This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft
File:                     71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft (raw, json)
Hash identifier:          A6cz+QzZTwMO+hrxdxDqZa079vr17sMFuNwPsdvTRQo=
Subject key identifier:   01:37:43:56:9E:A7:DA:EA:4D:6E:DF:BE:B8:F1:EB:ED:3C:2B:36:66
Authority key identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D
Certificate issuer:       /CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
Certificate serial:       58BA0026A3CF60DA4220C8F8553B598ECC900709
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft
Manifest number:          012E
Signing time:             Fri 19 Dec 2025 01:05:47 +0000
Manifest this update:     Fri 19 Dec 2025 01:00:47 +0000
Manifest next update:     Sat 20 Dec 2025 03:24:47 +0000
Files and hashes:         1: 3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa (hash: gvEJljraD5i5DYt7riXmbK6ZqDmqjfGWRy8ciKwDEjE=)
                          2: 71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl (hash: W9DK7xez4d28c3G3UTKAWA5DGba6XWEiiWQ69JmBGPw=)
                          3: 323830343a346532343a3a2f33322d313238203d3e20323638323432.roa (hash: iriErFrF/Fh1gGJ2dIXmDd94jeYSIY57aNo8TMul1vM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl
                          rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 03:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ba:00:26:a3:cf:60:da:42:20:c8:f8:55:3b:59:8e:cc:90:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
        Validity
            Not Before: Dec 19 01:00:47 2025 GMT
            Not After : Dec 20 03:24:47 2025 GMT
        Subject: CN=013743569EA7DAEA4D6EDFBEB8F1EBED3C2B3666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:e3:32:8d:5b:92:b3:1b:69:3f:74:49:f8:
                    43:d3:e9:09:55:e4:05:a6:00:57:ca:ad:1f:84:ce:
                    2a:1b:5e:a8:3e:eb:9c:ae:c3:8b:d9:52:ff:6d:69:
                    12:68:d7:30:a9:d4:25:0a:ae:81:8d:99:55:e6:d6:
                    9a:30:e9:50:1b:09:2e:40:26:a6:17:67:49:cf:a7:
                    8a:70:32:69:c5:f9:24:64:ee:08:b6:af:3c:4b:7a:
                    c1:82:81:8e:5a:90:d5:2d:0f:cf:d6:59:ed:80:28:
                    eb:86:b9:2b:30:29:0c:0a:0c:0f:8b:28:72:ca:29:
                    f5:2e:e4:03:e8:cc:79:33:b3:4d:b6:3d:ba:69:e5:
                    ca:4f:2f:97:87:ab:95:51:60:92:b7:42:9a:45:68:
                    1b:7f:70:d4:87:00:55:c7:0c:e0:13:79:63:41:84:
                    31:21:5d:4c:b4:11:3a:64:3a:0e:9f:ad:b6:0a:7e:
                    37:7c:c8:ef:82:b3:42:0c:5b:c1:3e:8c:07:15:45:
                    b7:51:54:0a:9d:40:cb:0f:4e:c0:40:78:07:e1:e1:
                    d8:93:0b:65:33:b4:27:7f:5c:c9:f9:7b:a5:7c:91:
                    b0:1f:fc:06:91:a8:fd:ac:05:ae:85:81:d0:f9:dc:
                    ef:64:f2:3a:0e:96:6e:85:16:38:55:86:b6:97:e1:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:43:56:9E:A7:DA:EA:4D:6E:DF:BE:B8:F1:EB:ED:3C:2B:36:66
