This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
File:                     A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json)
Hash identifier:          moeYNQPLM692AAOmV/3/a98ykYUgd1cu2GM3lMMCrdI=
Subject key identifier:   77:BB:99:6A:42:AA:B2:F4:45:F1:15:AD:19:FC:2C:70:40:32:22:6C
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       5E04FA252A70D2DA1FFD00CDF3B35589134E7C5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
Manifest number:          031C
Signing time:             Sun 21 Dec 2025 06:45:49 +0000
Manifest this update:     Sun 21 Dec 2025 06:40:49 +0000
Manifest next update:     Mon 22 Dec 2025 07:49:49 +0000
Files and hashes:         1: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=)
                          2: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=)
                          3: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: mRXTmwrImglLa5nYDzpE+0JKSMW9+deQgHJlIt1112A=)
                          4: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 07:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:04:fa:25:2a:70:d2:da:1f:fd:00:cd:f3:b3:55:89:13:4e:7c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Dec 21 06:40:49 2025 GMT
            Not After : Dec 22 07:49:49 2025 GMT
        Subject: CN=77BB996A42AAB2F445F115AD19FC2C704032226C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:a2:8d:fb:4c:63:06:5c:b2:d5:14:ea:23:
                    43:dc:b7:26:3c:e3:d6:61:68:17:c2:88:ef:c5:47:
                    1a:05:e6:fe:ba:3d:15:9d:2e:60:8f:f4:5f:64:4e:
                    05:4d:b7:c3:f4:a6:99:81:86:74:f6:7e:da:77:81:
                    92:06:83:f1:07:0a:1f:56:fe:5e:73:4b:cb:fa:ba:
                    f3:cc:6f:82:aa:3c:34:f7:b6:e8:6c:9c:db:71:55:
                    15:e8:ce:5a:ea:73:92:cc:36:e2:c5:6b:ee:6c:13:
                    aa:2a:06:c3:fc:fb:d4:d2:b7:1b:63:ee:c1:79:aa:
                    48:96:d2:0f:f0:ea:5f:cc:d8:2c:a8:f1:2c:81:f6:
                    2f:85:f4:1b:35:cc:71:6b:9e:9c:02:fd:c7:42:7b:
                    07:3e:cf:49:f1:a9:b3:a6:73:87:aa:ef:3d:81:bc:
                    83:09:df:56:8e:8f:fa:6e:70:07:77:d0:9e:50:a0:
                    59:26:b8:a7:e2:93:51:fe:c2:5e:25:2a:00:83:40:
                    1a:f1:ae:a0:7c:29:97:80:e0:ce:46:81:97:37:e2:
                    cd:c7:c0:4d:bc:4e:a3:71:93:f0:db:ef:e4:1a:f7:
                    fe:f0:53:69:4c:71:64:46:37:76:3c:8b:71:0c:27:
                    e7:01:8f:ed:61:bc:1d:cd:b1:07:d2:5c:37:71:76:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:99:6A:42:AA:B2:F4:45:F1:15:AD:19:FC:2C:70:40:32:22:6C
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:d4:7d:e9:5f:21:9e:56:d4:4a:f0:60:20:68:d2:41:ba:
         06:de:73:a1:67:a3:69:87:bf:fb:48:5a:07:08:c3:3e:e1:b9:
         98:ff:79:c7:83:f7:b1:e1:bb:c9:39:a6:92:7d:46:bf:e1:6c:
         15:0a:d7:96:c8:dd:08:4e:8c:96:c9:cd:6e:41:16:9d:60:ed:
         81:04:49:a9:27:13:98:9f:b8:84:2c:fa:8d:fa:18:dd:3c:ee:
         37:c8:fc:3b:70:c1:50:e0:01:79:21:7f:16:f2:21:8d:40:7a:
         38:59:87:7e:b7:06:b3:95:9c:bf:93:00:3c:f6:bb:c2:79:8d:
         36:b8:df:59:0a:9f:ba:4a:98:a7:c8:b9:34:68:74:fe:c2:00:
         a0:27:a5:77:57:eb:62:a3:98:ab:83:8c:1c:28:97:27:c4:6f:
         ee:d4:40:f0:a2:b5:ad:03:34:07:1d:9c:5e:f6:ac:08:5c:c9:
         3f:69:4d:cc:41:97:e6:19:0a:1f:0f:3d:25:3f:01:de:78:fe:
         1e:cc:f3:b8:59:af:db:1e:94:6b:59:ae:86:f6:7f:fb:68:77:
         d1:37:bb:6e:54:fa:ba:00:d4:cf:19:3e:89:a0:98:da:09:4d:
         3d:3c:76:eb:dd:db:5f:32:aa:7a:29:f4:21:ab:ec:cf:2e:e8:
         5e:8c:cb:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXgT6JSpw0tof/QDN87NViRNOfF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2
RDUyNTI5MTAeFw0yNTEyMjEwNjQwNDlaFw0yNTEyMjIwNzQ5NDlaMDMxMTAvBgNV
BAMTKDc3QkI5OTZBNDJBQUIyRjQ0NUYxMTVBRDE5RkMyQzcwNDAzMjIyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JKKN+0xjBlyy1RTqI0PctyY8
49ZhaBfCiO/FRxoF5v66PRWdLmCP9F9kTgVNt8P0ppmBhnT2ftp3gZIGg/EHCh9W
/l5zS8v6uvPMb4KqPDT3tuhsnNtxVRXozlrqc5LMNuLFa+5sE6oqBsP8+9TStxtj
7sF5qkiW0g/w6l/M2Cyo8SyB9i+F9Bs1zHFrnpwC/cdCewc+z0nxqbOmc4eq7z2B
vIMJ31aOj/pucAd30J5QoFkmuKfik1H+wl4lKgCDQBrxrqB8KZeA4M5GgZc34s3H
wE28TqNxk/Db7+Qa9/7wU2lMcWRGN3Y8i3EMJ+cBj+1hvB3NsQfSXDdxdkaZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUd7uZakKqsvRF8RWtGfwscEAyImwwHwYDVR0j
BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B
UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx
MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B
MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiwnUfelfIZ5W1ErwYCBo0kG6Bt5zoWejaYe/+0haBwjDPuG5mP95x4P3seG7
yTmmkn1Gv+FsFQrXlsjdCE6MlsnNbkEWnWDtgQRJqScTmJ+4hCz6jfoY3TzuN8j8
O3DBUOABeSF/FvIhjUB6OFmHfrcGs5Wcv5MAPPa7wnmNNrjfWQqfukqYp8i5NGh0
/sIAoCeld1frYqOYq4OMHCiXJ8Rv7tRA8KK1rQM0Bx2cXvasCFzJP2lNzEGX5hkK
Hw89JT8B3nj+HszzuFmv2x6Ua1muhvZ/+2h30Te7blT6ugDUzxk+iaCY2glNPTx2
693bXzKqein0Iavszy7oXozL8g==
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:39:38 2025 by rpki-client