This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
File:                     585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft (raw, json)
Hash identifier:          nQdnqiSc+X7zJ0VGLcnuptN9LyjlQNOE3DJOxrpp+jA=
Subject key identifier:   65:0F:0C:68:E4:82:58:38:4B:C7:61:55:28:EA:14:77:C0:8E:8B:BB
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       5F2B484F9B96AB0629F828048CF87133BA850D4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
Manifest number:          032F
Signing time:             Sat 06 Dec 2025 01:33:35 +0000
Manifest this update:     Sat 06 Dec 2025 01:28:35 +0000
Manifest next update:     Sun 07 Dec 2025 02:50:35 +0000
Files and hashes:         1: 323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (hash: IDneDWzTyr5SgSIAENGnHT6t+yatkXYogvFZdoAk/uI=)
                          2: 323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (hash: 7VYb9eVMn/JdVnewRd3uN1ztGHf7FqVnTEIvA9WR40g=)
                          3: 323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (hash: aC08Xc+AWU2Gmn9FKnzrvxdKmO26eHCpZULre8VMh/I=)
                          4: 323830343a363061303a3a2f33342d3334203d3e20323639313831.roa (hash: 6x8+o76rwpnYtElNSxkW/KyDWMmXx+okvMIMdSvdlNI=)
                          5: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl (hash: YcnduR+9NYCfa84fjqPP4KASw95l4PftmYhmrKgRE4I=)
                          6: 34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa (hash: 5cTe/r7IooW1P31zdsmcHlinxnkNAFe2rsZjLal0A/M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:48:4f:9b:96:ab:06:29:f8:28:04:8c:f8:71:33:ba:85:0d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Dec  6 01:28:35 2025 GMT
            Not After : Dec  7 02:50:35 2025 GMT
        Subject: CN=650F0C68E48258384BC7615528EA1477C08E8BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:9a:e3:2f:cd:95:e7:73:f5:06:7f:4c:53:
                    9a:11:b0:6a:e6:d3:1f:e1:bd:50:8e:98:7f:3a:26:
                    58:81:92:44:de:1e:78:d6:f8:36:08:98:b5:aa:3c:
                    a6:ee:cb:9f:72:1f:42:30:9b:cd:a4:a2:8e:a2:91:
                    85:73:3c:b4:1e:dd:ab:1e:6b:18:fd:5d:31:90:82:
                    7f:45:27:94:e4:0c:98:7c:28:b5:f5:69:70:ab:aa:
                    9b:0e:ee:68:fd:8b:aa:07:28:b5:c5:04:c9:75:f4:
                    74:d1:36:27:2c:cd:2b:a6:6b:b2:1c:9a:cd:6c:6b:
                    c6:a3:ee:27:69:36:e0:a9:ac:f4:0f:65:04:5a:a8:
                    fb:99:07:7f:07:1e:e4:4f:fb:ac:c0:0f:54:3d:d5:
                    39:62:40:9f:b4:74:73:43:42:3e:a6:ab:3e:63:03:
                    c1:b0:4c:1b:9a:fc:89:66:7f:9a:e0:68:bf:0f:4e:
                    30:9c:91:80:55:ef:dd:75:0d:af:22:f5:1a:80:a0:
                    a1:c9:d4:d2:2f:65:3e:35:55:06:5b:63:e8:6a:dd:
                    45:2b:ca:fa:51:50:5f:11:df:ef:3c:7c:80:00:79:
                    49:be:c5:e3:a2:d2:4f:1d:55:a2:48:e1:dd:fc:fc:
                    55:5c:bd:f9:75:bd:a5:93:59:e7:39:38:20:67:2f:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:0C:68:E4:82:58:38:4B:C7:61:55:28:EA:14:77:C0:8E:8B:BB
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:fb:c9:8e:f3:d2:0c:cf:3d:8f:f2:4e:7e:2c:c8:47:c5:2d:
         c3:5a:c1:2e:5d:b0:19:3e:a9:30:ba:63:52:5d:d2:ce:bb:2c:
         56:77:03:c1:d5:98:ac:35:f3:36:b3:89:a0:f9:93:00:8e:cd:
         9a:3e:91:b0:b5:57:c1:1d:08:70:e1:cb:c3:77:41:de:99:f0:
         6f:0a:82:23:f1:ae:c6:51:2b:bf:50:d4:b5:98:0c:c3:8b:af:
         25:57:e0:e6:b8:ba:ae:fc:05:49:d0:10:55:26:8a:b4:a2:a0:
         cf:81:6f:65:bd:84:2f:f4:2a:68:20:02:89:a1:9e:11:ce:c1:
         48:f0:9d:4c:55:72:0b:45:88:c5:68:c2:69:6f:52:83:02:30:
         06:48:40:04:c8:e4:01:38:10:cc:9b:09:aa:36:08:83:e4:07:
         36:46:8e:7a:78:89:f0:f0:0c:d9:33:58:ec:d8:41:64:08:02:
         fe:aa:3b:a6:49:64:48:24:7c:35:a1:aa:ce:0f:f7:ab:f4:5a:
         cb:eb:be:74:d0:44:90:b3:fe:93:d9:4f:18:75:ef:9f:08:7a:
         18:d0:3e:7f:47:b2:d9:ab:85:d7:41:13:0f:c8:3a:a4:6b:b8:
         f9:ce:a4:16:a0:1b:12:e0:f0:74:25:4e:21:19:e2:84:33:74:
         4e:0c:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:54 2025 by rpki-client