This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
File:                     31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json)
Hash identifier:          j5fIne6rRxDKVgMIh9Q0V/vanGjb5hsby2TBmVk6pRs=
Subject key identifier:   38:85:BA:6B:3A:6B:65:E3:C0:99:EA:7A:DE:C4:FA:EE:CF:96:EE:2C
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Certificate issuer:       /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial:       688AD16C9C4E47D9AFE886CD78E6659E0CB4AC43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
Manifest number:          0332
Signing time:             Sat 06 Dec 2025 05:23:22 +0000
Manifest this update:     Sat 06 Dec 2025 05:18:22 +0000
Manifest next update:     Sun 07 Dec 2025 07:41:22 +0000
Files and hashes:         1: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ahehKlt3W03bvotZ/SKfxhWvDlNr0XGgSJ6YRYOsDlI=)
                          2: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: 2+aJnh2Q9Ds6NmQQtQrdd3EFoTKUAvkgTSsvPWnE2Ek=)
                          3: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: DfNh3RPmk1F6vaI2opWHLQmcJPeKWdVIEju80Ku5GeM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
                          rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8a:d1:6c:9c:4e:47:d9:af:e8:86:cd:78:e6:65:9e:0c:b4:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
        Validity
            Not Before: Dec  6 05:18:22 2025 GMT
            Not After : Dec  7 07:41:22 2025 GMT
        Subject: CN=3885BA6B3A6B65E3C099EA7ADEC4FAEECF96EE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:b7:12:ae:19:3d:51:7d:80:cd:94:08:ff:
                    fd:e1:d5:2e:ff:a6:a0:ad:c7:dc:60:1c:f7:25:d2:
                    cc:6b:79:3b:17:90:9c:25:d3:79:f1:57:de:dc:8a:
                    fb:64:65:fc:c4:62:e0:f6:f8:56:ae:c4:7e:7f:64:
                    67:ff:58:3e:9e:ae:29:67:2c:2f:99:e5:4e:b0:da:
                    ed:f5:4a:65:bc:f9:60:b1:8d:90:14:e5:95:fa:b3:
                    da:8c:22:5b:71:30:e5:ca:6e:9c:5a:bc:6d:a5:ef:
                    9f:1f:4c:d6:d8:8a:85:64:0a:77:dd:37:0c:29:49:
                    06:92:9e:27:27:f9:85:d0:dc:57:ef:a3:33:c0:9f:
                    96:ef:1f:09:d4:f6:03:25:46:1c:49:74:9b:44:1d:
                    9c:78:14:6f:00:db:56:b6:ae:09:72:63:55:40:e8:
                    4b:98:68:55:19:38:09:e3:33:cb:fd:91:ee:49:17:
                    88:21:3a:0f:40:75:79:54:f4:a5:1b:22:3a:32:d4:
                    5b:ed:fc:7e:9b:b0:da:fe:7a:52:46:92:7a:62:f9:
                    08:20:e1:ba:7a:aa:92:ff:9e:a4:a2:cc:db:a6:33:
                    9b:c1:74:39:14:15:00:e5:4f:55:ad:6e:16:59:2f:
                    a2:05:3f:3d:4f:69:19:d0:f6:a2:fc:8f:cb:e8:96:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:85:BA:6B:3A:6B:65:E3:C0:99:EA:7A:DE:C4:FA:EE:CF:96:EE:2C
            X509v3 Authority Key Identifier:
                keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8e:85:66:c8:23:47:36:b2:df:dd:41:11:6b:c5:6d:29:fc:
         ff:7c:b5:fc:e1:9d:96:2c:af:d1:69:40:c6:cc:d3:6d:9f:fb:
         8a:0a:5b:80:17:82:6d:5f:9e:e3:f3:08:83:08:d7:58:10:b0:
         5b:5a:16:69:5e:a1:4a:ff:0c:d7:78:4e:6b:45:8c:d6:32:f2:
         bd:12:e7:0d:b0:0a:84:49:e2:16:6b:59:4c:29:53:e9:65:75:
         6a:dc:2e:4e:0f:f7:a5:d5:8f:58:63:05:06:58:f8:1d:b0:50:
         cd:f1:9d:28:94:e9:99:89:85:7c:d1:b3:0f:3d:89:f8:1c:c3:
         1a:37:12:66:e3:88:f7:5d:34:be:a0:b1:67:1a:52:a8:f2:d6:
         7b:2c:7b:a0:8e:e2:e7:8b:26:59:b0:78:bf:c4:4c:3c:64:85:
         6b:59:49:c2:54:4f:fe:f0:61:9f:72:65:e5:08:85:64:5c:a6:
         cc:f3:a3:f0:78:33:b2:c4:b0:1e:d7:13:20:41:4b:7b:ef:ab:
         f5:20:be:8e:9f:56:ee:30:dc:00:b0:e0:78:67:94:a4:b0:d2:
         79:fc:f9:6f:6b:19:f4:40:fb:05:84:02:b9:2d:97:d9:1d:cb:
         72:cf:ae:19:15:0a:77:49:33:68:12:55:ff:82:6b:0d:a3:c3:
         e4:88:f8:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaIrRbJxOR9mv6IbNeOZlngy0rEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFCQUQ5ODA4REU4MDQ5MDNBQTZDNjVCQkUzM0NCRUUx
Qzk5MUQ5QTAeFw0yNTEyMDYwNTE4MjJaFw0yNTEyMDcwNzQxMjJaMDMxMTAvBgNV
BAMTKDM4ODVCQTZCM0E2QjY1RTNDMDk5RUE3QURFQzRGQUVFQ0Y5NkVFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQrcSrhk9UX2AzZQI//3h1S7/
pqCtx9xgHPcl0sxreTsXkJwl03nxV97civtkZfzEYuD2+FauxH5/ZGf/WD6eriln
LC+Z5U6w2u31SmW8+WCxjZAU5ZX6s9qMIltxMOXKbpxavG2l758fTNbYioVkCnfd
NwwpSQaSnicn+YXQ3FfvozPAn5bvHwnU9gMlRhxJdJtEHZx4FG8A21a2rglyY1VA
6EuYaFUZOAnjM8v9ke5JF4ghOg9AdXlU9KUbIjoy1Fvt/H6bsNr+elJGknpi+Qgg
4bp6qpL/nqSizNumM5vBdDkUFQDlT1WtbhZZL6IFPz1PaRnQ9qL8j8volqbfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOIW6azprZePAmep63sT67s+W7iwwHwYDVR0j
BBgwFoAUMbrZgI3oBJA6psZbvjPL7hyZHZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQ
NTYvMS8zMUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQkFEOTgwOERFODA0OTAz
QUE2QzY1QkJFMzNDQkVFMUM5OTFEOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQNTYvMS8z
MUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANI6FZsgjRzay391BEWvFbSn8/3y1/OGdliyv0WlAxszTbZ/7igpbgBeCbV+e
4/MIgwjXWBCwW1oWaV6hSv8M13hOa0WM1jLyvRLnDbAKhEniFmtZTClT6WV1atwu
Tg/3pdWPWGMFBlj4HbBQzfGdKJTpmYmFfNGzDz2J+BzDGjcSZuOI9100vqCxZxpS
qPLWeyx7oI7i54smWbB4v8RMPGSFa1lJwlRP/vBhn3Jl5QiFZFymzPOj8HgzssSw
HtcTIEFLe++r9SC+jp9W7jDcALDgeGeUpLDSefz5b2sZ9ED7BYQCuS2X2R3Lcs+u
GRUKd0kzaBJV/4JrDaPD5Ij4Ew==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:38 2025 by rpki-client