This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          xvQ2lMN8qDA+TLefge7nZazo8VqnTKLdiViALjWI5Qk=
Subject key identifier:   BF:94:8B:86:70:C4:6C:31:C4:00:A8:B7:DD:60:F4:D1:25:08:7F:1D
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       0906FED83E2E813786E4EE0EC73F1BE9E1FF7C50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          0386
Signing time:             Fri 19 Dec 2025 23:34:30 +0000
Manifest this update:     Fri 19 Dec 2025 23:29:30 +0000
Manifest next update:     Sun 21 Dec 2025 00:09:30 +0000
Files and hashes:         1: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          2: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: lItY4Mfn8zIDKWsv5yByGSGQL+DhQH6iL/6lMrtGS8U=)
                          3: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=)
                          4: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
                          5: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=)
                          6: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)
                          7: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:fe:d8:3e:2e:81:37:86:e4:ee:0e:c7:3f:1b:e9:e1:ff:7c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Dec 19 23:29:30 2025 GMT
            Not After : Dec 21 00:09:30 2025 GMT
        Subject: CN=BF948B8670C46C31C400A8B7DD60F4D125087F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:55:70:df:72:97:cf:29:bf:5e:95:ae:3b:
                    5a:3a:ca:0e:99:76:bf:49:10:f8:b4:9b:b3:fb:4f:
                    90:df:8b:11:8b:f0:df:98:89:4a:85:a2:00:0f:1b:
                    4d:1d:8d:8e:9d:61:d8:1e:d7:6b:90:de:b9:ea:5e:
                    74:48:1f:21:10:80:06:9a:e8:45:ae:75:e3:da:79:
                    35:28:c3:8f:ba:97:a9:46:d2:89:46:0f:2a:08:d0:
                    3f:d6:a6:a7:9e:b7:02:3d:a6:c8:5a:65:1f:8e:a3:
                    32:1d:ab:88:cb:13:98:8e:0b:dd:5a:b1:de:05:0a:
                    86:de:ee:9b:67:49:1e:56:cd:b7:c1:eb:d9:e8:da:
                    a2:c4:9f:69:b1:bb:39:9e:aa:18:c3:4c:69:ad:20:
                    27:e4:f7:96:fc:a2:d0:10:89:2f:4f:dc:ba:ab:15:
                    01:fd:39:2c:8e:aa:e4:98:c6:d9:d9:d7:d2:22:8b:
                    90:d7:02:2c:01:f3:9b:07:f6:ff:4c:a4:a4:f4:c1:
                    9e:aa:fd:97:b8:80:c2:36:24:2e:63:7b:54:64:2d:
                    54:0c:d4:4e:e2:bf:66:c4:2d:69:98:ad:66:59:f3:
                    ab:e4:6f:40:c5:9d:0d:34:33:66:17:b2:44:26:75:
                    ea:ac:4b:19:7e:24:0d:05:64:d5:6a:fb:a6:95:1b:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:94:8B:86:70:C4:6C:31:C4:00:A8:B7:DD:60:F4:D1:25:08:7F:1D
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:3e:5e:70:26:a8:65:6b:f9:8f:ad:bb:44:31:2a:14:10:
         57:8d:3a:c2:a5:51:4b:29:c7:43:68:9d:bd:f5:32:a8:a6:16:
         5b:0b:c6:88:f3:cb:19:83:04:5b:d9:d8:dd:7c:92:76:b8:37:
         c1:29:1b:19:64:ea:2d:bb:47:7c:7e:4b:2c:76:9a:95:b7:a3:
         22:77:44:ab:13:c9:b3:0e:c9:ff:a6:3b:3a:94:13:12:7d:82:
         70:00:5d:d5:ec:b6:8e:44:0a:40:79:69:b3:4b:ed:1c:18:48:
         a2:1e:72:2e:ca:56:5e:f5:5d:4d:bc:fe:82:2d:32:14:92:47:
         3a:8f:bd:bd:38:63:dd:31:0b:95:92:67:0d:a8:6b:16:f2:f7:
         17:56:5a:57:12:18:ff:d3:8b:20:9b:09:78:fd:4b:e8:96:96:
         42:c8:94:19:47:ed:d1:7b:37:0f:07:45:9c:ea:0e:5a:3b:4a:
         20:6a:06:39:2f:64:48:18:90:63:5c:48:74:4c:c9:2a:b9:db:
         15:41:5b:63:29:8c:d5:53:31:00:ef:b3:24:1d:48:b4:66:a3:
         93:46:62:2d:dc:41:c1:11:68:7d:7b:94:28:73:9d:c3:e7:53:
         6e:9b:51:56:50:16:8c:3f:8f:dd:9e:4a:b5:52:33:42:33:77:
         6c:c5:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:33:29 2025 by rpki-client