This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
File:                     19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft (raw, json)
Hash identifier:          Aprft8hHabXZRl1QAVQ0QBVLV1CmemxpPHGGq8a0egw=
Subject key identifier:   E7:D5:4E:FF:80:A9:E8:6C:A7:CB:30:D3:8C:DD:9B:42:EE:F1:08:32
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       113975D5C455D8470EB1B782F43DAA2E8C9BEC0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
Manifest number:          032F
Signing time:             Fri 05 Dec 2025 15:36:38 +0000
Manifest this update:     Fri 05 Dec 2025 15:31:38 +0000
Manifest next update:     Sat 06 Dec 2025 15:57:38 +0000
Files and hashes:         1: 323830343a316362633a3a2f33342d3334203d3e203631363732.roa (hash: s1g79dL1845KkFvMy37+/sOS0W7HuGOP2o5Bcu5jiPE=)
                          2: 3137372e31312e3130302e302f32322d3232203d3e203631363732.roa (hash: 3XmuzqGkYYwtYc3f9LmVkGE1+E3Cy9pZ3wciUB2eptk=)
                          3: 3137372e31312e3130302e302f32342d3234203d3e203631363732.roa (hash: KRGsW5+5GdOUvg+9B1o3UxZixOEO7i67V/n2dVxqNV4=)
                          4: 3133312e3130382e3130302e302f32322d3232203d3e203631363732.roa (hash: MTW9Z5NMn/GsitqWYjerJdidcfu3nSWgmFrSREGcAws=)
                          5: 3137372e31312e3130322e302f32332d3233203d3e203631363732.roa (hash: eqXYU+Cf0EskKDk+rCtu3ITdPgiHJoKecNU3oGBjZ3A=)
                          6: 323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa (hash: 5Tswsw5LtxXzv2UihF+CQ4hV38Hp/I4/1HulIHFOM98=)
                          7: 3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa (hash: xK3uSwaZ6MbEZKo+ZV3fhpNpsscdktB1oCRMnKbkcVo=)
                          8: 3137372e31312e3130312e302f32342d3234203d3e203631363732.roa (hash: fif3P2KblGSC9742DeFyLU801vn7xtCRdanop6N/f3Y=)
                          9: 323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa (hash: ltgzZhUIT9HoOwlseQqtI60tPnh2d/I30qApzdd9HvA=)
                          10: 3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa (hash: z5nA7m6WGn/QXSkX60ATQBgXUW3yzKPaYy/4sBHvcys=)
                          11: 3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa (hash: yJoS4ptPCZNhJZrzpKcAGNluKjR5verpUFWQSSGRflk=)
                          12: 3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa (hash: 9ylID6de0fYzjQvUXLDML69F8xeoBWWPFB2esctZ7K8=)
                          13: 323830343a316362633a3a2f33322d3332203d3e203631363732.roa (hash: uvpONzrk/yz3w41DwZmbLX5n8qWU1SDy8fP7wXbZhwU=)
                          14: 3137372e31312e3130322e302f32342d3234203d3e203631363732.roa (hash: DKFd/+hUP/Jv95CqP74XPNhUD1Zszu0tUcebd2JnH88=)
                          15: 3137372e31312e3130332e302f32342d3234203d3e203631363732.roa (hash: C/G1fkd3CGtqVZqURcftM69Vf/GLYGZUQZN5m3vLEVY=)
                          16: 3137372e31312e3130302e302f32332d3233203d3e203631363732.roa (hash: sphsamzsN+3v6rf42OTo2kyi8M4pQtLKOm7aevrbVRI=)
                          17: 3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa (hash: aDum0iNczvjusgbY9AgJXNEipEe+IzVqmJzzKJ0j8Co=)
