This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
File:                     3583862D781B71B103E9FA8D726C4D02380ACEE3.mft (raw, json)
Hash identifier:          1L9HEgyxYgdITQ2lStijF8SRoI4o4VOKiS8hzNB2+GQ=
Subject key identifier:   A8:6D:2E:D0:1C:B5:A5:0C:72:4F:6A:AF:BA:DB:E5:23:DD:70:52:3F
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       1FD44EAA82CA04A83FDF8A5333243217F0C49ECC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
Manifest number:          0331
Signing time:             Sat 06 Dec 2025 05:08:51 +0000
Manifest this update:     Sat 06 Dec 2025 05:03:51 +0000
Manifest next update:     Sun 07 Dec 2025 07:03:51 +0000
Files and hashes:         1: 3583862D781B71B103E9FA8D726C4D02380ACEE3.crl (hash: f9Uv1sK6Br+Yv0HcPoLxs0XsVI5cRQGpp00qEIOuI2c=)
                          2: 323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (hash: roe3CRwUBZHOfPicJI5B0uNIJHF0uBEXZDkKOt8LSec=)
                          3: 323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa (hash: VKDf7ggbfiz8rpCjJSQ+yu2T5sqSYuaym0M0bLcYVKI=)
                          4: 323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (hash: F3fG9mFxvglpd2enKC9y9YG4bfXdBUOav0qW+NySFMc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d4:4e:aa:82:ca:04:a8:3f:df:8a:53:33:24:32:17:f0:c4:9e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Dec  6 05:03:51 2025 GMT
            Not After : Dec  7 07:03:51 2025 GMT
        Subject: CN=A86D2ED01CB5A50C724F6AAFBADBE523DD70523F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:e4:e2:6f:fe:fa:0f:48:ca:ab:9f:2e:f0:
                    87:1b:60:d1:94:35:26:d4:c1:94:52:a1:67:cf:59:
                    fd:d9:9b:2e:93:4d:2d:83:45:c1:27:fa:c2:5f:26:
                    3d:ef:36:f8:6d:ff:47:7b:a3:d0:1b:bc:ee:dc:1a:
                    7a:3c:91:49:a6:2f:61:ce:52:4e:9c:4c:84:18:8e:
                    24:9d:8e:37:74:0b:58:69:a5:74:5e:21:21:8e:e6:
                    ce:03:0f:5e:bb:69:81:86:b4:de:2d:eb:4d:e4:5f:
                    9e:64:9b:ee:32:b0:6f:60:dc:6d:3d:4f:92:bd:ff:
                    f0:e9:c6:fa:4c:0e:c3:4f:0a:d6:34:e0:cd:71:64:
                    14:46:cc:55:65:01:e3:00:28:10:3c:24:a5:22:d0:
                    61:81:39:8e:24:e0:04:9a:a6:59:38:bf:64:1a:12:
                    57:58:00:27:51:9c:26:22:17:56:7d:b1:09:cb:61:
                    02:9a:16:f4:50:4b:c7:8d:9b:53:23:8f:37:50:80:
                    f7:99:86:ad:cc:08:39:d3:56:56:1d:2e:62:8b:1d:
                    2f:72:64:2f:bd:00:5a:64:98:b6:9f:21:b4:fc:9e:
                    5d:89:4a:a0:fd:4d:c9:71:31:80:73:76:16:ce:ff:
