This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
File:                     0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft (raw, json)
Hash identifier:          ZK90htvt2APmjIe6Qu+63nTIKLJHtgvF9Ej7HITPX8U=
Subject key identifier:   BD:3F:14:10:78:CB:33:AC:A9:2D:B4:0F:0B:AC:61:F5:CC:15:10:57
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       2B552B4BFA80EEEBAE2085A667793D8FB7D8C4D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
Manifest number:          B3
Signing time:             Sat 06 Dec 2025 03:08:33 +0000
Manifest this update:     Sat 06 Dec 2025 03:03:33 +0000
Manifest next update:     Sun 07 Dec 2025 05:48:33 +0000
Files and hashes:         1: 0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl (hash: wgDAmQf/XdA8MIjYY3Xinl4CIB+QMcwzSr4ifXu9nqM=)
                          2: 3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa (hash: rEVRUj+OMOr8ex1XJsMDs+aNuh4znkXFky0YVDXzhcQ=)
                          3: 3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa (hash: nsUixGFLPigSeWiVkcLSWl5yZBG2+UKFwNjxQ5cacTY=)
                          4: 323830343a373734343a3a2f33322d3332203d3e20323731313636.roa (hash: xj0HXmCi3+nuO9evTuFxKMPwLUzzhbRjUwq9ukBX1Lc=)
                          5: 323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa (hash: 9c/Vv3pmZ5CXw4NUWRozYcmOTc1afAQ0zUfVqRBq+Pk=)
                          6: 3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa (hash: gC1Zx88Oj+ffmPgCX94pUVv95lctnZo7+2qZD2k3PjE=)
                          7: 323830343a373734343a3a2f33332d3333203d3e20323731313636.roa (hash: Tr39WnlN4clRonCBNxfsmOX5oBu6rb58TAmNgtPvMZE=)
                          8: 3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa (hash: 6i45KHUsx3IuMwgHojvOYh0ct4E7sfM5OUZ8hxW9JxQ=)
                          9: 3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa (hash: KTcAkgeYiA11ExQN7cxBo03hZTlRZpRR0UNVqAdvMzI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:55:2b:4b:fa:80:ee:eb:ae:20:85:a6:67:79:3d:8f:b7:d8:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Dec  6 03:03:33 2025 GMT
            Not After : Dec  7 05:48:33 2025 GMT
        Subject: CN=BD3F141078CB33ACA92DB40F0BAC61F5CC151057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:00:65:41:77:54:91:3f:b3:2b:e2:ed:82:
                    12:70:0c:47:85:37:cf:ce:90:04:0e:4a:1e:43:3e:
                    02:48:7e:10:2f:a0:1e:d0:bd:ec:55:b1:22:00:79:
                    58:93:38:dc:22:20:61:7c:b9:7a:a9:ff:68:31:4b:
                    94:46:ec:23:94:90:4a:9d:f9:52:d6:82:71:1b:55:
                    0d:b2:fd:46:9a:1e:00:19:1b:80:8c:fd:7a:13:5c:
                    1d:0c:d1:2e:71:72:ff:a4:49:c9:4b:33:d2:3f:34:
                    85:1c:a4:3b:d2:32:03:43:8a:50:d0:5f:04:cb:ea:
                    65:b9:ac:00:bf:07:14:04:33:8f:66:d2:5c:89:2d:
                    20:ee:e8:4d:74:f2:1e:3d:2e:0e:61:39:f6:7a:2e:
                    1d:4e:07:a8:52:4c:48:95:61:90:82:d8:28:c7:90:
                    a3:c1:3b:ea:dd:d4:ba:22:73:dd:a3:7b:5c:38:3c:
                    3c:df:9d:aa:9f:fc:09:32:78:ca:21:14:a4:0a:8d:
                    91:92:73:0f:8b:ab:30:86:77:c7:69:8f:4f:8a:3e:
                    41:5c:07:b3:f3:09:11:fb:c0:87:48:d3:9a:e9:db:
                    86:b0:30:97:30:33:a2:2e:db:b0:25:07:9f:17:33:
                    47:18:78:11:8b:4e:e5:90:ca:c2:e0:b3:98:70:5d:
                    50:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:14:10:78:CB:33:AC:A9:2D:B4:0F:0B:AC:61:F5:CC:15:10:57
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:98:63:47:06:33:db:02:b9:84:3e:5e:b4:e4:c0:09:f5:b6:
         71:8d:dd:27:f7:80:e5:f1:ec:03:2d:87:38:0d:7f:4e:32:b5:
         78:8f:14:80:cc:45:c4:20:3a:e1:55:db:2a:a6:20:6d:e3:28:
         a8:52:e6:12:e3:d7:1f:86:29:0b:c5:07:e8:d6:b1:16:cf:00:
         75:cb:ab:93:bd:a9:c0:f1:4e:82:cc:7d:42:bc:84:0c:3c:13:
         f3:46:e0:4f:55:35:49:c4:86:ed:14:0b:91:62:fd:63:99:2f:
         04:19:5f:2f:dc:84:b9:a1:9f:fc:5f:ee:a2:fe:93:d6:62:7a:
         87:3e:c1:9c:83:5a:e3:39:5e:8d:5c:43:29:07:6b:03:af:e1:
         bd:d5:ac:a8:cb:c6:36:1e:48:64:26:5f:0b:b7:e9:04:d8:a7:
         28:cc:84:fc:f1:90:ae:48:65:d6:a2:1c:94:b8:e6:e1:b2:11:
         54:da:83:44:5a:e9:a7:e7:54:b1:70:d4:8c:e8:50:a7:0c:d7:
         bf:95:53:e0:ba:fd:a1:9b:d0:9e:d4:9b:69:9e:8e:db:8b:83:
         54:0a:72:67:de:3f:40:7d:e1:f1:f5:3d:93:0b:e7:17:c0:8e:
         1d:9a:a9:80:b5:b8:30:41:86:b1:75:89:ee:75:27:23:c0:ac:
         b9:a2:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:42:22 2025 by rpki-client