This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          bcJY8uYt2D49nDepRrTqThd+k1pxTovYadkwDLL6xCI=
Subject key identifier:   3C:37:7E:A7:CC:D4:DD:F2:D8:F9:CE:A3:42:79:4D:DB:0D:28:4A:4B
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       0E17BD430B390C6169B23AB60914E74B86FDB33E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          0370
Signing time:             Sat 06 Dec 2025 19:59:30 +0000
Manifest this update:     Sat 06 Dec 2025 19:54:30 +0000
Manifest next update:     Sun 07 Dec 2025 21:51:30 +0000
Files and hashes:         1: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: dUyV45MePKpheZpoJ0lt5aHghBTpfKKRMTzSSN9P08Q=)
                          2: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
                          3: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=)
                          4: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=)
                          5: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          6: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
                          7: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 20:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:bd:43:0b:39:0c:61:69:b2:3a:b6:09:14:e7:4b:86:fd:b3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Dec  6 19:54:30 2025 GMT
            Not After : Dec  7 21:51:30 2025 GMT
        Subject: CN=3C377EA7CCD4DDF2D8F9CEA342794DDB0D284A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:d8:15:e8:9a:91:55:6b:c6:93:8d:f8:a2:
                    f1:09:7b:4b:48:d3:2e:dc:d7:7b:0c:1c:e8:d1:4f:
                    81:26:f7:fd:fc:03:ce:a9:f4:5c:98:a9:a0:6b:7d:
                    33:13:c3:9c:53:48:12:28:2f:ce:d8:0d:5e:da:11:
                    59:7a:20:d7:71:6e:0f:1f:39:d2:1e:ca:51:e9:36:
                    8d:cb:d5:2c:dd:23:59:15:93:41:38:65:ec:df:c2:
                    76:41:61:30:f3:81:19:60:55:f4:57:d1:a3:ff:52:
                    68:c5:20:9d:0b:a2:6a:ac:42:71:1f:30:dc:f2:b6:
                    f9:66:bb:0c:03:05:0d:a1:6e:05:21:24:4e:26:4f:
                    6c:85:5c:4e:31:c4:de:48:9a:fe:c3:12:46:65:fb:
                    95:6f:1b:e8:19:1f:04:f0:72:22:26:51:66:6e:fd:
                    c3:73:40:1f:8c:e5:90:76:4f:7d:5a:5c:6e:6e:59:
                    91:5b:f6:7a:33:5a:83:46:70:9e:aa:e1:f6:27:0a:
                    ec:c3:59:15:2e:e3:d3:82:05:fe:06:df:c7:79:bd:
                    53:5b:4a:59:2e:23:e4:24:a7:eb:7b:38:1b:fe:ae:
                    57:fd:53:e4:08:7d:18:b8:55:b5:9e:a5:74:a4:27:
                    9c:be:13:30:99:1f:62:df:b1:d3:ec:90:da:3b:87:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:7E:A7:CC:D4:DD:F2:D8:F9:CE:A3:42:79:4D:DB:0D:28:4A:4B
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:24:6b:c7:5d:82:29:24:15:72:07:1f:9c:6f:61:73:cc:
         1e:d6:a0:19:c5:ed:6c:27:0c:84:ba:84:dc:30:26:cd:1a:d6:
         ac:a3:4b:c9:34:c5:d9:8a:43:74:f5:52:7f:f3:4b:fd:aa:96:
         ac:42:ec:7b:e2:c0:b2:a8:a5:46:21:f3:ed:eb:c0:4c:5f:ed:
         3f:0c:76:53:07:81:63:6a:36:9c:98:bb:81:0c:33:4e:91:24:
         77:2f:c8:d3:35:b3:d2:59:06:2f:42:81:5b:a1:cf:34:70:c4:
         1b:92:f8:a8:a7:25:d6:7a:49:ea:2e:95:96:3e:5d:77:35:6c:
         c7:ee:5c:42:b9:4b:bc:85:a5:fb:90:1c:a5:df:0a:b8:b7:ad:
         48:24:14:93:1b:53:89:55:72:07:b8:67:5e:76:72:e3:71:49:
         66:80:3e:74:ff:8c:1f:03:15:d4:43:cd:b5:ba:cf:cc:09:76:
         39:5d:5c:f9:fb:e2:8c:02:7b:f3:cc:60:df:5e:93:24:00:a5:
         3a:00:4b:24:65:5f:26:ef:c0:c4:ec:46:09:98:0f:42:fa:07:
         da:52:00:27:e5:0c:53:f2:56:19:b2:0f:1e:ec:63:55:3b:bd:
         d2:e2:5a:4a:be:9f:60:f5:e3:60:b1:a6:54:3b:46:7d:aa:b2:
         65:34:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:44 2025 by rpki-client