This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft
File:                     3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft (raw, json)
Hash identifier:          N9ZZtOMBSlTM1Id73G5WumciwuJL4Ztf2EVo50RIFLc=
Subject key identifier:   03:1C:94:7D:A6:20:FD:EC:BD:12:68:48:E8:81:93:90:17:6C:F7:37
Authority key identifier: 35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59
Certificate issuer:       /CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859
Certificate serial:       1F8ABC33FF8AEA9FAB69F1CB2D746E531E0B1366
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft
Manifest number:          74
Signing time:             Sat 06 Dec 2025 06:51:14 +0000
Manifest this update:     Sat 06 Dec 2025 06:46:14 +0000
Manifest next update:     Sun 07 Dec 2025 10:23:14 +0000
Files and hashes:         1: 34352e3137322e35322e302f32322d3332203d3e20323638373530.roa (hash: /BDeZPrUv8+PcsdMOixik9++54jka+M6eyu4nPvnr5g=)
                          2: 323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (hash: KTpCP5+yYRNR+V93Ak7K+33CiAxupoTZH+z8ERWiROk=)
                          3: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl (hash: +PHQtElu9tg6SnOGr0j/TfsfG3Tk9+v2OF6lCDxrVDc=)
                          4: 34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa (hash: FnqYyjRTYfkNNd38hYxVbI+10+vM4PYCwzmDz8TKA/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl
                          rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8a:bc:33:ff:8a:ea:9f:ab:69:f1:cb:2d:74:6e:53:1e:0b:13:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859
        Validity
            Not Before: Dec  6 06:46:14 2025 GMT
            Not After : Dec  7 10:23:14 2025 GMT
        Subject: CN=031C947DA620FDECBD126848E8819390176CF737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:48:ae:29:09:5c:9f:bb:70:90:7f:98:ff:
                    aa:5f:3b:1d:74:ff:93:ad:2c:c5:ab:2e:0e:40:b7:
                    ca:6c:81:e1:c2:7e:9e:b2:46:c0:f1:59:c4:21:fe:
                    9c:2f:c2:01:da:1b:4f:1e:c4:e0:10:84:8e:24:95:
                    c7:b0:59:d0:5d:9f:21:c8:14:d1:4b:b2:29:0a:93:
                    d7:6c:8c:ce:8d:af:6e:2c:69:bc:68:78:47:29:76:
                    b3:65:3d:bf:1d:1e:28:56:df:e2:30:62:0e:3b:72:
                    f9:b3:64:4e:07:d3:f1:51:9f:4e:1f:a3:e0:bd:e9:
                    40:ac:4c:e7:be:0a:03:fe:27:83:a0:1b:04:ae:dd:
                    cf:f7:2d:21:8b:0b:d0:75:05:c2:a3:36:76:02:6e:
                    c1:5b:c9:45:6e:5f:07:1f:af:b4:18:31:9c:97:49:
                    2f:b1:d7:99:31:ef:69:07:a2:e1:ca:6f:71:68:94:
                    32:39:ed:7e:41:1c:f9:c4:46:48:9b:36:a0:13:89:
                    53:39:99:d8:51:4e:60:bb:7b:4f:7c:8b:43:58:c1:
                    a4:84:d8:78:02:83:29:07:0d:f6:e3:8d:bc:06:95:
                    79:71:7f:73:66:5e:e2:fa:ae:97:25:d2:e3:b5:57:
                    fc:50:fd:dd:76:8d:3a:2f:34:a9:1e:95:7a:8e:64:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:94:7D:A6:20:FD:EC:BD:12:68:48:E8:81:93:90:17:6C:F7:37
            X509v3 Authority Key Identifier:
                keyid:35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:ca:84:8a:1b:0d:56:af:24:54:0f:f8:ca:3e:40:3f:1e:
         cc:28:87:90:42:92:1b:19:5e:84:db:a3:b4:0d:c9:be:4f:d9:
         df:22:f9:dd:1e:72:c7:bd:6b:47:43:65:3a:eb:b8:e1:8e:82:
         4b:bc:d8:c3:89:2a:57:01:05:f1:17:ea:3f:72:db:1a:6a:76:
         5e:0a:fe:ca:4c:bb:76:a8:ab:9f:58:06:d0:36:19:73:fd:9b:
         97:61:d4:01:dc:27:eb:6e:9b:4e:64:29:1f:ed:28:7e:e2:46:
         7f:80:c4:6e:cb:ac:64:56:78:88:0a:c6:2c:01:5e:26:96:ba:
         ca:a9:40:a0:78:40:58:c0:f7:46:75:2b:cb:c5:61:2c:64:dc:
         a8:47:12:f1:e6:24:71:dd:ec:59:3d:5c:4e:56:72:5a:13:16:
         01:46:7f:85:a8:84:d7:b1:c3:03:2c:43:ad:a5:cb:f7:ef:35:
         75:96:25:d2:0e:c8:99:66:0f:9e:ee:97:21:e9:f4:f3:bf:85:
         41:c7:d1:6d:dc:7f:10:37:d3:7b:b1:cd:89:b5:e9:46:f9:47:
         92:59:0d:f1:f8:15:9c:19:ac:6a:34:c8:05:fe:ca:f4:a6:60:
         4f:94:7c:4f:d1:f2:14:db:96:9f:81:c3:87:62:69:41:90:91:
         be:84:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----