This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
File:                     041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json)
Hash identifier:          eOlEYowvJnRQtUHrUIQw6WcHK+tZHGoV2yiqo0zeaHs=
Subject key identifier:   49:33:A6:E0:73:A7:25:24:EE:6A:26:B5:F3:E7:50:6F:E6:6C:9E:1B
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Certificate issuer:       /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial:       6B569B1C910E7897CC7EA85BD02874F275B4597F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
Manifest number:          63
Signing time:             Sat 06 Dec 2025 00:05:44 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 01:35:44 +0000
Files and hashes:         1: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=)
                          2: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: 0mCg2umQo0l/M9Ez06U3FAkfli0GMYL7wj0W58KHI9k=)
                          3: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:56:9b:1c:91:0e:78:97:cc:7e:a8:5b:d0:28:74:f2:75:b4:59:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
        Validity
            Not Before: Dec  6 00:00:44 2025 GMT
            Not After : Dec  7 01:35:44 2025 GMT
        Subject: CN=4933A6E073A72524EE6A26B5F3E7506FE66C9E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0a:1f:95:6d:5f:8e:4a:b6:d8:81:42:79:bc:
                    e7:49:f4:30:e6:18:b8:7d:73:d7:b8:c2:6b:2e:2b:
                    40:1c:d2:51:24:02:fd:f6:d3:60:cf:b0:27:85:2a:
                    23:2d:d1:e0:e4:1b:3a:7b:09:26:14:04:a3:b6:1e:
                    59:d7:f7:17:0d:7a:a1:a8:28:ce:32:74:0d:7a:6a:
                    4c:30:ae:0b:7a:96:08:14:6d:da:d0:a7:25:05:51:
                    12:ae:d9:4e:8c:94:b3:42:2b:30:e0:83:ed:43:fd:
                    07:33:1d:3c:b8:b5:3f:15:0c:bb:9a:f1:1f:3f:18:
                    91:6c:5a:9c:87:62:2e:5e:f8:ca:1e:24:0d:2e:82:
                    97:f0:3f:55:d3:0c:56:79:19:66:de:92:4d:6c:a1:
                    ad:92:fd:6d:1c:60:8e:9c:1b:e1:13:34:40:16:03:
                    af:f0:84:71:a9:8d:3e:93:7e:c4:d2:d1:45:a7:53:
                    2d:33:03:2e:9f:d9:cf:98:76:2e:cd:54:5b:fe:50:
                    15:df:01:f3:ea:8d:96:81:6e:90:0f:8c:80:a9:ce:
                    52:16:08:0e:d8:55:81:24:7c:c5:bb:21:18:3b:e1:
                    1d:e0:1d:e8:bd:62:d7:01:a0:c3:fb:5d:8d:21:62:
                    61:31:bc:24:f5:51:61:17:36:0c:3b:b6:45:06:57:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:33:A6:E0:73:A7:25:24:EE:6A:26:B5:F3:E7:50:6F:E6:6C:9E:1B
            X509v3 Authority Key Identifier:
                keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:34:bd:f2:09:34:06:43:be:7f:e4:fe:2d:4d:ec:52:8e:f3:
         21:0b:49:d3:e9:fc:a0:62:98:44:85:12:73:41:14:f4:0c:76:
         bf:87:cd:8c:db:22:17:82:a0:78:35:c1:32:9e:c2:59:d2:f8:
         2c:48:95:a3:b5:c8:1f:ac:18:1c:76:f7:d2:c2:4e:45:f0:10:
         40:bd:67:69:21:18:a1:84:5d:f4:94:0b:83:7c:41:e0:3a:c3:
         fd:b3:01:94:89:38:69:c1:26:bf:d9:83:0b:68:11:69:c2:f7:
         ad:9e:b8:24:bf:5a:c7:9e:43:e6:b0:d5:cb:2d:9e:dd:e7:e3:
         55:99:25:f3:9c:e0:08:26:49:74:25:c2:d1:71:c1:66:1e:9b:
         a5:c4:11:3b:83:64:dc:81:6e:cf:a6:1b:fc:1b:c7:f8:f9:14:
         80:6f:cb:b1:25:69:44:67:9e:85:3f:99:f8:f5:82:9e:1c:75:
         f1:5e:9c:a7:00:5c:34:fd:d6:6b:b1:48:f4:02:37:d8:97:f2:
         36:1d:8d:62:bb:58:b9:42:d4:fa:9b:10:18:a8:71:54:02:79:
         2f:cf:02:d9:f5:73:84:31:91:28:8d:44:71:54:2d:ea:27:f7:
         86:f6:93:86:fb:a9:0a:e8:aa:f9:0c:5e:f5:0d:44:4b:43:e0:
         f9:0a:8a:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa1abHJEOeJfMfqhb0Ch08nW0WX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG
REUwMEJFMzAeFw0yNTEyMDYwMDAwNDRaFw0yNTEyMDcwMTM1NDRaMDMxMTAvBgNV
BAMTKDQ5MzNBNkUwNzNBNzI1MjRFRTZBMjZCNUYzRTc1MDZGRTY2QzlFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhCh+VbV+OSrbYgUJ5vOdJ9DDm
GLh9c9e4wmsuK0Ac0lEkAv3202DPsCeFKiMt0eDkGzp7CSYUBKO2HlnX9xcNeqGo
KM4ydA16akwwrgt6lggUbdrQpyUFURKu2U6MlLNCKzDgg+1D/QczHTy4tT8VDLua
8R8/GJFsWpyHYi5e+MoeJA0ugpfwP1XTDFZ5GWbekk1soa2S/W0cYI6cG+ETNEAW
A6/whHGpjT6TfsTS0UWnUy0zAy6f2c+Ydi7NVFv+UBXfAfPqjZaBbpAPjICpzlIW
CA7YVYEkfMW7IRg74R3gHei9YtcBoMP7XY0hYmExvCT1UWEXNgw7tkUGV64ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSTOm4HOnJSTuaia18+dQb+ZsnhswHwYDVR0j
BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz
ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w
NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAETS98gk0BkO+f+T+LU3sUo7zIQtJ0+n8oGKYRIUSc0EU9Ax2v4fNjNsiF4Kg
eDXBMp7CWdL4LEiVo7XIH6wYHHb30sJORfAQQL1naSEYoYRd9JQLg3xB4DrD/bMB
lIk4acEmv9mDC2gRacL3rZ64JL9ax55D5rDVyy2e3efjVZkl85zgCCZJdCXC0XHB
Zh6bpcQRO4Nk3IFuz6Yb/BvH+PkUgG/LsSVpRGeehT+Z+PWCnhx18V6cpwBcNP3W
a7FI9AI32JfyNh2NYrtYuULU+psQGKhxVAJ5L88C2fVzhDGRKI1EcVQt6if3hvaT
hvupCuiq+Qxe9Q1ES0Pg+QqKdQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:57:34 2025 by rpki-client