                    9b:64:b6:eb:7e:57:0d:e6:67:f0:9c:31:85:f0:75:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6D:2E:D0:1C:B5:A5:0C:72:4F:6A:AF:BA:DB:E5:23:DD:70:52:3F
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:7b:f7:b4:3e:18:ed:23:41:0f:58:76:a3:1d:02:be:fd:
         17:68:23:f4:5c:20:5f:a9:4d:16:01:6f:87:90:7a:38:24:87:
         21:3f:58:cb:48:9e:be:bf:88:60:f2:05:86:f1:f5:1a:7d:f4:
         63:70:ab:f1:e4:ce:3e:91:da:0b:5a:0b:aa:fc:16:74:e4:96:
         4d:23:f2:ac:a2:99:b3:20:ce:9e:e2:97:7c:ee:62:ff:ea:ae:
         1e:27:0a:99:1d:ee:ba:39:09:da:1a:c0:8b:a7:c4:e9:bd:34:
         1e:cc:d1:ae:a4:19:b9:d8:8d:33:21:91:14:4c:39:5f:cc:2a:
         33:0c:e9:0c:23:89:1d:1d:a5:c3:fe:64:ba:2f:13:a8:06:67:
         5e:b4:22:d0:5f:36:96:3c:de:18:fb:58:92:d9:9f:90:99:d3:
         c5:65:24:fe:2d:67:22:7a:aa:d4:d5:26:67:aa:74:2c:e4:1e:
         3c:dd:1b:eb:61:3b:52:b4:2c:98:ab:ef:ee:ca:03:1c:2b:cd:
         98:37:0c:18:e8:cd:13:6d:cb:99:c6:91:e2:ee:3c:c6:de:d1:
         4c:0b:85:aa:5d:26:90:f8:bd:88:7a:52:15:15:74:1d:db:17:
         7a:71:34:87:4c:91:0c:07:c8:16:6b:6e:05:85:f5:8e:92:7d:
         73:18:80:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH9ROqoLKBKg/34pTMyQyF/DEnswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4Mzg2MkQ3ODFCNzFCMTAzRTlGQThENzI2QzREMDIz
ODBBQ0VFMzAeFw0yNTEyMDYwNTAzNTFaFw0yNTEyMDcwNzAzNTFaMDMxMTAvBgNV
BAMTKEE4NkQyRUQwMUNCNUE1MEM3MjRGNkFBRkJBREJFNTIzREQ3MDUyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMOTib/76D0jKq58u8IcbYNGU
NSbUwZRSoWfPWf3Zmy6TTS2DRcEn+sJfJj3vNvht/0d7o9AbvO7cGno8kUmmL2HO
Uk6cTIQYjiSdjjd0C1hppXReISGO5s4DD167aYGGtN4t603kX55km+4ysG9g3G09
T5K9//DpxvpMDsNPCtY04M1xZBRGzFVlAeMAKBA8JKUi0GGBOY4k4ASaplk4v2Qa
EldYACdRnCYiF1Z9sQnLYQKaFvRQS8eNm1MjjzdQgPeZhq3MCDnTVlYdLmKLHS9y
ZC+9AFpkmLafIbT8nl2JSqD9TclxMYBzdhbO/5tktut+Vw3mZ/CcMYXwdWSRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqG0u0By1pQxyT2qvutvlI91wUj8wHwYDVR0j
BBgwFoAUNYOGLXgbcbED6fqNcmxNAjgKzuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQ
TEsvMS8zNTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1ODM4NjJENzgxQjcxQjEw
M0U5RkE4RDcyNkM0RDAyMzgwQUNFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQTEsvMS8z
NTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATIt797Q+GO0jQQ9YdqMdAr79F2gj9FwgX6lNFgFvh5B6OCSHIT9Yy0ievr+I
YPIFhvH1Gn30Y3Cr8eTOPpHaC1oLqvwWdOSWTSPyrKKZsyDOnuKXfO5i/+quHicK
mR3uujkJ2hrAi6fE6b00HszRrqQZudiNMyGRFEw5X8wqMwzpDCOJHR2lw/5kui8T
qAZnXrQi0F82ljzeGPtYktmfkJnTxWUk/i1nInqq1NUmZ6p0LOQePN0b62E7UrQs
mKvv7soDHCvNmDcMGOjNE23LmcaR4u48xt7RTAuFql0mkPi9iHpSFRV0HdsXenE0
h0yRDAfIFmtuBYX1jpJ9cxiAZQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:28 2025 by rpki-client