This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File:                     03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier:          kKwM8iHBZu5QL1zkvM7wXK3DUqzZB2k5fJoU1xDbBn0=
Subject key identifier:   3D:95:17:D9:A4:D5:E4:F4:AD:60:BB:4A:E4:4F:DE:FC:B0:FA:AE:17
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       301CC9F7647BF5E6BAEAA2832AEBB4D4C929811C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number:          0341
Signing time:             Sun 21 Dec 2025 07:38:50 +0000
Manifest this update:     Sun 21 Dec 2025 07:33:50 +0000
Manifest next update:     Mon 22 Dec 2025 09:46:50 +0000
Files and hashes:         1: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: F6mWoNxivsjy49EpdLR1loouYSZizuLjad8AnzE3j0o=)
                          2: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: 51gh5cZvKcku/HTCN3fV9dVatQeeJSDnbxCgtyYWsmE=)
                          3: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: nJEBpBK1Y4aLUQIWVqdqrcvZIS6tSwnE500dFXpgXrM=)
                          4: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: MWVxqT61yiEzzjMFTCposX7gtE+sEQ7wd0IdrYcsZ9Q=)
                          5: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: JXSG2lFnsu0PgtPridDb9NXhPAdDzZRlfq4SjRqbuJg=)
                          6: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: YDLbq6/nkVVu74XQcp7zVk8Cwt/9A79mVa60Ys2rVrQ=)
                          7: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: 1e1SPcAYyTs/4zRRsl9Nm8a/dhbju6PGdFzy/xxo8BU=)
                          8: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: MIP4Ct7Qyn5a6eX6N12gAe7wtTAtwUTqEAsb/1llNfM=)
                          9: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: 1rGuIDzWKdjZ8sfNRuNpir5rQPE8te1SMicTdAZMSHU=)
                          10: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: LqHAotSK+kzGb3qA0xizirM2EkoAg8p33cKLaPCSl9Y=)
                          11: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: HKbLS7E+Az6NGi4/iA6D4cS57BiWvM5NlPyC844QPL8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1c:c9:f7:64:7b:f5:e6:ba:ea:a2:83:2a:eb:b4:d4:c9:29:81:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Dec 21 07:33:50 2025 GMT
            Not After : Dec 22 09:46:50 2025 GMT
        Subject: CN=3D9517D9A4D5E4F4AD60BB4AE44FDEFCB0FAAE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2d:e7:80:94:ba:74:a4:b2:7b:4e:f1:49:78:
                    83:de:0c:e7:6b:bb:6a:f4:57:34:56:a3:e5:09:85:
                    2b:6d:75:10:6d:48:f1:dd:81:54:7b:8d:f1:02:41:
                    ab:a5:92:49:aa:94:d8:3c:cc:cd:ff:3a:88:9a:92:
                    dc:34:d5:4d:ba:67:65:de:63:6a:c5:62:32:20:e9:
                    3d:58:ba:7a:fd:af:d9:0d:02:05:2a:c4:de:68:3d:
                    b3:ad:1d:19:5b:05:3c:e1:c7:dd:95:87:ff:c1:2f:
                    8c:52:de:80:5f:cd:54:ba:5c:f9:96:52:01:5a:63:
                    be:a8:33:af:ef:ee:21:2b:0d:55:6f:61:83:51:1b:
                    f9:60:7b:ad:26:fd:b6:81:de:1c:76:1d:45:91:35:
                    5b:34:f5:ac:be:4e:f2:0f:21:08:ab:1b:c7:c3:d1:
                    4a:7a:f7:c1:c0:61:c2:ad:46:3c:6f:7a:93:67:79:
                    51:ab:78:d7:b5:0b:2a:69:96:68:78:ec:fc:cf:94:
                    40:db:67:0d:5f:a9:bd:bf:91:88:f8:89:be:bb:2d:
                    7b:9a:a0:0f:4c:67:03:22:80:a6:03:fd:41:08:b7:
                    30:8d:d2:20:d5:eb:16:6f:46:f2:20:e7:68:2c:61:
                    87:8f:34:fd:cc:3f:2b:4f:fb:e3:8b:3c:d4:56:92:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:95:17:D9:A4:D5:E4:F4:AD:60:BB:4A:E4:4F:DE:FC:B0:FA:AE:17
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:b2:5b:5f:d4:87:fc:b6:d7:70:af:e2:b5:78:c2:91:c0:
         30:45:ca:5d:40:f2:c4:4a:06:5f:8c:ab:f5:34:3e:f4:ef:06:
         ab:36:84:7d:5f:86:9d:cc:1f:b6:2e:15:d2:74:57:eb:7c:23:
         90:09:a9:2c:3c:12:4e:7d:81:5b:de:c7:60:a0:6f:8d:7b:a0:
         ad:35:7c:ed:11:b8:db:eb:f3:c4:75:52:39:10:43:5b:ee:30:
         c6:d5:47:73:52:a4:22:a9:06:a1:33:61:e0:c7:5f:a9:a0:e2:
         53:2f:e7:21:15:0c:ae:f6:76:45:35:10:94:93:ae:a3:7e:15:
         3d:35:c3:af:a0:0f:53:3f:b7:64:b5:54:35:74:e3:d3:e4:d9:
         3b:a7:57:8e:c5:0b:70:00:a2:65:b9:4c:7c:aa:c8:c8:76:25:
         49:d4:82:9f:f0:68:1e:4e:04:8a:7f:6b:b8:cd:4e:85:33:5d:
         cb:f5:36:f7:06:7b:0f:26:e0:cc:9c:76:ef:26:ae:82:96:4b:
         37:e7:04:66:85:0a:2a:00:70:79:9f:c1:76:77:ec:5f:36:1c:
         73:d0:d6:4c:2c:f8:27:aa:16:97:75:61:cc:be:f0:62:5e:ae:
         c9:ba:09:d5:19:75:65:55:6e:17:bd:24:81:1a:65:17:83:eb:
         d6:c5:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:08:27 2025 by rpki-client