This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
File:                     D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft (raw, json)
Hash identifier:          VwmlK3tVBwDrqILQB2FZ5WzImayCLR+bORdRDkCGvsE=
Subject key identifier:   D2:AA:25:20:AC:BF:08:D2:9C:42:17:F3:A8:42:4B:80:38:D3:EC:0C
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       7FA7B3707BE3A955E8E84BE65633E954FB342EAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
Manifest number:          02F5
Signing time:             Tue 30 Dec 2025 05:20:00 +0000
Manifest this update:     Tue 30 Dec 2025 05:15:00 +0000
Manifest next update:     Wed 31 Dec 2025 08:22:00 +0000
Files and hashes:         1: 34352e36352e3136382e302f32322d3234203d3e203532353733.roa (hash: LCQeRDRh52xH7/V97y5VZbLRdFooBrSCSR7PxbZdSs0=)
                          2: 3137372e39312e34302e302f32322d3234203d3e203532353733.roa (hash: SEks1oTOHkzWT363eYx2gsupSYzQQHxod1lNUptgWyk=)
                          3: 3137372e39322e3137362e302f32312d3234203d3e203532353733.roa (hash: N8mbaVaEH0v0GlmByshSybLhMhV940/HDxwsWYQIGaE=)
                          4: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl (hash: 3mHmILzqejfnnbnqJFz/c7vPC6zCYwLuWnSppHJG0vI=)
                          5: 3133312e302e31322e302f32322d3234203d3e203532353733.roa (hash: Vy8LCIusmoV2b/ZGxjzyKb15jNhNszZFb3JAw+iL4LE=)
                          6: 34352e3232362e35362e302f32332d3234203d3e203532353733.roa (hash: Yt9/CyukffdPiKXWXqi3/SEVxNIriznp3DhzHQAdckw=)
                          7: 3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa (hash: lhgdM6El60Y8BWen8+uwrw2JdaKLj3Nnu2FEMNz3bQg=)
                          8: 3137372e38372e34302e302f32322d3234203d3e203532353733.roa (hash: awu2EtLy9IEVo+JJzaXMHTAWpwoYimiF445Xf2GoVC4=)
                          9: 3133382e3235352e37362e302f32322d3234203d3e203532353733.roa (hash: 0xbTYj43hKnwMNIaOl+emf+infscS5scI8ZcKfRdy0c=)
                          10: 34352e3232342e34382e302f32322d3234203d3e203532353733.roa (hash: mG56iWvCrHL+kk2Adir+F9RdvZJxoOgDK4Wu+hY7/l4=)
                          11: 3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa (hash: 6R8lbmXUYzk9rHzGECDSJqor1vHGJp+xnDA8Vs5gV+c=)
                          12: 323830343a6365343a3a2f33322d3438203d3e203532353733.roa (hash: MkmnWh7HLmV8XKeblvGNQ084tQDE0n4cIYzP1XgdXRk=)
                          13: 3133382e3131382e36382e302f32322d3234203d3e203532353733.roa (hash: vlVpepGgU/ZYdQVXokmCFHMCVQymJJ1FWbyhXDIJTP4=)
                          14: 34352e362e3232382e302f32322d3234203d3e203532353733.roa (hash: RwoDUrN2cnDnsPM+iJk7wIlBOXDj7/3UpMDv866XCaE=)
                          15: 3137372e38362e3136382e302f32312d3234203d3e203532353733.roa (hash: YKUfq9pAjM0PRNguBgjWYP/T7fDhqUQqY+f0wl2g0AY=)
                          16: 3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa (hash: VdILTEYZBKlH0wduljRWi72LfKcdBsNsUzdCKEtDzv0=)
                          17: 3137302e3235342e382e302f32322d3234203d3e203532353733.roa (hash: bXgZVf4Cm4+3inOBUU8FHt8TflklWn+ZzQRP90/+/hg=)
                          18: 32342e3135322e39362e302f32322d3234203d3e203532353733.roa (hash: GQsbesMdL03x6pgSvWicLwXQeoL5cvtFjvGZCljtPFM=)
                          19: 3230312e3138322e32382e302f32322d3234203d3e203532353733.roa (hash: fDjnVRN500fF5Ix86G0nfXwLn0TdehDHcyZhASW4tk4=)
                          20: 3139312e3234322e33322e302f32322d3234203d3e203532353733.roa (hash: xi/eldEMhYl2zmtxepgTj/65JDxadCGsJFj8HqVk1zI=)
                          21: 3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (hash: /yl/fehTaorJcnkCXcMPUzU2/rpH51PjwzoUj8hnc9g=)
