This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
File:                     A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft (raw, json)
Hash identifier:          pRNhclTWtEIKG9x7ZCWe6NJu4XD3yaIuZkKjdPYwkSU=
Subject key identifier:   F9:FF:A1:12:E0:78:B9:0B:93:73:2E:74:B1:7D:D3:70:D5:5D:BF:BA
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       15991A19A1ACFFB3CAD56C14D5368E3A1652F138
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
Manifest number:          032B
Signing time:             Sat 06 Dec 2025 05:10:00 +0000
Manifest this update:     Sat 06 Dec 2025 05:05:00 +0000
Manifest next update:     Sun 07 Dec 2025 08:20:00 +0000
Files and hashes:         1: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: ODfMmaHbZE0gEskMRFLRp3jCARbHA/qcQoXVqBzR2ik=)
                          2: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: /I5vajGjFQQ7M9n3lu24TssVjqdIlopWk+bSOlpSkFE=)
                          3: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl (hash: DY/S2mC6Sy9+FfoSIJrAfqWR/qYkw8vbWP9qmz1feVY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:99:1a:19:a1:ac:ff:b3:ca:d5:6c:14:d5:36:8e:3a:16:52:f1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Dec  6 05:05:00 2025 GMT
            Not After : Dec  7 08:20:00 2025 GMT
        Subject: CN=F9FFA112E078B90B93732E74B17DD370D55DBFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:34:70:74:4c:c1:bd:ce:30:15:3d:33:4e:
                    1b:46:37:e9:a7:5e:d9:77:cf:08:df:ec:d8:fa:68:
                    72:6d:b6:86:9d:39:02:9f:d8:e8:9c:b2:22:7b:08:
                    28:0a:b7:3c:44:67:3b:36:7c:9d:6f:20:79:5a:0c:
                    d8:63:79:63:4a:51:13:e2:f2:a0:e7:92:71:07:34:
                    d6:12:81:99:f9:97:05:fb:0d:15:89:eb:43:ea:74:
                    a8:97:3b:c4:df:de:91:b2:e6:03:87:ae:b0:3e:24:
                    0c:38:9b:50:f9:68:c4:d1:e3:79:1c:5d:34:aa:d0:
                    42:90:9f:36:90:62:8f:a0:4d:73:19:4b:1a:19:d0:
                    d7:75:83:54:d1:0a:80:28:e8:b9:95:99:3d:19:d6:
                    c0:2c:75:ab:23:3a:6b:ee:7f:cd:64:bb:b0:cd:52:
                    8e:0b:3e:64:a9:ac:45:ce:9f:f0:94:9b:ca:fe:c8:
                    83:f5:d9:07:fc:7c:62:87:54:83:7a:4f:ab:b0:be:
                    93:00:00:ba:8b:01:77:ca:0b:e1:b2:e1:3c:78:7f:
                    ee:70:25:db:95:56:b0:05:dc:c0:cb:8a:af:ec:90:
                    6d:a9:92:9f:8b:13:d4:c7:61:48:2d:f9:fb:e5:c5:
                    69:17:81:b4:7d:c1:ab:94:bb:b6:f5:27:e6:d6:c3:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:A1:12:E0:78:B9:0B:93:73:2E:74:B1:7D:D3:70:D5:5D:BF:BA
