw8XOvUrZXXundy5cwBvwu/7opXf71pnfhglGicMkE=)
                          5: 323830343a336464343a3a2f33322d3332203d3e20323636353536.roa (hash: vMNuiS/QZ09FSOR6rZ+afTgkVIv0+omU9QZkEiLgYZg=)
                          6: 3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa (hash: HyMp/45+aPJ3xv6BS1BSEtGU5dfBoJttCdk+Y2oSFrY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:00:ed:8d:ea:c5:20:f3:29:4f:2e:c7:c2:d4:97:71:89:ea:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Dec  5 20:23:51 2025 GMT
            Not After : Dec  6 22:12:51 2025 GMT
        Subject: CN=9FA42F301658C0A65BB8A2623623F0A4A40F0B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:e6:a5:5f:d3:37:e0:32:0f:f3:40:be:07:
                    74:85:2a:96:c4:6b:9c:c6:de:48:2a:8e:67:5f:da:
                    ae:a1:63:a3:1c:28:60:84:8a:74:c0:5a:56:bb:d6:
                    74:ac:15:78:4c:d3:98:34:49:ba:51:1b:e5:a2:b1:
                    d8:21:a7:51:fc:1c:cc:1e:49:f7:1f:21:51:27:f8:
                    39:d9:23:bf:6e:57:64:51:a6:74:0e:4a:50:a8:c5:
                    00:19:2c:13:a0:d4:ce:d1:6c:7a:f4:cb:37:8e:1f:
                    88:ad:fa:22:e6:0d:01:58:39:2c:b0:db:92:f8:dd:
                    79:5a:4d:7a:60:8f:f4:31:ae:d0:ee:04:78:35:90:
                    5e:bc:5b:e2:9f:c4:cf:e4:92:0a:d1:64:4b:41:1f:
                    54:6a:1d:fd:b3:48:08:ae:f8:6e:1e:98:99:cc:ac:
                    31:f0:1c:54:44:fd:2b:f5:1d:cb:74:98:ae:3d:aa:
                    49:ec:6f:3d:60:c9:8a:0f:9a:25:87:db:06:91:ac:
                    1e:50:ee:19:de:cb:89:28:e9:49:c0:be:93:2b:a2:
                    ad:ef:a1:44:4b:57:31:41:40:a8:3d:fb:f4:0a:99:
                    d6:37:f2:ea:8e:59:be:4c:f9:a8:c2:78:07:a6:b0:
                    cf:a5:65:61:cc:51:3a:90:5e:da:5b:cd:a9:05:7b:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A4:2F:30:16:58:C0:A6:5B:B8:A2:62:36:23:F0:A4:A4:0F:0B:93
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:f9:be:00:06:46:f1:3a:2a:64:25:7e:f1:81:ca:3d:d7:
         a5:cf:6d:92:f1:ff:01:ca:99:76:49:8a:b3:26:f0:7d:de:bf:
         6d:a7:21:cf:48:f5:0f:40:92:91:73:ec:41:ea:ae:e5:8f:2a:
         93:46:df:e6:f9:6c:60:8b:fb:05:b3:d5:40:51:bc:79:5a:fe:
         48:6c:00:07:62:57:65:d0:29:21:58:99:a3:93:63:f6:62:1e:
         3a:8a:a7:9f:d7:ad:bb:43:f3:e5:11:a7:00:37:ab:bf:1f:a9:
         d9:d8:ea:99:d0:2b:c1:67:81:ec:e2:ef:0d:43:1e:5c:10:5f:
         93:44:b2:01:56:02:4d:71:58:96:3f:ec:cf:d1:16:b5:92:21:
         e7:85:a8:52:93:b0:4e:43:1b:ab:60:d9:0c:42:ea:17:f9:72:
         c3:7e:c9:cb:27:59:0a:8b:01:03:a9:71:d6:f9:82:86:11:d4:
         16:ae:e0:a7:62:6b:15:76:06:87:c1:1e:85:ed:1d:fc:f7:18:
         38:c4:16:0e:4a:e2:11:6e:54:54:ed:1f:0b:27:29:f6:33:83:
         31:0d:e0:9b:a4:b3:f2:e6:be:30:11:6d:9b:2f:38:19:d2:a3:
         0c:91:fc:7f:c5:d4:e5:28:dd:31:8f:a1:87:a0:04:db:2d:ae:
         b1:4d:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:20 2025 by rpki-client