This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
File:                     CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json)
Hash identifier:          MFr6JBH43+5ibiwoO87lRXNqZe/+QuZf/peVYeB8PlI=
Subject key identifier:   76:7B:D3:05:4D:11:1F:51:D8:05:51:0E:A8:85:7A:72:32:19:BB:65
Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9
Certificate issuer:       /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9
Certificate serial:       0B67281F7DA4B5977E551662F301F93CA654F700
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
Manifest number:          48
Signing time:             Fri 05 Dec 2025 15:24:26 +0000
Manifest this update:     Fri 05 Dec 2025 15:19:26 +0000
Manifest next update:     Sat 06 Dec 2025 15:47:26 +0000
Files and hashes:         1: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: 4PrJlljCH9va1znCLR/1V+OYSVrfdO9izSNIh1Q+uLg=)
                          2: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=)
                          3: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl
                          rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:67:28:1f:7d:a4:b5:97:7e:55:16:62:f3:01:f9:3c:a6:54:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9
        Validity
            Not Before: Dec  5 15:19:26 2025 GMT
            Not After : Dec  6 15:47:26 2025 GMT
        Subject: CN=767BD3054D111F51D805510EA8857A723219BB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:8a:6c:41:52:1d:a7:ce:d5:17:86:a6:e3:
                    05:36:55:99:5e:5a:bc:80:4b:2b:a9:53:7a:82:cd:
                    37:57:37:1b:8a:50:1b:d8:be:94:b2:da:4b:e3:8f:
                    d3:19:af:5b:51:5e:75:5e:26:a5:77:34:df:37:13:
                    5a:25:36:25:26:f4:a9:5b:25:50:d8:0a:93:22:17:
                    ac:76:3c:95:79:09:50:8b:ee:d0:f0:98:e1:ae:b6:
                    b3:6f:ac:24:eb:29:b1:70:b1:fa:09:a8:2f:08:6f:
                    54:95:c9:45:ee:11:03:b8:ca:7e:7b:b9:0f:eb:d3:
                    9a:d0:48:cc:c6:e5:8c:e5:1e:a3:40:6d:37:d9:55:
                    ba:95:88:b9:c2:bf:ae:f8:be:c5:ec:c4:b9:c0:7f:
                    e6:02:1d:7b:2c:6e:30:ae:c3:8e:d3:6e:76:d7:80:
                    b4:fd:ad:69:0d:ee:52:2c:02:86:b0:b0:22:db:85:
                    b7:c1:1c:a4:07:26:3c:d7:29:d7:3f:c7:54:52:d2:
                    f2:e8:a9:31:70:08:88:67:39:38:2f:11:e4:bd:39:
                    6f:95:cc:a2:d0:c6:f2:07:9e:35:46:cf:14:51:5b:
                    ad:c9:0b:a1:b1:43:93:44:42:47:43:9b:0f:78:b3:
                    38:82:8c:00:e0:a9:3f:d1:1a:c8:99:7f:04:80:1e:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:D3:05:4D:11:1F:51:D8:05:51:0E:A8:85:7A:72:32:19:BB:65
            X509v3 Authority Key Identifier:
                keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:15:ca:5f:d7:db:fd:4a:2e:24:44:85:31:94:2c:ef:38:f2:
         86:32:5c:73:42:6d:0c:b0:11:ee:ed:7a:18:30:e4:14:84:4a:
         43:52:83:11:03:7d:34:56:c6:6b:71:2a:55:30:99:b7:96:56:
         a2:87:ba:c4:70:4f:d0:a4:79:11:ad:4c:e9:66:cb:6c:7a:76:
         c7:de:7f:5d:71:57:2d:00:4f:1b:30:a2:a0:df:44:d0:c7:ef:
         43:1f:01:b0:27:a3:5c:87:f2:ef:d5:b6:6b:11:90:82:8a:e1:
         cf:92:db:c5:2a:8d:4d:02:a1:1c:39:42:cf:3c:51:72:07:88:
         e9:91:57:c8:aa:b5:00:2d:7b:38:c6:4b:6e:d1:97:c9:38:56:
         9a:e4:66:25:ce:64:8b:d0:ff:c8:70:9f:a1:48:2f:86:0c:cf:
         78:2e:da:15:6b:3c:c5:cf:e8:43:e7:62:0c:ea:43:81:4c:06:
         41:b5:cb:1c:4a:b0:56:90:2e:a0:09:3f:a5:ca:b6:80:ce:56:
         46:8f:05:5d:c6:96:79:81:b7:a3:98:5e:60:b2:4f:8f:9d:21:
         1b:c0:b5:42:86:f2:9e:48:64:74:74:5a:dc:74:1a:95:39:54:
         01:49:ab:8e:49:76:45:f5:ce:f4:3a:20:8a:18:c5:4d:82:ef:
         a8:fd:e4:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC2coH32ktZd+VRZi8wH5PKZU9wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB
MURERjBCOTAeFw0yNTEyMDUxNTE5MjZaFw0yNTEyMDYxNTQ3MjZaMDMxMTAvBgNV
BAMTKDc2N0JEMzA1NEQxMTFGNTFEODA1NTEwRUE4ODU3QTcyMzIxOUJCNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXG4psQVIdp87VF4am4wU2VZle
WryASyupU3qCzTdXNxuKUBvYvpSy2kvjj9MZr1tRXnVeJqV3NN83E1olNiUm9Klb
JVDYCpMiF6x2PJV5CVCL7tDwmOGutrNvrCTrKbFwsfoJqC8Ib1SVyUXuEQO4yn57
uQ/r05rQSMzG5YzlHqNAbTfZVbqViLnCv674vsXsxLnAf+YCHXssbjCuw47TbnbX
gLT9rWkN7lIsAoawsCLbhbfBHKQHJjzXKdc/x1RS0vLoqTFwCIhnOTgvEeS9OW+V
zKLQxvIHnjVGzxRRW63JC6GxQ5NEQkdDmw94sziCjADgqT/RGsiZfwSAHmXlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdnvTBU0RH1HYBVEOqIV6cjIZu2UwHwYDVR0j
BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ
U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB
QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D
QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWRXKX9fb/UouJESFMZQs7zjyhjJcc0JtDLAR7u16GDDkFIRKQ1KDEQN9NFbG
a3EqVTCZt5ZWooe6xHBP0KR5Ea1M6WbLbHp2x95/XXFXLQBPGzCioN9E0MfvQx8B
sCejXIfy79W2axGQgorhz5LbxSqNTQKhHDlCzzxRcgeI6ZFXyKq1AC17OMZLbtGX
yThWmuRmJc5ki9D/yHCfoUgvhgzPeC7aFWs8xc/oQ+diDOpDgUwGQbXLHEqwVpAu
oAk/pcq2gM5WRo8FXcaWeYG3o5heYLJPj50hG8C1QobynkhkdHRa3HQalTlUAUmr
jkl2RfXO9DogihjFTYLvqP3kww==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:04 2025 by rpki-client