                          18: 323830343a316362633a343030303a3a2f33342d3334203d3e203631363732.roa (hash: xb/G6HhIVSO7m3+3eLTVZYp7oMrR0aCtYXIDfwY0VwU=)
                          19: 19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl (hash: VVlqeDBItXErNFZpWJGL3KX4/8C/gToa37m8BRlnDJw=)
                          20: 323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa (hash: nhX4B8aSDA8N3nChVqRois6aRPNIMOFYJ3V9PMCJyK8=)
                          21: 3133312e3130382e3130302e302f32332d3233203d3e203631363732.roa (hash: bNfBDWYF0LHVedEiO74pYs6hbzMs3J0n/oA+iiyrX0c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:75:d5:c4:55:d8:47:0e:b1:b7:82:f4:3d:aa:2e:8c:9b:ec:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Dec  5 15:31:38 2025 GMT
            Not After : Dec  6 15:57:38 2025 GMT
        Subject: CN=E7D54EFF80A9E86CA7CB30D38CDD9B42EEF10832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:34:ab:32:31:3d:3f:09:1b:2e:3a:58:4a:
                    0d:7f:b9:4d:09:71:f7:15:0d:62:0e:9d:63:ce:38:
                    1e:c4:44:bf:09:b7:b1:10:30:cf:a4:f8:e9:4c:2d:
                    eb:82:40:b1:eb:20:b7:67:db:e1:f8:aa:fc:1c:8a:
                    b8:3d:e7:3c:cb:64:5d:c3:07:e1:a4:f1:1e:85:17:
                    c1:8d:d4:27:8d:c3:20:6a:2c:c3:18:07:d6:3e:c1:
                    d2:4b:92:44:16:62:f1:8c:45:2c:55:6a:6b:97:c4:
                    71:7f:de:4a:7e:31:4a:f7:fd:a3:74:33:81:66:2e:
                    18:bf:d6:4b:2a:cb:00:ad:f9:7b:4e:73:b7:47:b1:
                    69:a4:d5:e2:98:98:6d:2c:a1:22:af:a1:19:5a:86:
                    6f:91:d6:e5:5c:f1:9e:9c:95:8b:0e:b0:68:b1:2a:
                    3f:36:61:bc:e0:29:d1:ef:e4:93:14:16:0c:2a:39:
                    1d:5d:80:d9:df:9d:39:bb:15:bc:d0:38:43:96:0f:
                    fe:fa:9a:e2:bd:9b:3a:9f:76:11:a1:90:a4:a7:59:
                    1c:5c:87:65:1a:ba:41:24:72:ba:55:4c:e4:09:20:
                    56:71:6e:22:59:aa:01:f7:7d:30:51:df:e2:4f:ca:
                    98:83:40:12:22:5b:eb:d1:29:cb:4a:98:4b:90:2e:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D5:4E:FF:80:A9:E8:6C:A7:CB:30:D3:8C:DD:9B:42:EE:F1:08:32
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a9:1a:69:66:aa:51:7f:bf:36:62:96:4f:4f:4a:8b:b8:1a:
         7d:2d:0d:63:3f:6c:6d:c3:a7:d2:43:5b:cd:29:ce:f5:1a:96:
         81:0d:c0:3e:0e:9f:22:2c:f5:65:f7:0a:42:2c:94:5b:58:3c:
         a2:e1:67:cc:97:06:92:d1:6b:b2:07:78:83:a9:87:f3:b8:7f:
         5a:94:09:0c:9b:e4:64:4a:35:7c:f8:3e:e9:16:5d:b3:a4:bc:
         43:77:d3:a9:9a:74:a0:5d:ce:42:e9:4b:1f:28:5a:e1:4c:58:
         50:41:fd:5e:fe:f8:6b:29:a5:ae:e7:af:16:ed:33:b0:d6:af:
         ee:a9:22:ff:ac:de:4d:2c:97:58:f4:a6:a6:75:7c:2d:9a:25:
         98:5e:2f:69:6f:99:30:3a:b3:aa:cb:1f:ab:4b:8d:37:95:43:
         4f:b2:4e:6f:d6:a7:b0:bf:89:ce:dc:bd:d3:d3:df:55:d3:92:
         a8:0c:ed:b8:95:f7:71:62:92:62:95:c9:d4:6f:33:be:17:d7:
         b2:7b:e7:93:9a:ba:52:41:b4:81:8f:0e:b5:30:e0:c2:14:cb:
         26:18:c4:a9:f6:d6:88:91:24:1a:1f:c3:8c:07:af:9a:4e:04:
         13:cc:a6:9c:00:84:ff:d9:b9:6c:06:1a:ef:a0:c8:b2:b1:7b:
         29:d1:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:56:42 2025 by rpki-client