This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
File:                     24C90100868CC7E5E4ADB4222503286F7BF449AA.mft (raw, json)
Hash identifier:          oBh/zLkx/wLP/WZP1reK+1mx/JxopNLzZO5PA9Qx/uc=
Subject key identifier:   25:78:85:36:53:AD:6E:92:21:07:4B:E5:35:1B:5A:46:EB:A8:4A:56
Authority key identifier: 24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
Certificate issuer:       /CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
Certificate serial:       47A6AED531D97EC1C33D68D1D04E768EA5C29660
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
Manifest number:          0334
Signing time:             Mon 22 Dec 2025 03:48:59 +0000
Manifest this update:     Mon 22 Dec 2025 03:43:59 +0000
Manifest next update:     Tue 23 Dec 2025 05:10:59 +0000
Files and hashes:         1: 34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa (hash: XbMvb0sHDqh6I8tw7R7pOeSgv0NogUeRGWr0SWQ5A0I=)
                          2: 323830343a346231343a3a2f33322d3336203d3e20323637323832.roa (hash: YepoO3AKHh52C+NKLMnz+2byTie+Z3SUdV9FD/LaTiw=)
                          3: 24C90100868CC7E5E4ADB4222503286F7BF449AA.crl (hash: Q0rG+hcafAhmuxBo2c/nvmBHAl3QBrT7daWdr9tGdQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl
                          rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 05:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a6:ae:d5:31:d9:7e:c1:c3:3d:68:d1:d0:4e:76:8e:a5:c2:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
        Validity
            Not Before: Dec 22 03:43:59 2025 GMT
            Not After : Dec 23 05:10:59 2025 GMT
        Subject: CN=2578853653AD6E9221074BE5351B5A46EBA84A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:ea:1f:90:35:5c:75:b0:6a:d7:88:fa:c7:
                    fb:2f:35:52:49:1a:f1:93:ac:1b:b8:97:66:97:58:
                    a6:a3:24:dd:40:f6:5e:b9:2f:15:8d:4e:4f:3f:a4:
                    14:67:ce:23:4a:e4:b2:b8:9c:f2:fa:46:b6:bc:97:
                    9b:43:e5:a5:f6:60:ec:44:4d:54:94:f0:42:3e:17:
                    b4:32:c8:c6:c4:56:55:2f:ca:c9:cc:25:44:b1:4b:
                    68:9f:6e:1f:4b:09:5f:c2:0b:aa:aa:ba:7c:3c:2e:
                    56:1c:3e:71:41:0e:c1:4c:e0:cd:b9:bc:bb:d9:a8:
                    d7:08:3e:09:ef:c1:85:1a:b0:74:f1:01:ea:fc:03:
                    e6:bc:28:3f:f4:91:aa:1a:3c:3d:87:ba:c9:19:c4:
                    e2:88:3f:6b:2b:c4:ed:01:23:0a:02:94:3f:86:d4:
                    9f:2f:66:d2:f2:c1:9c:32:79:ff:07:9e:4c:d5:83:
                    d5:a7:a5:39:97:56:3d:ec:20:f4:a4:8d:aa:b8:11:
                    20:b7:92:8e:a7:9d:5a:bc:68:90:1b:ac:cd:50:ec:
                    10:76:cd:48:6c:ad:18:2f:cc:d2:8d:a5:db:f1:51:
                    b0:1e:3c:18:9a:4e:29:e9:0d:65:61:cb:6e:54:53:
                    8b:c1:cd:b2:42:47:c0:0c:85:cb:f6:8a:c2:32:b2:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:78:85:36:53:AD:6E:92:21:07:4B:E5:35:1B:5A:46:EB:A8:4A:56
