This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
File:                     F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft (raw, json)
Hash identifier:          2/rlha7+/FY2DcYteOottj08UtrPBhLmGCTwvKvSZ6o=
Subject key identifier:   C6:C4:59:AD:12:11:55:2C:CF:38:BA:E9:D0:D4:96:AF:30:62:C5:2A
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       7790C9295CDA34939D4669C133F663AB4EE74A8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
Manifest number:          0272
Signing time:             Fri 05 Dec 2025 14:55:13 +0000
Manifest this update:     Fri 05 Dec 2025 14:50:13 +0000
Manifest next update:     Sat 06 Dec 2025 16:38:13 +0000
Files and hashes:         1: AS264352.roa (hash: PNkz6krXGkO5/xDFMTb0JCPbyeLANaEk+g1yCS2a5oE=)
                          2: AS262726.roa (hash: qITL8Gn3VDSA6aoF+PRgXmMC9uKDklviECGzSSdOHrQ=)
                          3: F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl (hash: ByY0mr7YKCH3PHvtashK9ZYDE2hGKHXhC0lieauJIlM=)
                          4: AS28220.roa (hash: ispvW1UO8ydpuWTkWjne361RdLET8qbiMrOOz0JKwzY=)
                          5: AS53059.roa (hash: s+LmQbhopeP1NjqUoYdepm9wJK8I7ZUZSHAnD+AnSHE=)
                          6: AS65421.roa (hash: 7Vbeor9m6+dzt12Qpm3uCT7kahvrt4HBovBC5ZDDDd4=)
                          7: AS262493.roa (hash: ZhmzsiFfQgQjm4qOgTsB6Hacn5+bSGAoYc4dphEju5w=)
                          8: AS53054.roa (hash: tBVOE5N/dng+wg40JTvvEkVEVH+V6P707fgE4QZEmFA=)
                          9: AS53224.roa (hash: OJqA0lZpH+T3qq0CkGXdAQI1pCzajmI6h/xqXRgSt/Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 16:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:90:c9:29:5c:da:34:93:9d:46:69:c1:33:f6:63:ab:4e:e7:4a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Dec  5 14:50:13 2025 GMT
            Not After : Dec  6 16:38:13 2025 GMT
        Subject: CN=C6C459AD1211552CCF38BAE9D0D496AF3062C52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:6c:cc:d3:b3:22:34:43:d2:97:26:a3:7b:
                    5d:be:28:bb:59:3a:b6:c6:a3:27:ce:32:db:fc:31:
                    f4:29:3d:b7:f6:d8:49:e6:ed:b2:28:af:a5:00:3e:
                    da:0a:66:b6:90:41:c4:3f:3f:d9:b5:7d:33:61:70:
                    36:b8:02:14:f6:07:ba:1b:4d:61:17:75:a8:74:40:
                    da:a5:39:ca:9a:b7:23:d8:b2:78:f8:b4:5c:74:aa:
                    65:16:52:73:50:06:78:ed:93:3b:a3:78:05:bf:26:
                    5b:d0:81:09:e9:22:00:28:6e:f6:18:26:1a:dd:d3:
                    f7:30:1b:93:37:c0:f2:b7:37:9f:ee:8a:6e:75:57:
                    8c:35:21:5a:3d:a8:59:42:ff:22:7a:d7:58:4f:cd:
                    14:76:ea:6d:95:0f:c3:fc:0f:2e:9c:7f:69:26:31:
                    a8:25:b8:e6:f9:bd:6c:4d:1b:42:4a:fb:03:a1:3a:
                    69:3b:40:43:37:9f:22:7c:50:53:98:74:08:e7:f1:
                    6e:01:ca:59:a2:9a:21:2b:66:3d:f1:63:40:89:96:
                    f8:a7:58:07:5e:91:06:23:c5:7a:f5:26:6c:af:28:
                    b9:53:2e:a9:cf:38:c8:18:24:57:86:8e:41:01:de:
                    19:e0:56:aa:b7:8e:a6:90:c4:d5:ff:9f:17:14:73:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C4:59:AD:12:11:55:2C:CF:38:BA:E9:D0:D4:96:AF:30:62:C5:2A
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:da:91:d9:e7:d6:46:81:fe:39:b8:bd:46:d9:7e:70:5c:
         be:bf:e2:27:ad:a5:21:e1:13:bc:09:aa:3a:01:b9:c5:9d:f2:
         75:dc:16:20:f9:ae:18:9c:fb:8a:61:bb:61:db:38:5a:ee:4c:
         1a:25:f5:d6:b0:1d:d4:95:7f:3f:ef:4f:fe:2b:26:c3:29:83:
         00:3e:89:d7:5f:3c:07:6f:65:fc:c2:9f:58:1e:53:f3:df:45:
         29:ad:62:1a:99:b8:de:fa:1e:1a:5b:a5:c1:9a:77:a3:cf:bf:
         78:de:bf:b0:39:de:5d:5c:17:7a:86:a0:25:86:d5:7b:4f:e5:
         94:3b:e3:15:d8:fa:89:b0:e8:52:f2:90:1b:50:ef:8b:ed:7f:
         2e:5a:28:dd:09:1b:0a:eb:3c:90:db:01:18:17:8d:2b:3d:44:
         79:79:62:3f:be:31:66:67:61:7d:cb:5e:2f:69:15:34:88:94:
         17:72:d5:2c:5b:3b:91:4a:0d:38:18:a5:6d:73:46:e4:b2:39:
         f1:dc:d9:18:e5:b6:81:91:2c:68:17:8a:1a:61:6b:e1:b3:9c:
         4e:c6:19:70:0a:73:4a:66:68:51:30:ea:8d:74:aa:63:f7:d0:
         10:9e:59:42:f4:a2:31:91:5b:fb:17:ac:cb:a5:dd:ad:b4:ab:
         3d:29:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:12 2025 by rpki-client