This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
File:                     A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json)
Hash identifier:          Q4VIyGLHVPuCHAszRBlyvllW0sk7YhwmcnqwzxI3VHE=
Subject key identifier:   AC:B5:A5:15:60:57:BD:97:A1:90:A0:3B:AF:1A:FE:04:7F:56:3E:92
Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD
Certificate issuer:       /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
Certificate serial:       30E576348CF159B7B0E9BC88F6BA6AEAD6A73F57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
Manifest number:          032E
Signing time:             Sat 06 Dec 2025 04:48:05 +0000
Manifest this update:     Sat 06 Dec 2025 04:43:05 +0000
Manifest next update:     Sun 07 Dec 2025 05:57:05 +0000
Files and hashes:         1: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=)
                          2: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=)
                          3: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: nBz0ZXKxJqbFa9hzT0oiC+5dAF54oKSy07/Fan2iV0Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl
                          rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e5:76:34:8c:f1:59:b7:b0:e9:bc:88:f6:ba:6a:ea:d6:a7:3f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
        Validity
            Not Before: Dec  6 04:43:05 2025 GMT
            Not After : Dec  7 05:57:05 2025 GMT
        Subject: CN=ACB5A5156057BD97A190A03BAF1AFE047F563E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:6c:25:a4:25:f5:be:5b:7c:5b:3b:69:fd:
                    b9:be:c9:0f:6d:38:05:0a:c7:36:ff:12:8f:ef:93:
                    3a:18:7b:f0:9e:9a:09:7e:52:72:f0:22:7d:1e:ca:
                    61:0e:3a:11:1c:d1:91:fd:62:f5:30:04:0e:40:4d:
                    ab:73:84:20:e9:ca:82:18:16:95:38:46:1e:28:5b:
                    ff:43:c2:de:0d:81:7b:1f:f3:16:ad:70:50:59:2b:
                    e4:a2:58:44:70:59:28:a3:36:c7:e7:f9:2a:c0:cb:
                    36:d6:ee:b8:90:8e:da:d3:88:d9:0b:a4:da:df:85:
                    0a:bf:16:45:d4:32:08:d3:fc:a6:dd:26:59:08:47:
                    ab:35:62:12:07:8d:45:bc:a0:3c:d9:36:ad:1f:15:
                    4e:e8:82:9a:bf:0f:1d:a7:2b:6d:d6:7c:80:87:34:
                    bf:97:a2:92:26:d2:94:c4:45:49:f8:00:fd:0c:6f:
                    8c:74:50:93:f5:12:47:1c:60:eb:45:85:0d:aa:d1:
                    dd:ce:9b:07:61:aa:67:b0:5a:af:c5:5c:e8:e3:c3:
                    46:5f:15:19:47:22:fc:85:ce:7c:ff:ca:f2:36:41:
                    80:b2:72:75:6a:92:14:f4:3c:d8:58:48:a0:8f:c4:
                    d9:c4:f4:28:87:15:cd:63:07:ce:36:b9:2e:2c:83:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B5:A5:15:60:57:BD:97:A1:90:A0:3B:AF:1A:FE:04:7F:56:3E:92
            X509v3 Authority Key Identifier:
                keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:2a:c1:04:ab:54:a1:96:5f:6e:89:c6:a3:69:4e:ca:83:
         f7:6c:b8:d8:53:03:0e:9a:dc:48:16:74:db:27:60:65:e6:ab:
         1d:ae:89:f5:e3:ce:e5:b2:a5:39:69:c7:3c:33:fd:cf:5e:af:
         7e:2f:34:e9:33:4d:1a:fa:c1:a7:82:d4:68:9d:64:a9:fe:85:
         58:27:fe:b6:0e:79:69:49:e6:72:d7:4b:b5:a3:65:1f:d9:03:
         a4:95:83:ef:9d:70:07:3a:47:bd:99:6c:3a:90:9a:69:f7:ea:
         6e:37:94:a2:e8:40:4e:10:7b:89:6c:39:a4:0f:37:e6:de:78:
         b8:de:d9:13:ff:4e:cf:dd:54:f4:38:d6:d2:5f:d2:ac:75:3f:
         8e:01:ee:c4:ec:50:a4:cc:95:a2:f7:2a:21:c5:a2:6d:3d:c4:
         de:3b:d0:4c:0d:31:b5:c6:3d:05:90:af:25:60:64:4b:25:f8:
         16:97:84:bc:79:9b:19:a7:a6:27:0c:f3:af:38:33:5b:c6:8e:
         b3:82:01:a4:08:5e:18:df:92:7f:1d:da:8c:07:32:b7:58:f9:
         2a:50:70:5c:8b:1c:8a:84:3a:04:bc:46:b5:6e:be:a4:16:b3:
         0a:03:8c:0b:de:f8:07:8c:a4:f4:59:e9:88:04:d9:30:70:94:
         05:58:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:27:51 2025 by rpki-client