            X509v3 Authority Key Identifier:
                keyid:24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9f:a9:34:b9:24:2d:74:ac:b3:a3:a8:e9:ca:fc:0b:7a:4c:
         e6:04:50:79:a2:d9:87:5b:f3:f8:7f:19:10:70:62:db:2a:63:
         c3:8e:58:cc:3f:63:f4:71:c6:34:ee:ec:58:25:cb:97:e1:8d:
         a6:1f:dc:31:c8:a2:a0:26:7b:fd:e8:78:51:6c:57:32:82:7e:
         96:9a:90:76:a4:f3:54:cf:12:7c:76:9f:da:eb:d8:a5:db:6b:
         d3:05:7a:43:f6:b2:17:3b:18:a2:e4:09:07:04:fc:88:9b:8c:
         c8:3c:99:d7:9e:78:42:f6:14:ed:47:f6:5d:7d:f3:c0:fe:d0:
         e8:e2:17:28:ad:6b:c8:f9:0a:28:3f:cb:26:c3:ce:2c:f6:6f:
         1d:83:94:be:cf:09:80:29:2d:f8:df:6f:be:a6:45:44:4d:51:
         23:33:83:11:e7:a9:86:22:ba:cf:bf:be:14:18:89:25:e2:cb:
         e4:a2:7c:f2:7d:90:21:36:c9:eb:d8:be:31:ea:5d:99:48:a2:
         68:82:42:e5:3a:ca:f0:33:77:4b:b0:4a:4d:14:b9:59:35:a7:
         52:43:9b:04:bc:26:99:ec:c0:27:bd:d6:cb:f6:ab:b1:d5:fb:
         57:6c:89:b0:27:cc:7b:c7:a1:c6:b4:a9:d4:ad:58:a9:9c:01:
         3e:88:ab:fa
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUR6au1THZfsHDPWjR0E52jqXClmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDOTAxMDA4NjhDQzdFNUU0QURCNDIyMjUwMzI4NkY3
QkY0NDlBQTAeFw0yNTEyMjIwMzQzNTlaFw0yNTEyMjMwNTEwNTlaMDMxMTAvBgNV
BAMTKDI1Nzg4NTM2NTNBRDZFOTIyMTA3NEJFNTM1MUI1QTQ2RUJBODRBNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1luofkDVcdbBq14j6x/svNVJJ
GvGTrBu4l2aXWKajJN1A9l65LxWNTk8/pBRnziNK5LK4nPL6Rra8l5tD5aX2YOxE
TVSU8EI+F7QyyMbEVlUvysnMJUSxS2ifbh9LCV/CC6qqunw8LlYcPnFBDsFM4M25
vLvZqNcIPgnvwYUasHTxAer8A+a8KD/0kaoaPD2HuskZxOKIP2srxO0BIwoClD+G
1J8vZtLywZwyef8HnkzVg9WnpTmXVj3sIPSkjaq4ESC3ko6nnVq8aJAbrM1Q7BB2
zUhsrRgvzNKNpdvxUbAePBiaTinpDWVhy25UU4vBzbJCR8AMhcv2isIystSpAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUJXiFNlOtbpIhB0vlNRtaRuuoSlYwHwYDVR0j
BBgwFoAUJMkBAIaMx+XkrbQiJQMob3v0SaowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84VVVTR1hrTFBidkpOQ1ZuamluU1J6NEVOVzRRUXRzWk54b2YxOHFuZUhT
LzEvMjRDOTAxMDA4NjhDQzdFNUU0QURCNDIyMjUwMzI4NkY3QkY0NDlBQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNEM5MDEwMDg2OENDN0U1RTRB
REI0MjIyNTAzMjg2RjdCRjQ0OUFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhV
VVNHWGtMUGJ2Sk5DVm5qaW5TUno0RU5XNFFRdHNaTnhvZjE4cW5lSFMvMS8yNEM5
MDEwMDg2OENDN0U1RTRBREI0MjIyNTAzMjg2RjdCRjQ0OUFBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
uJ+pNLkkLXSss6Oo6cr8C3pM5gRQeaLZh1vz+H8ZEHBi2ypjw45YzD9j9HHGNO7s
WCXLl+GNph/cMciioCZ7/eh4UWxXMoJ+lpqQdqTzVM8SfHaf2uvYpdtr0wV6Q/ay
FzsYouQJBwT8iJuMyDyZ1554QvYU7Uf2XX3zwP7Q6OIXKK1ryPkKKD/LJsPOLPZv
HYOUvs8JgCkt+N9vvqZFRE1RIzODEeephiK6z7++FBiJJeLL5KJ88n2QITbJ69i+
MepdmUiiaIJC5TrK8DN3S7BKTRS5WTWnUkObBLwmmezAJ73Wy/arsdX7V2yJsCfM
e8ehxrSp1K1YqZwBPoir+g==
-----END CERTIFICATE-----
Generated at Mon Dec 22 16:12:24 2025 by rpki-client