This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
File:                     64F0BC2149C243BFA686EEB3823182E372255DFA.mft (raw, json)
Hash identifier:          WHn/EMlHWTbZoqXkl0XdK9SLmkhUmlm+kjwbSC+5lL4=
Subject key identifier:   A0:66:CB:CE:C2:38:50:DC:9F:03:68:9C:E3:C8:81:38:25:FA:AA:EB
Authority key identifier: 64:F0:BC:21:49:C2:43:BF:A6:86:EE:B3:82:31:82:E3:72:25:5D:FA
Certificate issuer:       /CN=64F0BC2149C243BFA686EEB3823182E372255DFA
Certificate serial:       0AA7576CC54310641B47BE7A71C853EFEA2ACEE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
Manifest number:          41
Signing time:             Fri 05 Dec 2025 22:35:35 +0000
Manifest this update:     Fri 05 Dec 2025 22:30:35 +0000
Manifest next update:     Sun 07 Dec 2025 01:38:35 +0000
Files and hashes:         1: 64F0BC2149C243BFA686EEB3823182E372255DFA.crl (hash: YvMTJFgwgAFLVYzDFr2FXpebd7Y0l4sV1dbCmY8Pazk=)
                          2: 323830343a356332303a3a2f33322d3334203d3e20323638383930.roa (hash: eiH19wRtxxKWmEYwwaGj1ft3uaL5tG3RN0O0K9ps7S8=)
                          3: 34352e3137352e37362e302f32322d3234203d3e20323638383930.roa (hash: nzWORvceCO3rXo6Eca3kRIF+Td54EnyUicBgbeaIvhA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a7:57:6c:c5:43:10:64:1b:47:be:7a:71:c8:53:ef:ea:2a:ce:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F0BC2149C243BFA686EEB3823182E372255DFA
        Validity
            Not Before: Dec  5 22:30:35 2025 GMT
            Not After : Dec  7 01:38:35 2025 GMT
        Subject: CN=A066CBCEC23850DC9F03689CE3C8813825FAAAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:d8:eb:71:12:4c:e2:fc:d8:8a:2e:23:18:
                    14:ff:59:12:f4:23:6a:02:ce:85:f0:db:68:f6:9d:
                    f5:6a:d6:a2:70:8a:ea:3d:a5:4e:4f:db:39:fe:28:
                    25:14:3c:58:c6:42:fa:f8:e0:23:f9:e8:3c:b6:dc:
                    7b:f5:3a:7c:96:5f:54:7b:47:be:36:66:68:d3:1e:
                    43:a7:4d:52:8f:dd:17:91:f4:13:e4:08:d7:37:66:
                    5e:52:04:b3:e0:f1:16:d2:0a:54:63:7f:62:5c:eb:
                    7d:21:d2:8c:28:08:a3:cc:75:25:67:64:a9:51:53:
                    81:da:fe:45:00:8b:b1:3e:e6:48:2c:89:7b:b6:62:
                    45:23:46:88:0a:0a:0d:58:7c:aa:05:46:db:6d:f0:
                    76:e7:86:10:f9:d6:ff:5d:7e:8b:f5:e9:43:f6:04:
                    68:ec:5b:e3:0e:d4:9c:ec:18:63:fb:0a:e4:09:d9:
                    10:5d:0c:cd:e6:0c:b9:97:a6:0d:f9:18:d1:e0:38:
                    65:99:ca:bc:7d:73:fd:dc:f8:13:9f:ec:ff:e8:52:
                    2a:eb:42:18:a2:9a:45:65:18:7f:e7:e4:5e:ae:08:
                    e2:98:bb:79:c9:84:11:24:2a:6b:f5:59:b3:b3:51:
                    e7:b9:6b:b7:ab:95:23:b9:80:67:7d:66:a3:e3:11:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:66:CB:CE:C2:38:50:DC:9F:03:68:9C:E3:C8:81:38:25:FA:AA:EB
