This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
File:                     6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft (raw, json)
Hash identifier:          WISGZMf8sMOzNT/RtwC7i76CXQn6qXy+uI3Adh37JU8=
Subject key identifier:   BD:A6:59:28:A8:CC:86:DF:FF:D3:20:53:CB:F5:23:A0:BB:99:BB:26
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       2C0A6B225C753C376951D055B4BA1F1542BECE3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
Manifest number:          FD
Signing time:             Sat 20 Dec 2025 15:14:56 +0000
Manifest this update:     Sat 20 Dec 2025 15:09:56 +0000
Manifest next update:     Sun 21 Dec 2025 19:13:56 +0000
Files and hashes:         1: 34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa (hash: GOP8p59Gn/XeSTbhdKbmvj+Wp9vq5nK/IHHr7kN/k7g=)
                          2: 34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa (hash: vP+ecCU3vAYlMCMiyoNgAwvoCcdkbOoZAFQnqYiC1tE=)
                          3: 323830343a363061383a3a2f33322d3332203d3e20323639313832.roa (hash: VbzwdwroSrPtSNFEnkX/NfeAHcH0g/RNK1BB3om6vyw=)
                          4: 34352e3138312e3130302e302f32322d3232203d3e20323639313832.roa (hash: /lnW2uZkdjiR+OW5KLNfe8KU3w1EhC5UhrFvdtX1d5g=)
                          5: 34352e3138312e3130332e302f32342d3234203d3e20323639313832.roa (hash: LYO47e853iUqR3chnDXl5CANbNzql12QjpUocaZXdko=)
                          6: 3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa (hash: 5YStmr0zVp+T4R7kA2sHKFSfka0HXLLDy4Y9iA8eF5Q=)
                          7: 34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa (hash: 3m2co5zvUxPMMZ5Mh7p8UKp45lCBB9Uupp++dPpvvgs=)
                          8: 6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl (hash: YxLGGfvGPy9l7vzMgZtym9UkSZiJ9M+wq8ejNd1ycUk=)
                          9: 34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa (hash: 9Vo7TMk0LsQC6eY6zJCwPIUN7QZTvoPSQbfWVYjuA30=)
                          10: 34352e3138312e3130322e302f32332d3233203d3e20323639313832.roa (hash: Wjh8Qspa4CMXIqqMSIJDyizcMyHKbONjbmUqOsjRZGY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0a:6b:22:5c:75:3c:37:69:51:d0:55:b4:ba:1f:15:42:be:ce:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Dec 20 15:09:56 2025 GMT
            Not After : Dec 21 19:13:56 2025 GMT
        Subject: CN=BDA65928A8CC86DFFFD32053CBF523A0BB99BB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:07:0d:5e:67:89:af:eb:27:0f:88:39:7e:
                    0c:ca:15:69:80:5b:90:ac:6c:7d:50:0e:31:25:29:
                    7a:38:78:54:96:5f:4d:40:cd:a2:d8:b2:dc:d5:07:
                    1a:bb:79:6b:7e:61:0f:7e:86:a4:2a:79:da:0a:31:
                    8a:47:79:fd:3d:28:ac:ee:b0:f5:7e:34:ee:6f:13:
                    ab:0f:af:53:78:18:5e:d7:73:3c:3a:03:ee:2c:47:
                    53:67:f3:33:f1:b1:b4:cc:3d:c6:48:09:48:6f:97:
                    9a:88:eb:75:2d:f8:0e:80:06:0a:94:65:75:d4:3a:
                    2c:0a:10:6f:29:b3:74:5c:ef:dd:58:2a:92:db:5e:
                    fd:e8:26:d5:82:7b:8c:a4:3f:63:49:38:ec:2e:1e:
