This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
File:                     057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft (raw, json)
Hash identifier:          nxQckzEeFp09ncnlfGTb55Hdtr/SdPdtp1AphnFiTsU=
Subject key identifier:   1E:94:C1:35:D2:DE:9D:AF:48:DE:AC:3D:3B:CF:9D:F7:36:62:6E:33
Authority key identifier: 05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92
Certificate issuer:       /CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
Certificate serial:       41F38E778EE4DFB41812369D81DFBFB5B52323BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
Manifest number:          0196
Signing time:             Sat 06 Dec 2025 08:29:07 +0000
Manifest this update:     Sat 06 Dec 2025 08:24:07 +0000
Manifest next update:     Sun 07 Dec 2025 10:18:07 +0000
Files and hashes:         1: 3138312e3139312e3232382e302f32322d3234203d3e20323637343439.roa (hash: nSRNKvNDl/hwkalX2TxE07srB5dDHYCqYUf+heau96s=)
                          2: 323830343a343161633a3a2f33322d3333203d3e20323637343439.roa (hash: HgZU+Pll+tQJkWRhF65OLlaCYkkoIV1k5H+FgGnItKM=)
                          3: 057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl (hash: 22KmQ+4/9nEzmLcWbT3rFQX5yK5tz0DaxJfcnulaU7E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl
                          rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f3:8e:77:8e:e4:df:b4:18:12:36:9d:81:df:bf:b5:b5:23:23:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
        Validity
            Not Before: Dec  6 08:24:07 2025 GMT
            Not After : Dec  7 10:18:07 2025 GMT
        Subject: CN=1E94C135D2DE9DAF48DEAC3D3BCF9DF736626E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:91:32:73:37:7f:0b:b9:93:b2:0c:4b:f0:
                    1a:15:91:33:96:d9:39:ed:09:15:e0:04:f1:c7:9f:
                    24:c2:36:ad:d4:c7:cf:0f:49:0b:bf:f4:ef:1d:49:
                    53:44:21:87:88:cd:80:62:2f:ed:8a:1b:ac:89:d0:
                    f3:69:69:13:0a:5e:9d:38:e5:a9:d9:27:b5:ec:0c:
                    b0:c7:73:07:80:cd:24:b6:bf:89:bc:bd:fd:2f:77:
                    cf:71:80:8f:45:e9:3d:32:7a:a2:25:59:5e:2c:1f:
                    6d:07:2f:05:35:1e:b6:e1:40:a8:8d:53:21:5b:82:
                    70:6d:44:0e:b9:06:b3:42:11:6e:7f:51:3b:ac:51:
                    d1:38:48:0b:6b:d4:4a:84:ca:0a:6d:05:ae:7c:d6:
                    54:c0:a0:2c:32:35:fe:40:56:2b:15:2f:d1:92:4e:
                    32:9d:cd:a4:9f:7e:bb:d5:4d:c1:40:db:59:64:db:
                    da:81:26:2a:45:b9:13:f0:7d:51:53:95:60:41:d6:
                    34:55:9f:f3:b6:8c:94:26:1c:4c:80:f4:3c:6c:57:
                    a8:b8:38:59:b5:d0:b2:52:80:e1:8e:07:d2:04:f7:
                    1c:83:77:5a:a7:47:13:f4:4d:c2:02:1b:30:6c:c9:
                    77:37:9f:37:3f:95:c2:1f:b1:fb:48:7f:d9:03:3c:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:C1:35:D2:DE:9D:AF:48:DE:AC:3D:3B:CF:9D:F7:36:62:6E:33
