This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
File:                     3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft (raw, json)
Hash identifier:          qwsvErQu1F1EaqxUsGgQCYjmnxp5jU9Jix1JFJ9NzYY=
Subject key identifier:   04:F4:AD:AD:E7:E6:FD:14:A7:4F:A5:1F:82:9A:D6:7D:F1:4E:5D:2E
Authority key identifier: 3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7
Certificate issuer:       /CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
Certificate serial:       3B200335A39D2AA63E4D92266EE5532E0BF1AD31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
Manifest number:          021A
Signing time:             Sat 06 Dec 2025 13:35:43 +0000
Manifest this update:     Sat 06 Dec 2025 13:30:43 +0000
Manifest next update:     Sun 07 Dec 2025 13:47:43 +0000
Files and hashes:         1: 3137372e3138352e3132382e302f32302d3234203d3e203532393336.roa (hash: ugbcElFyKStqfDQPGXBwYiu8DwF/2cyGvSUKH3Q/2sQ=)
                          2: 3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl (hash: ScAc8+bkoO65eMgvCN11iXgyUmtki8qg2xk7cHtwOC0=)
                          3: 323830343a6231303a3a2f33322d3332203d3e203532393336.roa (hash: FtX/R1WvCDzClhSBSduutGS4pbzU5dfHJ5HrQtixCEQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl
                          rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 13:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:03:35:a3:9d:2a:a6:3e:4d:92:26:6e:e5:53:2e:0b:f1:ad:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DB191150FCD76CA20839F475687E6E6C70AC6A7
        Validity
            Not Before: Dec  6 13:30:43 2025 GMT
            Not After : Dec  7 13:47:43 2025 GMT
        Subject: CN=04F4ADADE7E6FD14A74FA51F829AD67DF14E5D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:0b:77:bf:5c:0a:41:1c:82:c0:23:c0:00:
                    d1:79:fa:36:de:35:f4:4c:46:b7:b5:c3:78:39:c6:
                    bc:c5:f9:c1:ec:82:0b:00:3a:50:22:5c:ca:ab:79:
                    2c:68:73:cf:47:45:c4:11:e6:65:bf:44:95:b3:3a:
                    d2:a5:38:ce:7b:62:b2:df:61:38:4e:5d:82:09:6a:
                    02:1e:c3:6e:00:e0:f5:b4:39:fc:aa:5c:f6:d6:25:
                    43:26:00:f6:d4:bf:af:4d:fc:3b:12:3e:9e:b2:21:
                    89:92:57:88:9b:74:f9:c5:9f:9a:1d:71:ad:a3:80:
                    54:5d:01:ff:5e:16:c7:e7:30:18:7d:bf:32:a2:b3:
                    6a:ac:21:5e:f3:74:72:6c:23:fb:e1:be:03:f9:7c:
                    af:e9:15:17:77:a9:a7:7b:2c:89:b4:16:87:87:99:
                    30:dc:1f:5a:4f:ec:01:13:42:42:0c:cd:f0:59:30:
                    4f:00:f1:bf:8b:82:64:16:27:84:b0:c3:f6:1a:45:
                    5e:dd:a1:05:c9:f4:c9:45:7b:14:5c:f3:af:b5:bf:
                    ce:3c:9a:e1:22:f1:00:6c:bc:87:d0:48:7b:3d:66:
                    6f:e6:12:a6:9e:a0:ff:fb:d1:fb:5f:ee:b7:9e:7b:
                    31:f2:7a:42:59:4f:6c:0d:94:6d:4b:89:73:97:2d:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F4:AD:AD:E7:E6:FD:14:A7:4F:A5:1F:82:9A:D6:7D:F1:4E:5D:2E
            X509v3 Authority Key Identifier:
                keyid:3D:B1:91:15:0F:CD:76:CA:20:83:9F:47:56:87:E6:E6:C7:0A:C6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DB191150FCD76CA20839F475687E6E6C70AC6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdNsA7fvMUCYFpDEQvMR4uvUmhyoJKZ5rVZem5zUuCWv/0/3DB191150FCD76CA20839F475687E6E6C70AC6A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:86:68:8b:8a:87:81:d4:29:ae:40:c1:92:58:e6:a6:f7:df:
         23:e7:6b:27:86:19:c4:99:a6:c0:23:30:97:40:44:bd:2c:c8:
         e2:75:87:ea:ef:1d:40:9d:d5:44:9b:df:9e:de:bb:33:9c:36:
         e8:f7:cd:92:33:e5:9e:38:87:a1:74:28:9b:54:1e:73:b6:ee:
         c0:ca:65:ee:eb:b3:2f:8a:c2:cb:d3:2d:dd:b7:71:8e:e4:9f:
         f5:7e:cd:ea:35:5e:af:e7:a1:83:ff:e5:dc:ce:ae:d8:bc:91:
         32:a6:54:9f:3b:8f:9b:60:41:e5:3e:72:26:a2:9f:f8:58:c2:
         5c:5c:57:c4:47:24:95:6b:54:4b:e2:54:6f:3d:0a:d3:fd:a6:
         98:16:b9:38:d0:47:e2:48:b2:13:e9:ac:f8:73:99:8d:7b:80:
         d6:26:71:3c:88:8c:17:18:03:b6:5c:67:e4:0b:b2:e2:bb:c8:
         5c:04:4a:7c:52:dc:e7:f2:d4:c7:66:15:98:a7:f2:34:79:9c:
         49:87:c0:ef:d0:89:e6:8c:d2:72:ad:21:4f:98:ae:42:0e:d8:
         b5:fe:d2:a0:79:ba:82:66:6e:1a:69:13:4c:f3:5a:67:d6:ab:
         84:54:9c:b3:46:68:5b:08:a0:ab:a3:13:96:4e:c7:6d:ca:36:
         a2:ef:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:09 2025 by rpki-client