This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
File:                     12FE16FACD299316FCEF73CFEA782844D7C2E698.mft (raw, json)
Hash identifier:          HmRMXL52NJq7B/iy3bI/11u+pJLkgI5hjo4n5keyo1A=
Subject key identifier:   B1:2C:15:CE:82:CB:0E:7F:D0:2D:0A:7C:4D:71:73:33:4F:52:27:13
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       4B881610353D721E9A46DDE6DEEFF2E1F22A2087
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
Manifest number:          034D
Signing time:             Sat 06 Dec 2025 09:30:00 +0000
Manifest this update:     Sat 06 Dec 2025 09:25:00 +0000
Manifest next update:     Sun 07 Dec 2025 11:32:00 +0000
Files and hashes:         1: 323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (hash: xBmcP/YeDZGsb4KTokoRr2w6rc0i+MAEv6W8eR0cvJ8=)
                          2: 3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa (hash: qwc85KZmQFkRWm0Jf2vYrh9+e5dCKo3pBlg4i+Jspwk=)
                          3: 3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (hash: EkdUBTRybeS4MvPS7pCPdEG0stlXZoG/OmAso7kZpnQ=)
                          4: 3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa (hash: dT04SxtoIfHKNgfRnmS8wDU/y3BbzN7ryg9QMjXB4dQ=)
                          5: 12FE16FACD299316FCEF73CFEA782844D7C2E698.crl (hash: u2iq660dYPLVBm4XSXWXnbntoI+A5Qhk+GpyPjaqWIs=)
                          6: 3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (hash: vRosT9i71yxByMp0a25QrskbJjHc15Im++AZI3B+iDY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:88:16:10:35:3d:72:1e:9a:46:dd:e6:de:ef:f2:e1:f2:2a:20:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Dec  6 09:25:00 2025 GMT
            Not After : Dec  7 11:32:00 2025 GMT
        Subject: CN=B12C15CE82CB0E7FD02D0A7C4D7173334F522713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:4e:a6:61:30:7a:54:df:d8:f2:34:34:1a:
                    db:8c:5a:e7:94:dc:86:65:c6:54:83:73:10:f3:10:
                    8b:bd:43:8a:fb:38:f8:52:3a:7b:41:c4:f0:96:1f:
                    0c:03:60:6b:55:02:34:d8:e1:65:fe:1e:d2:7c:01:
                    93:70:ba:59:be:f0:d5:b8:bf:24:8c:34:f1:01:6f:
                    34:e8:fa:75:43:3d:d1:96:57:a6:8f:cb:00:96:9d:
                    34:df:5a:49:7b:6a:48:2e:f0:7c:f7:5f:b8:79:6f:
                    db:dc:fe:89:6f:45:c3:67:22:a3:64:09:c7:f2:7b:
                    4a:27:fd:9b:db:e9:fb:b6:76:3b:ae:bf:bb:98:7b:
                    87:17:b2:2d:69:98:cd:5c:6d:d4:22:fd:80:1f:f3:
                    5b:c3:21:38:08:28:20:02:3d:8c:a7:55:62:a1:b8:
                    58:08:25:43:69:a0:62:cd:11:3f:76:c6:07:d1:cf:
                    c0:60:24:56:16:19:a1:48:b2:97:4e:2a:03:90:58:
                    ef:8d:de:7c:15:36:a9:1c:d7:da:48:fb:e4:5e:3b:
                    08:fa:c3:61:2c:58:89:15:39:b0:4a:17:da:ed:5c:
                    52:5f:9c:7d:31:61:d6:e0:4c:9e:20:2c:a2:f4:98:
                    40:97:af:a2:46:fb:ba:96:f4:2a:62:86:52:8c:33:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:15:CE:82:CB:0E:7F:D0:2D:0A:7C:4D:71:73:33:4F:52:27:13
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:4c:41:ca:49:f4:43:d0:fa:56:6c:d9:ce:13:21:93:1a:
         9f:00:23:d4:89:b0:7e:94:75:c8:1f:bb:ad:dc:b5:94:69:57:
         7a:5e:2a:b1:99:a0:e4:0f:73:44:b3:38:13:75:5a:f1:16:df:
         50:4b:ca:33:c0:b5:aa:82:32:18:d0:f6:83:84:b3:11:6f:d4:
         24:c1:f6:14:0e:4f:e7:b5:ce:72:a6:cf:f6:51:da:ef:c0:65:
         e0:ab:01:d1:de:e0:49:20:7a:b5:24:65:c2:8e:79:7d:dc:83:
         7e:db:fb:a9:38:c4:ce:23:2b:12:88:0a:68:67:85:34:d3:83:
         cb:91:ed:af:8b:5d:b1:c4:da:a3:31:8f:aa:42:f2:09:dd:09:
         67:f3:f5:a4:88:58:5d:16:a8:3a:ed:2d:b3:b4:de:f4:cc:f8:
         50:59:25:04:a6:7d:bb:0b:a3:cf:cd:ae:8c:0b:4d:cd:68:a1:
         1c:55:d8:f9:8c:d3:84:44:3e:d6:ab:0a:cd:75:be:f9:42:b3:
         03:79:f9:36:d3:86:86:4e:48:d4:ec:52:07:51:40:b8:74:8b:
         62:62:b5:61:8e:6d:15:5a:3a:03:0a:28:f9:57:5e:3a:29:e5:
         ba:be:d6:27:aa:e7:e3:10:24:e5:cc:ed:1e:7a:34:85:30:08:
         f7:72:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:12 2025 by rpki-client