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:68:55:66:74:16:ab:c8:5e:ab:47:19:80:ee:b9:0f:46:eb:
         f6:a7:e3:7c:b8:9b:3f:17:00:2a:e6:ad:3e:d3:6c:66:0a:1f:
         26:e8:f7:76:20:b0:e7:d2:1c:b9:d7:59:f7:5a:75:ac:9a:7e:
         bf:84:38:d8:8d:a5:d7:36:e2:bb:ea:01:bf:63:7e:11:77:3a:
         87:d7:22:de:51:e0:37:69:45:5f:c1:b1:b0:91:6d:5f:e9:38:
         95:15:36:16:d6:52:2e:38:21:ce:d1:aa:fd:03:78:31:12:21:
         68:5e:f6:f9:3d:80:4a:9e:24:d4:93:05:df:a0:84:8a:44:a4:
         58:3e:d5:12:33:b9:23:30:f2:b2:1c:2e:a6:3a:ca:3e:be:93:
         44:dd:ad:ba:8a:a7:0a:f4:bc:68:a9:8d:69:9f:9d:e4:59:86:
         2f:db:b4:c4:f6:ad:e8:da:e0:7b:c0:6f:83:46:9b:26:cb:dd:
         42:c9:5a:8c:37:c5:72:78:d6:94:55:4f:d9:83:a1:44:83:b3:
         ab:34:f8:1a:73:d1:47:2f:18:8c:9e:e1:21:5b:0b:8d:bb:f4:
         96:14:bb:34:4e:8f:94:16:12:af:54:31:02:f0:05:5e:c1:76:
         8b:65:82:e0:da:08:6e:06:f6:2d:79:39:ec:b4:36:77:25:1e:
         f2:5c:53:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFZkaGaGs/7PK1WwU1TaOOhZS8TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3RTY1RkRDM0QwNTIzOEVGRTJCNEQ4REMyMkM1QjdE
RUZFN0QwMTAeFw0yNTEyMDYwNTA1MDBaFw0yNTEyMDcwODIwMDBaMDMxMTAvBgNV
BAMTKEY5RkZBMTEyRTA3OEI5MEI5MzczMkU3NEIxN0REMzcwRDU1REJGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WTRwdEzBvc4wFT0zThtGN+mn
Xtl3zwjf7Nj6aHJttoadOQKf2OicsiJ7CCgKtzxEZzs2fJ1vIHlaDNhjeWNKURPi
8qDnknEHNNYSgZn5lwX7DRWJ60PqdKiXO8Tf3pGy5gOHrrA+JAw4m1D5aMTR43kc
XTSq0EKQnzaQYo+gTXMZSxoZ0Nd1g1TRCoAo6LmVmT0Z1sAsdasjOmvuf81ku7DN
Uo4LPmSprEXOn/CUm8r+yIP12Qf8fGKHVIN6T6uwvpMAALqLAXfKC+Gy4Tx4f+5w
JduVVrAF3MDLiq/skG2pkp+LE9THYUgt+fvlxWkXgbR9wauUu7b1J+bWw5ghAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+f+hEuB4uQuTcy50sX3TcNVdv7owHwYDVR0j
BBgwFoAUpH5l/cPQUjjv4rTY3CLFt97+fQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2
RXMvMi9BNDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0N0U2NUZEQzNEMDUyMzhF
RkUyQjREOERDMjJDNUI3REVGRTdEMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFhpc3Y0MXpUV1hmYlNpZkJFdkVVUVIxRzJkNGRZNlRzTFlRcXp1UUp2RXMvMi9B
NDdFNjVGREMzRDA1MjM4RUZFMkI0RDhEQzIyQzVCN0RFRkU3RDAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh2hVZnQWq8heq0cZgO65D0br9qfjfLibPxcAKuatPtNsZgofJuj3diCw59Ic
uddZ91p1rJp+v4Q42I2l1zbiu+oBv2N+EXc6h9ci3lHgN2lFX8GxsJFtX+k4lRU2
FtZSLjghztGq/QN4MRIhaF72+T2ASp4k1JMF36CEikSkWD7VEjO5IzDyshwupjrK
Pr6TRN2tuoqnCvS8aKmNaZ+d5FmGL9u0xPat6Nrge8Bvg0abJsvdQslajDfFcnjW
lFVP2YOhRIOzqzT4GnPRRy8YjJ7hIVsLjbv0lhS7NE6PlBYSr1QxAvAFXsF2i2WC
4NoIbgb2LXk57LQ2dyUe8lxT2A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:26:05 2025 by rpki-client