This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
File:                     BC834F1ADC6997F0F8557889193E5B0D17827E29.mft (raw, json)
Hash identifier:          v29RAwG/jdr2oAS7rRbsz3cXOeqlMLhUDJXu9Fdlz8g=
Subject key identifier:   E5:60:6E:E5:15:F8:7B:66:D3:9C:49:BA:6F:D1:72:A5:72:63:36:F2
Authority key identifier: BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29
Certificate issuer:       /CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
Certificate serial:       1001067899664CE4B05FD4203176727EDB1A8096
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
Manifest number:          0151
Signing time:             Sat 06 Dec 2025 06:32:22 +0000
Manifest this update:     Sat 06 Dec 2025 06:27:22 +0000
Manifest next update:     Sun 07 Dec 2025 07:42:22 +0000
Files and hashes:         1: 34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa (hash: QcqAb0+DtgjszqLRzX2mepAq4Zax3JRnI7HvdGOdaug=)
                          2: 323830343a363630633a3a2f33322d313238203d3e20323639353330.roa (hash: /iaFLxHNFA2V3TjOBiv0XpcHZofInDeTZKuOoA3EzQg=)
                          3: BC834F1ADC6997F0F8557889193E5B0D17827E29.crl (hash: eiIL3jEGh3sMoXbtgLuaRD+YoqdcLWgnA4sxpPkKm7E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl
                          rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:01:06:78:99:66:4c:e4:b0:5f:d4:20:31:76:72:7e:db:1a:80:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
        Validity
            Not Before: Dec  6 06:27:22 2025 GMT
            Not After : Dec  7 07:42:22 2025 GMT
        Subject: CN=E5606EE515F87B66D39C49BA6FD172A5726336F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:d9:53:ca:68:12:a0:9f:6d:72:f5:3d:b9:
                    bf:f6:91:e0:e0:0d:f5:89:c0:f6:a9:20:7c:c7:64:
                    70:f4:46:c6:12:18:b1:31:c3:36:2f:06:20:86:d6:
                    8b:3f:dd:32:63:ca:cd:bb:ba:8a:c6:60:1a:d1:e9:
                    84:b8:db:8c:e6:c8:92:5b:8a:66:64:0b:60:f5:41:
                    4c:f1:0e:5b:36:dc:03:6a:52:5a:6e:1a:3e:c7:3a:
                    88:ff:dc:ba:e7:df:b6:9c:67:e8:b5:93:b8:a0:48:
                    18:dd:96:71:e9:4b:b2:c3:9f:17:a7:a2:0e:a9:f2:
                    2c:62:da:1f:27:24:d6:e4:fb:9f:f3:f9:e6:44:8c:
                    1f:d0:41:8e:05:e7:a7:e5:75:a7:d3:2b:bd:3e:a6:
                    fd:a3:14:1f:5b:f3:2f:99:b9:fa:96:17:ee:42:9b:
                    c2:eb:9b:01:bb:f7:a0:2c:f6:3f:8b:a6:9a:44:99:
                    5e:17:cd:2a:4a:75:ca:b5:db:e7:ba:42:6c:d8:49:
                    68:4c:b1:5f:8a:b1:9e:fe:ba:7f:2e:d7:73:b3:97:
                    02:d3:02:62:23:23:7e:80:62:03:76:24:30:2e:38:
                    27:e0:37:17:01:4d:b6:cc:4c:8d:90:5b:6e:8b:5a:
                    7d:96:b3:5f:28:b0:59:44:c0:3c:63:d2:fd:e5:65:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:60:6E:E5:15:F8:7B:66:D3:9C:49:BA:6F:D1:72:A5:72:63:36:F2