            X509v3 Authority Key Identifier:
                keyid:05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:65:62:0b:f7:3a:23:e9:22:99:a6:d5:ee:46:1e:ed:bd:fe:
         82:84:25:f6:87:5f:54:91:47:53:34:08:56:84:1b:48:19:6c:
         cd:de:86:d3:49:e7:71:9d:e3:0e:79:39:f8:9d:5f:98:c7:f5:
         d6:20:5c:ac:75:48:17:48:c7:65:7e:a3:cd:b9:2c:e9:1a:a9:
         9e:78:82:bd:cb:64:04:15:da:92:ad:a1:92:23:f8:a7:94:70:
         a0:77:1b:5f:26:57:7c:8a:5e:5d:83:53:19:39:f9:51:df:ce:
         80:4e:1e:9a:db:8e:20:f0:eb:fe:6a:3c:65:ab:3f:f8:f9:f0:
         87:73:d0:10:ff:8e:cb:46:90:5f:7a:12:88:e7:e5:bc:a2:c3:
         89:89:73:a7:5c:f1:ad:78:58:3c:c1:53:66:1a:1f:b9:c2:1b:
         2e:13:61:14:76:1c:b3:33:a9:13:ef:f5:59:f8:1f:26:ed:06:
         2a:17:fe:35:de:d5:72:21:85:38:dc:b6:47:3e:04:68:28:77:
         8f:b1:8f:4f:63:89:57:53:84:d5:a1:bb:2c:5e:5e:13:c5:a2:
         fc:02:65:d4:41:13:69:4d:45:3f:d9:09:77:3d:26:db:e2:32:
         55:8e:ce:f1:6c:89:a9:26:80:36:f6:86:ca:64:6d:bb:3e:a2:
         1b:53:12:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQfOOd47k37QYEjadgd+/tbUjI78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU3RDdCNUZCNjU0QkMxQUQ3MjE0QzgwMDJDNDA3MjdC
OUY3Rjk5MjAeFw0yNTEyMDYwODI0MDdaFw0yNTEyMDcxMDE4MDdaMDMxMTAvBgNV
BAMTKDFFOTRDMTM1RDJERTlEQUY0OERFQUMzRDNCQ0Y5REY3MzY2MjZFMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd35Eyczd/C7mTsgxL8BoVkTOW
2TntCRXgBPHHnyTCNq3Ux88PSQu/9O8dSVNEIYeIzYBiL+2KG6yJ0PNpaRMKXp04
5anZJ7XsDLDHcweAzSS2v4m8vf0vd89xgI9F6T0yeqIlWV4sH20HLwU1HrbhQKiN
UyFbgnBtRA65BrNCEW5/UTusUdE4SAtr1EqEygptBa581lTAoCwyNf5AVisVL9GS
TjKdzaSffrvVTcFA21lk29qBJipFuRPwfVFTlWBB1jRVn/O2jJQmHEyA9DxsV6i4
OFm10LJSgOGOB9IE9xyDd1qnRxP0TcICGzBsyXc3nzc/lcIfsftIf9kDPNK/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHpTBNdLena9I3qw9O8+d9zZibjMwHwYDVR0j
BBgwFoAUBX17X7ZUvBrXIUyAAsQHJ7n3+ZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVoyQ0pjNEdjVDdRa2JiN1hBdVhtREtXandtbUZkd3EyUE1vV3hmR3NU
ZlIvMC8wNTdEN0I1RkI2NTRCQzFBRDcyMTRDODAwMkM0MDcyN0I5RjdGOTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1N0Q3QjVGQjY1NEJDMUFE
NzIxNEM4MDAyQzQwNzI3QjlGN0Y5OTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVoyQ0pjNEdjVDdRa2JiN1hBdVhtREtXandtbUZkd3EyUE1vV3hmR3NUZlIvMC8w
NTdEN0I1RkI2NTRCQzFBRDcyMTRDODAwMkM0MDcyN0I5RjdGOTkyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhWViC/c6I+kimabV7kYe7b3+goQl9odfVJFHUzQIVoQbSBlszd6G00nncZ3j
Dnk5+J1fmMf11iBcrHVIF0jHZX6jzbks6RqpnniCvctkBBXakq2hkiP4p5RwoHcb
XyZXfIpeXYNTGTn5Ud/OgE4emtuOIPDr/mo8Zas/+Pnwh3PQEP+Oy0aQX3oSiOfl
vKLDiYlzp1zxrXhYPMFTZhofucIbLhNhFHYcszOpE+/1WfgfJu0GKhf+Nd7VciGF
ONy2Rz4EaCh3j7GPT2OJV1OE1aG7LF5eE8Wi/AJl1EETaU1FP9kJdz0m2+IyVY7O
8WyJqSaANvaGymRtuz6iG1MS8A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:50 2025 by rpki-client