                          22: 3136382e39302e32302e302f32322d3234203d3e203532353733.roa (hash: zFPxVEXlcoIKmTZJkD3G+PQtSlW1wmxQ2j951LxxjVk=)
                          23: 3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa (hash: J1wB4pSWk/4qziPxHfT8TmF5tOHLvrBIZLsv/vUXWKg=)
                          24: 3133382e3230342e33322e302f32322d3234203d3e203532353733.roa (hash: Q5DEoPiAj1AWQgoJVEvAetLn4Rq9piVDJzp7J4e9v98=)
                          25: 3137302e3234372e36382e302f32322d3234203d3e203532353733.roa (hash: GdoDbwz7Sj0bLBIa81MA5V4mVUA0EM39n264C13x4co=)
                          26: 3137392e34322e39362e302f32322d3234203d3e203532353733.roa (hash: fTUkZLp/3shvmLynyAI23ui0P6HH7ZMZ+5u1Z68UvDQ=)
                          27: 3137372e38362e37322e302f32322d3234203d3e203532353733.roa (hash: PjZzRg0lavxRk29Uhak1W3mpMWB6MMFhAqqLRHk4ZP8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 08:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a7:b3:70:7b:e3:a9:55:e8:e8:4b:e6:56:33:e9:54:fb:34:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Dec 30 05:15:00 2025 GMT
            Not After : Dec 31 08:22:00 2025 GMT
        Subject: CN=D2AA2520ACBF08D29C4217F3A8424B8038D3EC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:c3:f6:bf:87:0d:c8:72:d8:8d:48:aa:a3:
                    cc:36:92:a9:a4:75:e6:64:db:24:b8:1b:80:43:ac:
                    0c:1e:eb:d0:be:28:c4:71:82:f3:c8:3e:7c:65:dc:
                    23:ef:57:6c:ed:48:c1:2e:b9:10:49:e4:ab:19:ab:
                    31:83:0f:ee:ac:8b:3c:c6:83:ce:0c:7d:87:77:1f:
                    7b:ff:d2:9d:35:89:89:0e:35:88:bd:84:9e:f1:c2:
                    22:ed:e0:4d:51:bc:04:c7:f6:eb:20:9a:c9:33:e8:
                    01:2d:4f:45:2a:23:f0:f1:35:61:94:8a:a3:2f:73:
                    7c:8a:69:f1:c7:40:d2:07:7d:2b:8a:8b:33:7c:4b:
                    a2:fc:31:bf:8c:3a:7e:2c:cd:c8:4f:fb:54:7e:28:
                    98:09:5c:ef:0c:d3:96:4d:c4:21:88:5f:09:ea:e4:
                    eb:db:64:07:9b:87:4e:9b:aa:c2:42:7d:2e:60:54:
                    71:1b:1e:dc:af:26:26:a8:13:0a:52:9a:93:34:7e:
                    a6:99:0a:50:db:ed:f0:33:22:c1:26:7f:b1:f6:56:
                    f8:a5:4c:6b:b9:07:ea:3e:ce:a7:56:fe:40:a9:78:
                    41:14:be:5b:b7:e2:a9:8b:b8:c5:12:3f:ba:20:af:
                    af:d2:6b:d7:d8:5a:a1:10:05:40:45:bf:9a:27:22:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:25:20:AC:BF:08:D2:9C:42:17:F3:A8:42:4B:80:38:D3:EC:0C
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:39:e8:a1:45:94:9d:0b:76:5a:3f:e0:71:ef:bf:df:ee:
         b8:e1:09:90:20:7c:5a:c4:7e:a2:10:c9:90:f8:22:2d:4a:87:
         22:07:41:23:fb:cf:20:96:dd:2a:a9:f9:fc:47:2f:c0:43:1e:
         f4:1c:bb:64:0a:a1:8e:44:ba:0e:6b:ca:ad:92:51:aa:55:49:
         d6:d0:eb:8e:58:56:04:2f:d0:24:e1:ca:e2:11:fe:91:da:4c:
         3f:8b:ea:e9:e4:7f:ea:60:d2:5d:b4:bc:9e:bd:90:4e:eb:65:
         41:9c:6b:32:0c:2b:b9:c9:89:76:1a:1e:02:7b:96:b7:c7:0a:
         79:1a:ac:69:7c:8a:fd:b6:84:5d:85:0f:5e:7f:a3:2b:bc:dc:
         3b:ee:36:36:ba:d7:e4:75:2e:32:0f:d2:cb:ba:68:36:17:1f:
         ed:88:c1:44:3e:02:fe:33:31:08:22:69:ec:7b:6f:f3:f0:11:
         fc:5a:96:39:3a:b4:8a:f1:ae:3b:f0:c9:9e:85:1b:16:01:49:
         03:03:89:a1:f7:48:55:a6:26:9c:86:ae:a5:85:22:f7:2d:d9:
         be:f2:63:3a:a1:3d:90:a7:45:88:d7:ca:fa:79:80:39:0b:64:
         a2:4b:a1:de:e8:13:6a:75:81:7c:7e:89:7e:0e:2d:7d:92:08:
         69:7c:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:56:22 2025 by rpki-client