            X509v3 Authority Key Identifier:
                keyid:64:F0:BC:21:49:C2:43:BF:A6:86:EE:B3:82:31:82:E3:72:25:5D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:93:f8:fa:c6:54:10:6f:f9:5c:c8:66:4b:19:7f:7d:1d:c3:
         6c:17:f6:35:25:27:21:64:0d:d4:09:0f:bb:cd:3d:ba:f9:11:
         16:c4:77:3b:b0:bb:4a:5a:49:81:37:ad:8b:25:bc:64:56:80:
         5e:2f:ed:e4:90:90:1e:ab:a5:0f:80:b3:31:c2:42:5f:d6:69:
         9f:07:af:68:f5:fe:5e:8d:88:8d:89:dd:66:51:99:75:f8:54:
         bd:73:e8:ae:4b:65:d1:99:94:8f:80:d2:d7:b2:a6:9b:c7:8b:
         07:89:57:ac:31:81:8c:5a:9d:a7:29:9c:79:fc:a9:e0:98:96:
         7e:91:7c:be:b8:36:28:1f:09:7f:2c:11:25:c8:87:f7:dd:e6:
         6c:ba:e1:43:c4:5e:95:32:ef:51:e3:6b:0f:8b:a2:eb:c5:57:
         ab:f1:2e:34:31:e8:68:5c:42:68:ee:24:ef:ef:38:fd:97:7a:
         16:f2:20:38:0c:26:39:80:5e:e7:6b:f7:b6:07:79:ef:f1:ed:
         f1:fa:3f:d7:7a:fe:79:d5:09:3f:4e:cb:71:4b:4a:ce:2d:3c:
         ab:4e:55:44:97:3b:7c:da:4c:8b:bc:3a:b1:fc:69:0c:e1:c6:
         2f:f0:68:6d:48:72:6c:a3:d1:07:ea:ea:8f:f9:d3:67:91:6b:
         18:8f:8e:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCqdXbMVDEGQbR756cchT7+oqzuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRGMEJDMjE0OUMyNDNCRkE2ODZFRUIzODIzMTgyRTM3
MjI1NURGQTAeFw0yNTEyMDUyMjMwMzVaFw0yNTEyMDcwMTM4MzVaMDMxMTAvBgNV
BAMTKEEwNjZDQkNFQzIzODUwREM5RjAzNjg5Q0UzQzg4MTM4MjVGQUFBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+e9jrcRJM4vzYii4jGBT/WRL0
I2oCzoXw22j2nfVq1qJwiuo9pU5P2zn+KCUUPFjGQvr44CP56Dy23Hv1OnyWX1R7
R742ZmjTHkOnTVKP3ReR9BPkCNc3Zl5SBLPg8RbSClRjf2Jc630h0owoCKPMdSVn
ZKlRU4Ha/kUAi7E+5kgsiXu2YkUjRogKCg1YfKoFRttt8HbnhhD51v9dfov16UP2
BGjsW+MO1JzsGGP7CuQJ2RBdDM3mDLmXpg35GNHgOGWZyrx9c/3c+BOf7P/oUirr
QhiimkVlGH/n5F6uCOKYu3nJhBEkKmv1WbOzUee5a7erlSO5gGd9ZqPjEVRzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoGbLzsI4UNyfA2ic48iBOCX6quswHwYDVR0j
BBgwFoAUZPC8IUnCQ7+mhu6zgjGC43IlXfowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMC82NEYwQkMyMTQ5QzI0M0JGQTY4NkVFQjM4MjMxODJFMzcyMjU1REZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RjBCQzIxNDlDMjQzQkZB
Njg2RUVCMzgyMzE4MkUzNzIyNTVERkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0REcvMC82
NEYwQkMyMTQ5QzI0M0JGQTY4NkVFQjM4MjMxODJFMzcyMjU1REZBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYZP4+sZUEG/5XMhmSxl/fR3DbBf2NSUnIWQN1AkPu809uvkRFsR3O7C7SlpJ
gTetiyW8ZFaAXi/t5JCQHqulD4CzMcJCX9ZpnwevaPX+Xo2IjYndZlGZdfhUvXPo
rktl0ZmUj4DS17Kmm8eLB4lXrDGBjFqdpymcefyp4JiWfpF8vrg2KB8JfywRJciH
993mbLrhQ8RelTLvUeNrD4ui68VXq/EuNDHoaFxCaO4k7+84/Zd6FvIgOAwmOYBe
52v3tgd57/Ht8fo/13r+edUJP07LcUtKzi08q05VRJc7fNpMi7w6sfxpDOHGL/Bo
bUhybKPRB+rqj/nTZ5FrGI+OeQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:57:44 2025 by rpki-client