                    5a:80:70:26:5f:57:ce:5b:b1:66:c7:61:6a:4c:2e:
                    5d:81:07:5b:73:8c:4e:19:05:6c:9f:24:30:d4:30:
                    9b:e7:ec:fb:6e:b6:89:16:35:53:51:bd:39:17:d8:
                    ed:2b:a0:d8:19:17:db:c3:40:c0:bc:6d:c3:b0:fd:
                    3d:2a:f1:96:b8:45:7d:f3:0b:54:d3:42:0f:99:e8:
                    bd:f5:87:33:98:2c:30:d1:76:4c:e9:04:70:d8:d1:
                    a0:37:27:e6:93:ab:bd:36:4a:7e:a3:0b:dd:00:94:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A6:59:28:A8:CC:86:DF:FF:D3:20:53:CB:F5:23:A0:BB:99:BB:26
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:d0:ca:cb:c7:ec:7b:1f:1b:dd:f2:9b:c2:8c:57:2e:1c:
         8a:68:df:0e:cb:63:ec:05:e6:10:4e:76:d1:d3:3e:9a:12:61:
         b0:d4:59:88:b3:ed:48:df:f3:6a:3b:8f:99:99:c5:bd:e5:de:
         83:ad:2e:07:ca:ec:b1:f9:76:a3:c2:aa:7f:18:4d:11:a5:2c:
         c8:a3:d6:f6:20:d0:5f:aa:54:8c:53:d6:d5:22:32:2d:5b:73:
         eb:3a:c1:73:ec:d5:32:55:fb:e4:e9:e7:a8:76:00:2b:be:60:
         a3:74:4c:27:3e:9d:51:0e:14:6c:d9:48:57:e7:59:79:8b:02:
         7e:28:fa:b9:9d:e4:8b:19:49:42:38:ea:8f:34:fe:fb:cc:72:
         94:95:78:8e:b1:58:34:c0:e6:fb:3d:d7:e6:58:7b:80:a6:2e:
         01:f8:64:0e:c7:e5:eb:9e:9f:d6:23:2a:99:68:32:e9:e5:3d:
         6e:fc:48:8c:7a:c5:34:f6:e8:b2:d0:68:14:da:14:c6:2c:06:
         ab:d2:b0:79:da:5d:8b:4a:a3:cf:3c:70:5e:6b:dd:ba:25:01:
         c3:6f:a5:3a:27:54:db:47:2f:85:b4:62:56:04:5d:3a:84:e7:
         f1:68:93:20:73:78:5f:e7:73:71:d5:09:9a:0d:a3:eb:72:f5:
         d9:7d:3c:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULAprIlx1PDdpUdBVtLofFUK+zj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3MUI1MjZBNDUxRTJFRUZGMEZGQ0FDRjQ2QkJDMkJD
NzREODkwNjAeFw0yNTEyMjAxNTA5NTZaFw0yNTEyMjExOTEzNTZaMDMxMTAvBgNV
BAMTKEJEQTY1OTI4QThDQzg2REZGRkQzMjA1M0NCRjUyM0EwQkI5OUJCMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zQcNXmeJr+snD4g5fgzKFWmA
W5CsbH1QDjElKXo4eFSWX01AzaLYstzVBxq7eWt+YQ9+hqQqedoKMYpHef09KKzu
sPV+NO5vE6sPr1N4GF7Xczw6A+4sR1Nn8zPxsbTMPcZICUhvl5qI63Ut+A6ABgqU
ZXXUOiwKEG8ps3Rc791YKpLbXv3oJtWCe4ykP2NJOOwuHlqAcCZfV85bsWbHYWpM
Ll2BB1tzjE4ZBWyfJDDUMJvn7PtutokWNVNRvTkX2O0roNgZF9vDQMC8bcOw/T0q
8Za4RX3zC1TTQg+Z6L31hzOYLDDRdkzpBHDY0aA3J+aTq702Sn6jC90AlPbJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvaZZKKjMht//0yBTy/UjoLuZuyYwHwYDVR0j
BBgwFoAUZXG1JqRR4u7/D/ys9Gu8K8dNiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ
cWEvMC82NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzFCNTI2QTQ1MUUyRUVG
RjBGRkNBQ0Y0NkJCQzJCQzc0RDg5MDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZcWEvMC82
NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfnbQysvH7HsfG93ym8KMVy4cimjfDstj7AXmEE520dM+mhJhsNRZiLPtSN/z
ajuPmZnFveXeg60uB8rssfl2o8KqfxhNEaUsyKPW9iDQX6pUjFPW1SIyLVtz6zrB
c+zVMlX75OnnqHYAK75go3RMJz6dUQ4UbNlIV+dZeYsCfij6uZ3kixlJQjjqjzT+
+8xylJV4jrFYNMDm+z3X5lh7gKYuAfhkDsfl656f1iMqmWgy6eU9bvxIjHrFNPbo
stBoFNoUxiwGq9Kwedpdi0qjzzxwXmvduiUBw2+lOidU20cvhbRiVgRdOoTn8WiT
IHN4X+dzcdUJmg2j63L12X08Bw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:34:10 2025 by rpki-client