This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft
File:                     3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft (raw, json)
Hash identifier:          fNUdybhJRcq8ikMb+Sfwo1OUVsLcRjbgi6ojCrc8gcw=
Subject key identifier:   43:48:3C:A7:2E:18:A4:50:0D:12:63:33:E4:9D:51:92:2A:1F:87:B7
Authority key identifier: 3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8
Certificate issuer:       /CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8
Certificate serial:       D75A9BCA8C2881C4488F49E85A51EEC6DB26A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft
Manifest number:          4B
Signing time:             Sat 06 Dec 2025 05:43:38 +0000
Manifest this update:     Sat 06 Dec 2025 05:38:38 +0000
Manifest next update:     Sun 07 Dec 2025 06:47:38 +0000
Files and hashes:         1: 323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (hash: 3Ghujwd9UJr9rmn+1oBjDbpHtaxE8dNt1tzIlqfBhgM=)
                          2: 3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (hash: 7vlAhbb3FI7QyEjtwP0+o0wEbBe10eFGaDw+xDEygn0=)
                          3: 3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa (hash: j+FV69/njmj4oFmPt6kSnXyQbUS03CHA/8u11POeSL8=)
                          4: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl (hash: TbDpynoVxasTIy7mqsknvtV9F8Yelc3HNjNjbXY64Cg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d7:5a:9b:ca:8c:28:81:c4:48:8f:49:e8:5a:51:ee:c6:db:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8
        Validity
            Not Before: Dec  6 05:38:38 2025 GMT
            Not After : Dec  7 06:47:38 2025 GMT
        Subject: CN=43483CA72E18A4500D126333E49D51922A1F87B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:f0:fd:8d:ee:85:4a:be:43:a2:bc:82:69:
                    1c:dc:61:8b:00:85:ee:1f:d8:6a:4f:bc:fc:32:ae:
                    0e:c7:67:fd:f9:a2:7f:c0:4a:2d:b5:df:c5:06:fa:
                    4b:1c:bd:4c:eb:e1:b2:86:da:61:f5:d0:04:cc:13:
                    19:28:fb:f7:c2:8d:ce:ff:35:e2:86:91:4e:23:fd:
                    4c:72:8c:f0:a5:5c:7e:c0:95:77:87:62:dd:ec:80:
                    0b:70:bf:ef:58:37:c7:07:6e:17:64:0e:da:fe:ff:
                    33:b9:90:6f:b3:a0:74:45:b2:5c:d1:f9:f3:dd:9e:
                    d0:ff:5e:ce:43:55:fe:b3:f3:2a:be:ae:ef:53:19:
                    dc:cb:cf:3a:1b:e5:1a:3c:67:b7:66:6a:e1:a5:92:
                    85:4b:ca:8d:a1:1b:d2:cc:50:80:a2:9d:1c:dd:44:
                    cd:bb:ae:32:a3:40:e5:fe:81:c0:b2:a5:b5:ec:07:
                    14:46:2a:4a:85:1b:e4:53:ab:fa:cd:1b:25:55:fe:
                    c0:88:5a:ee:38:18:c2:87:b6:e4:d3:5e:fd:60:af:
                    1e:7a:59:6c:67:a7:88:c0:c1:7c:f0:98:b6:da:14:
                    d7:09:f3:29:44:7c:29:e2:de:32:dc:41:af:89:7b:
                    06:ae:61:2d:77:9b:78:f9:b6:51:2f:c2:b9:ec:7b:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:48:3C:A7:2E:18:A4:50:0D:12:63:33:E4:9D:51:92:2A:1F:87:B7
            X509v3 Authority Key Identifier:
                keyid:3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:51:04:45:dc:bc:59:24:c7:63:73:6d:aa:95:2c:ac:63:
         8a:dd:7d:14:59:d3:7e:d5:de:86:c6:e7:b1:58:d6:9a:f7:93:
         85:90:7b:27:7e:c3:b3:0a:0c:1a:d5:fd:c7:59:c5:0f:d8:49:
         3d:69:2b:94:bf:99:1e:63:4a:1a:11:f3:14:3f:ff:ab:76:af:
         5a:a8:09:3d:0a:02:4f:e9:b2:06:94:ea:b1:8c:63:f4:8b:a8:
         67:5a:0f:82:09:d5:ac:36:0b:14:18:1b:90:e3:c5:b9:09:ee:
         df:b3:cf:1a:40:6b:ff:74:db:6b:4c:73:ea:33:f0:51:3b:a0:
         f3:9a:69:90:58:97:af:63:3e:fb:ee:ee:4b:79:ea:e3:e5:37:
         51:d7:57:75:77:50:44:4c:e9:1e:c3:4d:1f:15:ae:23:4d:89:
         92:dc:3c:99:0a:6e:56:3f:12:9a:fb:eb:d6:b0:90:b6:4c:f3:
         c0:28:7c:fe:72:b5:82:d6:4b:df:9c:67:0a:64:fb:59:72:6b:
         6f:53:7f:64:67:d2:63:59:13:c5:cf:a0:e4:dc:2d:46:10:7a:
         82:a1:bd:a2:5b:de:d3:94:63:67:68:62:8b:c6:d7:c2:cc:28:
         b6:12:4d:3e:39:ed:5a:98:a2:a9:79:1d:d0:e9:8e:e5:6f:6d:
         bd:32:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:24 2025 by rpki-client