            X509v3 Authority Key Identifier:
                keyid:71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:23:74:b4:39:01:6b:f4:85:13:68:0c:a9:2f:ee:62:af:94:
         48:48:24:3d:0d:23:40:ca:9e:3f:0c:97:5c:e1:22:e5:fa:f5:
         a4:d3:e8:02:d6:11:35:3c:77:18:cf:ff:a6:81:6f:5f:37:84:
         f5:cd:c4:26:d9:82:e9:51:bc:cf:ae:1d:3c:b9:e9:bb:71:66:
         d1:95:88:50:e1:92:2a:8c:60:78:e1:14:f3:7b:db:92:da:8b:
         e7:63:a3:75:e3:08:68:b3:da:4a:75:bd:9d:cc:3c:12:a3:03:
         da:7c:c7:9c:87:09:d5:0a:af:4d:e9:2d:0d:b3:31:40:56:b4:
         14:7c:7b:86:0c:d7:a1:81:12:93:ce:23:fb:ab:ba:14:e8:11:
         86:f7:b8:dd:eb:17:7f:cb:8c:0e:99:5b:68:88:4d:69:22:ef:
         a8:a6:a9:4f:03:84:c7:fa:24:07:bf:3d:fa:02:3c:f2:3d:03:
         4f:d5:74:c1:c3:4b:f6:6a:6d:84:83:5a:29:38:57:a0:f0:73:
         3b:b0:c9:dc:8c:90:c4:01:83:a7:52:c9:d6:b3:25:71:09:6a:
         87:a2:1b:15:e2:9d:40:36:54:b5:ee:43:7a:37:d7:3c:3a:6a:
         00:c7:c2:f2:d4:0f:49:9d:bc:ac:30:13:0a:a3:0d:78:9e:4d:
         a2:08:fc:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWLoAJqPPYNpCIMj4VTtZjsyQBwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFENjAzMkRCRUIzNTc1MkQwMjIzREMzOTFBREVEQUQw
QUUzQkM1RDAeFw0yNTEyMTkwMTAwNDdaFw0yNTEyMjAwMzI0NDdaMDMxMTAvBgNV
BAMTKDAxMzc0MzU2OUVBN0RBRUE0RDZFREZCRUI4RjFFQkVEM0MyQjM2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkuMyjVuSsxtpP3RJ+EPT6QlV
5AWmAFfKrR+EziobXqg+65yuw4vZUv9taRJo1zCp1CUKroGNmVXm1pow6VAbCS5A
JqYXZ0nPp4pwMmnF+SRk7gi2rzxLesGCgY5akNUtD8/WWe2AKOuGuSswKQwKDA+L
KHLKKfUu5APozHkzs022Pbpp5cpPL5eHq5VRYJK3QppFaBt/cNSHAFXHDOATeWNB
hDEhXUy0ETpkOg6frbYKfjd8yO+Cs0IMW8E+jAcVRbdRVAqdQMsPTsBAeAfh4diT
C2UztCd/XMn5e6V8kbAf/AaRqP2sBa6FgdD53O9k8joOlm6FFjhVhraX4eddAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUATdDVp6n2upNbt++uPHr7TwrNmYwHwYDVR0j
BBgwFoAUcdYDLb6zV1LQIj3Dka3trQrjvF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWQ0azhKTVRTa1NOWHV5R1RzWTNIc21iZXhVdVZ0U0hqRVM1N29GaGNF
V00vMC83MUQ2MDMyREJFQjM1NzUyRDAyMjNEQzM5MUFERURBRDBBRTNCQzVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDYwMzJEQkVCMzU3NTJE
MDIyM0RDMzkxQURFREFEMEFFM0JDNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWQ0azhKTVRTa1NOWHV5R1RzWTNIc21iZXhVdVZ0U0hqRVM1N29GaGNFV00vMC83
MUQ2MDMyREJFQjM1NzUyRDAyMjNEQzM5MUFERURBRDBBRTNCQzVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQiN0tDkBa/SFE2gMqS/uYq+USEgkPQ0jQMqePwyXXOEi5fr1pNPoAtYRNTx3
GM//poFvXzeE9c3EJtmC6VG8z64dPLnpu3Fm0ZWIUOGSKoxgeOEU83vbktqL52Oj
deMIaLPaSnW9ncw8EqMD2nzHnIcJ1QqvTektDbMxQFa0FHx7hgzXoYESk84j+6u6
FOgRhve43esXf8uMDplbaIhNaSLvqKapTwOEx/okB789+gI88j0DT9V0wcNL9mpt
hINaKThXoPBzO7DJ3IyQxAGDp1LJ1rMlcQlqh6IbFeKdQDZUte5DejfXPDpqAMfC
8tQPSZ28rDATCqMNeJ5Nogj8KQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 05:44:39 2025 by rpki-client