This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
File:                     D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft (raw, json)
Hash identifier:          SLc9KpUuiM45JhGcJ/vcf+Q/COvPx4dT7dyTjDOazXs=
Subject key identifier:   AE:47:6E:39:D7:75:55:3A:AA:4E:01:3E:1A:DC:2C:78:30:45:7B:DF
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       2985586AAD50802230AD98F711F78C5561159B52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
Manifest number:          02ED
Signing time:             Wed 24 Dec 2025 03:04:13 +0000
Manifest this update:     Wed 24 Dec 2025 02:59:13 +0000
Manifest next update:     Thu 25 Dec 2025 05:59:13 +0000
Files and hashes:         1: 34352e36352e3136382e302f32322d3234203d3e203532353733.roa (hash: LCQeRDRh52xH7/V97y5VZbLRdFooBrSCSR7PxbZdSs0=)
                          2: 3137372e38372e34302e302f32322d3234203d3e203532353733.roa (hash: awu2EtLy9IEVo+JJzaXMHTAWpwoYimiF445Xf2GoVC4=)
                          3: 3133382e3131382e36382e302f32322d3234203d3e203532353733.roa (hash: vlVpepGgU/ZYdQVXokmCFHMCVQymJJ1FWbyhXDIJTP4=)
                          4: 3137392e34322e39362e302f32322d3234203d3e203532353733.roa (hash: fTUkZLp/3shvmLynyAI23ui0P6HH7ZMZ+5u1Z68UvDQ=)
                          5: 3137372e39322e3137362e302f32312d3234203d3e203532353733.roa (hash: N8mbaVaEH0v0GlmByshSybLhMhV940/HDxwsWYQIGaE=)
                          6: 3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa (hash: VdILTEYZBKlH0wduljRWi72LfKcdBsNsUzdCKEtDzv0=)
                          7: 3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (hash: /yl/fehTaorJcnkCXcMPUzU2/rpH51PjwzoUj8hnc9g=)
                          8: 3137302e3235342e382e302f32322d3234203d3e203532353733.roa (hash: bXgZVf4Cm4+3inOBUU8FHt8TflklWn+ZzQRP90/+/hg=)
                          9: 3136382e39302e32302e302f32322d3234203d3e203532353733.roa (hash: zFPxVEXlcoIKmTZJkD3G+PQtSlW1wmxQ2j951LxxjVk=)
                          10: 323830343a6365343a3a2f33322d3438203d3e203532353733.roa (hash: MkmnWh7HLmV8XKeblvGNQ084tQDE0n4cIYzP1XgdXRk=)
                          11: 3133382e3235352e37362e302f32322d3234203d3e203532353733.roa (hash: 0xbTYj43hKnwMNIaOl+emf+infscS5scI8ZcKfRdy0c=)
                          12: 3133312e302e31322e302f32322d3234203d3e203532353733.roa (hash: Vy8LCIusmoV2b/ZGxjzyKb15jNhNszZFb3JAw+iL4LE=)
                          13: 3137372e38362e37322e302f32322d3234203d3e203532353733.roa (hash: PjZzRg0lavxRk29Uhak1W3mpMWB6MMFhAqqLRHk4ZP8=)
                          14: 3139312e3234322e33322e302f32322d3234203d3e203532353733.roa (hash: xi/eldEMhYl2zmtxepgTj/65JDxadCGsJFj8HqVk1zI=)
                          15: 3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa (hash: 6R8lbmXUYzk9rHzGECDSJqor1vHGJp+xnDA8Vs5gV+c=)
                          16: 3230312e3138322e32382e302f32322d3234203d3e203532353733.roa (hash: fDjnVRN500fF5Ix86G0nfXwLn0TdehDHcyZhASW4tk4=)
                          17: 3137302e3234372e36382e302f32322d3234203d3e203532353733.roa (hash: GdoDbwz7Sj0bLBIa81MA5V4mVUA0EM39n264C13x4co=)
                          18: 3137372e39312e34302e302f32322d3234203d3e203532353733.roa (hash: SEks1oTOHkzWT363eYx2gsupSYzQQHxod1lNUptgWyk=)
                          19: 3133382e3230342e33322e302f32322d3234203d3e203532353733.roa (hash: Q5DEoPiAj1AWQgoJVEvAetLn4Rq9piVDJzp7J4e9v98=)
                          20: 3137372e38362e3136382e302f32312d3234203d3e203532353733.roa (hash: YKUfq9pAjM0PRNguBgjWYP/T7fDhqUQqY+f0wl2g0AY=)
                          21: 34352e3232342e34382e302f32322d3234203d3e203532353733.roa (hash: mG56iWvCrHL+kk2Adir+F9RdvZJxoOgDK4Wu+hY7/l4=)