            X509v3 Authority Key Identifier:
                keyid:BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d1:be:57:75:67:7b:d0:be:8d:37:b8:1a:e3:72:5c:61:48:
         e2:a1:a4:a0:9d:65:57:e3:0e:83:23:f9:6e:5a:9d:01:5b:fc:
         5c:1f:23:7f:2d:0a:7b:d3:2a:29:d4:59:3b:8d:80:95:7a:7d:
         78:d4:9c:34:3b:e1:82:9a:c7:3f:bd:35:69:1d:48:d7:c4:c0:
         66:dd:83:79:ed:12:5c:88:c3:71:a8:d8:69:0c:fc:27:53:88:
         59:a0:85:25:56:e6:8c:50:37:27:ec:35:fa:8c:04:e8:20:28:
         df:c4:4d:b4:fd:ed:48:1d:95:88:ef:f4:84:55:e9:59:55:fe:
         c7:7e:e3:6e:6c:11:ad:39:e7:ad:87:05:a0:73:f0:7b:41:35:
         6f:69:da:33:1e:78:69:91:4d:b2:ed:1f:69:0d:04:4f:04:bc:
         d5:cd:7c:c7:65:ee:00:ea:69:f9:3b:38:9e:0f:9b:cb:26:ec:
         9c:ab:3a:43:e0:a8:b5:e2:6a:cf:ba:f0:1c:07:15:34:36:85:
         43:15:ec:86:9e:80:0f:f6:a0:31:f0:08:10:0a:60:18:7a:a7:
         e2:77:41:ce:6b:d7:9f:e1:84:37:fb:5d:ea:15:68:c8:7f:00:
         08:d3:d8:51:c8:4e:bb:b0:d0:4b:8d:dc:5d:77:8b:4f:e9:97:
         8d:3f:d0:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEAEGeJlmTOSwX9QgMXZyftsagJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4MzRGMUFEQzY5OTdGMEY4NTU3ODg5MTkzRTVCMEQx
NzgyN0UyOTAeFw0yNTEyMDYwNjI3MjJaFw0yNTEyMDcwNzQyMjJaMDMxMTAvBgNV
BAMTKEU1NjA2RUU1MTVGODdCNjZEMzlDNDlCQTZGRDE3MkE1NzI2MzM2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYNlTymgSoJ9tcvU9ub/2keDg
DfWJwPapIHzHZHD0RsYSGLExwzYvBiCG1os/3TJjys27uorGYBrR6YS424zmyJJb
imZkC2D1QUzxDls23ANqUlpuGj7HOoj/3Lrn37acZ+i1k7igSBjdlnHpS7LDnxen
og6p8ixi2h8nJNbk+5/z+eZEjB/QQY4F56fldafTK70+pv2jFB9b8y+ZufqWF+5C
m8LrmwG796As9j+LpppEmV4XzSpKdcq12+e6QmzYSWhMsV+KsZ7+un8u13OzlwLT
AmIjI36AYgN2JDAuOCfgNxcBTbbMTI2QW26LWn2Ws18osFlEwDxj0v3lZZ5xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5WBu5RX4e2bTnEm6b9FypXJjNvIwHwYDVR0j
BBgwFoAUvINPGtxpl/D4VXiJGT5bDReCfikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREp5S0h3Wks3a3RMd0p2NEZ5NHR3YnloTEVEOGQ2bW1lWVRySk50blNo
RVAvMC9CQzgzNEYxQURDNjk5N0YwRjg1NTc4ODkxOTNFNUIwRDE3ODI3RTI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDODM0RjFBREM2OTk3RjBG
ODU1Nzg4OTE5M0U1QjBEMTc4MjdFMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REp5S0h3Wks3a3RMd0p2NEZ5NHR3YnloTEVEOGQ2bW1lWVRySk50blNoRVAvMC9C
QzgzNEYxQURDNjk5N0YwRjg1NTc4ODkxOTNFNUIwRDE3ODI3RTI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT9G+V3Vne9C+jTe4GuNyXGFI4qGkoJ1lV+MOgyP5blqdAVv8XB8jfy0Ke9Mq
KdRZO42AlXp9eNScNDvhgprHP701aR1I18TAZt2Dee0SXIjDcajYaQz8J1OIWaCF
JVbmjFA3J+w1+owE6CAo38RNtP3tSB2ViO/0hFXpWVX+x37jbmwRrTnnrYcFoHPw
e0E1b2naMx54aZFNsu0faQ0ETwS81c18x2XuAOpp+Ts4ng+byybsnKs6Q+CoteJq
z7rwHAcVNDaFQxXshp6AD/agMfAIEApgGHqn4ndBzmvXn+GEN/td6hVoyH8ACNPY
UchOu7DQS43cXXeLT+mXjT/Q8A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:07:45 2025 by rpki-client