                          22: 32342e3135322e39362e302f32322d3234203d3e203532353733.roa (hash: GQsbesMdL03x6pgSvWicLwXQeoL5cvtFjvGZCljtPFM=)
                          23: 34352e3232362e35362e302f32332d3234203d3e203532353733.roa (hash: Yt9/CyukffdPiKXWXqi3/SEVxNIriznp3DhzHQAdckw=)
                          24: 3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa (hash: J1wB4pSWk/4qziPxHfT8TmF5tOHLvrBIZLsv/vUXWKg=)
                          25: 3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa (hash: lhgdM6El60Y8BWen8+uwrw2JdaKLj3Nnu2FEMNz3bQg=)
                          26: 34352e362e3232382e302f32322d3234203d3e203532353733.roa (hash: RwoDUrN2cnDnsPM+iJk7wIlBOXDj7/3UpMDv866XCaE=)
                          27: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl (hash: f9Qji8SJvOXCfYRiBGGbV6VCNmlwNFf8ln1092d02Gk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 05:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:85:58:6a:ad:50:80:22:30:ad:98:f7:11:f7:8c:55:61:15:9b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Dec 24 02:59:13 2025 GMT
            Not After : Dec 25 05:59:13 2025 GMT
        Subject: CN=AE476E39D775553AAA4E013E1ADC2C7830457BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:d8:bb:d6:64:94:c3:b5:14:6a:5a:02:f7:
                    b7:97:9b:bd:94:6f:57:e1:63:98:47:f9:90:8c:17:
                    29:b0:b9:27:f3:41:95:16:b6:a4:04:40:dd:9c:14:
                    25:c8:f0:10:20:62:20:15:72:da:2c:88:b7:c4:42:
                    6c:c3:e7:e0:7e:ad:06:dd:d3:1c:9a:f7:1b:1f:d2:
                    14:85:02:66:91:a3:d4:7f:e1:25:c7:f0:98:92:10:
                    d2:50:63:8f:2d:70:a1:e0:27:ba:b9:99:b1:6d:bb:
                    d6:74:28:d2:f3:07:67:79:81:b7:2e:63:08:dd:93:
                    23:fe:0f:f7:44:94:fb:58:ea:f5:77:96:ba:af:c1:
                    c8:70:74:1e:df:c9:7d:22:6f:d1:c8:2b:c8:f2:12:
                    85:3c:86:9a:93:f2:c6:30:52:38:ea:4f:8b:50:c0:
                    e5:de:76:0a:89:13:a3:36:cc:99:6f:72:b5:d0:ad:
                    ca:29:d5:4e:f0:31:48:71:2a:ae:a1:94:76:9f:6b:
                    3d:94:1f:c8:da:13:07:b7:ab:57:fd:f8:f0:7b:7e:
                    21:93:1b:5d:0f:61:e4:e9:dc:44:90:30:e4:6d:77:
                    19:94:ed:78:37:06:6e:19:35:e2:2e:97:cb:a6:02:
                    51:dd:72:99:5a:2e:e3:8c:68:ae:4c:16:f8:45:e8:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:47:6E:39:D7:75:55:3A:AA:4E:01:3E:1A:DC:2C:78:30:45:7B:DF
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:75:96:cf:5b:89:49:9f:8f:90:e4:2e:54:ba:4b:f8:9a:90:
         39:9e:b5:1c:29:01:40:85:97:47:72:7b:74:56:3d:32:c5:68:
         a1:43:17:a4:63:78:ba:cb:5f:23:9f:b6:76:9c:80:80:cd:7e:
         3e:ae:67:a7:c6:7d:5e:b4:ed:3d:39:e7:6b:48:c7:7e:60:1d:
         fc:8f:e0:93:11:d3:20:f5:8d:90:01:22:e1:9b:09:4b:6c:db:
         62:fd:0a:d8:ac:88:b0:04:1f:48:d4:0f:c7:72:27:57:db:cf:
         e0:28:5f:1e:4f:2e:87:ba:9f:6a:55:75:cd:30:72:ec:1d:2d:
         55:d5:f7:fa:25:f0:21:86:d4:e0:1f:9f:3b:d0:f2:73:1d:bc:
         97:f3:f7:52:0e:b6:86:2c:84:0a:57:04:ce:a3:97:24:ce:c7:
         05:f6:6a:68:ef:71:6b:16:cd:a5:6b:ee:00:8a:0f:97:df:eb:
         c3:ac:cb:6b:8c:38:0d:f7:a4:6d:b4:82:c6:99:0e:e0:b9:35:
         6f:69:b9:73:a1:02:76:f2:b6:45:46:87:f6:26:e0:ab:0c:73:
         48:6e:0c:de:0e:ce:9d:4b:10:aa:9d:04:a9:1d:ba:a7:36:b2:
         dd:22:d9:a8:34:b7:15:58:f4:07:17:57:49:da:b4:a5:61:39:
         c1:ea:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:37:46 2025 by rpki-client