This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
File:                     70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft (raw, json)
Hash identifier:          mhniqgZDwF/XDerEU5o/D24yjUwZ86saHqh5oEJNlE4=
Subject key identifier:   AE:33:69:00:84:0D:CE:BC:31:24:FC:8C:F5:2A:43:45:BD:C2:7F:30
Authority key identifier: 70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D
Certificate issuer:       /CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
Certificate serial:       5735D2AB42789E6B104F73DF18AAD34C09F5CE88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
Manifest number:          0117
Signing time:             Sat 20 Dec 2025 01:00:40 +0000
Manifest this update:     Sat 20 Dec 2025 00:55:40 +0000
Manifest next update:     Sun 21 Dec 2025 03:10:40 +0000
Files and hashes:         1: 70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl (hash: PlrbeidTbKqSZ1iBprti4b5muS6ufVrOGYxhNUDrKJg=)
                          2: 323830343a333966383a3a2f33322d3438203d3e20323636303632.roa (hash: pg8tszNCvNEb7xkcd+iWygWpZOdy2lv/1W5Ktjs9OaU=)
                          3: 34352e362e3132382e302f32322d3234203d3e20323636303632.roa (hash: UwrB4PYZnVsTXnVGkOXnLOjv89DKTZ26pmpB8/AFHuA=)
                          4: 34352e342e3133322e302f32322d3234203d3e20323636303632.roa (hash: hg4Pm0EbDY/iWODtioTWTWp/IGSoxMd1Rjvcv3JDf7k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl
                          rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:35:d2:ab:42:78:9e:6b:10:4f:73:df:18:aa:d3:4c:09:f5:ce:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
        Validity
            Not Before: Dec 20 00:55:40 2025 GMT
            Not After : Dec 21 03:10:40 2025 GMT
        Subject: CN=AE336900840DCEBC3124FC8CF52A4345BDC27F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:37:d0:00:d5:6b:76:e0:cc:99:44:ad:d0:
                    3d:3f:0b:7f:53:4b:d2:16:78:fb:77:7c:77:b6:a5:
                    f3:52:ea:ef:a9:14:8e:34:2f:11:12:65:f0:c1:a3:
                    20:ba:df:f9:ea:20:58:65:d5:cd:49:ae:73:49:91:
                    29:03:9d:a7:3e:4c:1a:57:3f:eb:dd:64:1f:8b:d7:
                    ae:d7:56:4a:01:ef:e1:2f:75:c2:6b:48:71:bf:ea:
                    e5:f4:2c:11:a7:b4:26:aa:9e:17:e1:27:43:8a:8b:
                    c0:af:eb:e5:89:95:85:b6:92:e4:3e:43:97:06:7b:
                    e0:c2:5b:0e:38:fc:92:51:23:17:e0:04:c0:5b:d3:
                    01:3c:a8:d6:62:35:bb:50:42:62:6d:58:db:c8:56:
                    c0:d1:56:60:32:99:03:18:2b:ad:96:6c:ce:de:82:
                    d0:a1:6a:47:4d:2b:46:83:33:1a:5f:64:fb:21:59:
                    9c:ac:03:4a:64:83:93:72:01:15:3f:47:dc:e0:39:
                    40:55:d9:2e:1b:8c:b6:ff:52:c6:1b:41:8a:d4:c1:
                    da:ea:48:76:9a:4d:86:fb:7d:b5:03:48:cf:41:0e:
                    e3:34:f7:43:81:e2:1a:0e:3d:87:ff:65:31:3e:0e:
                    c2:f0:e8:45:b7:8b:df:c1:ef:e9:a5:7e:e6:94:53:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:33:69:00:84:0D:CE:BC:31:24:FC:8C:F5:2A:43:45:BD:C2:7F:30
            X509v3 Authority Key Identifier:
                keyid:70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:f8:13:21:f4:7b:5b:74:b6:75:aa:0a:c1:e1:27:b9:04:
         75:35:e6:79:ca:26:84:7b:01:a4:9f:10:bc:cb:89:19:6a:06:
         0a:4e:d6:17:c4:d1:0f:aa:36:94:b1:67:00:14:8a:8d:6f:36:
         ae:dd:78:fb:2b:2d:26:86:8a:e9:26:c4:6c:ad:5c:5c:27:49:
         44:b8:56:0f:d4:18:93:3e:a8:be:c4:74:50:09:3e:f8:43:7e:
         78:af:84:f1:5f:bc:c2:9b:5d:6a:5a:ca:64:c6:7d:b8:c0:34:
         f1:b2:d3:a0:f5:9c:c0:3b:1b:54:d3:38:ac:94:81:53:d1:d1:
         03:88:c1:45:67:1e:04:4e:eb:cf:a9:e6:9a:a8:59:91:75:6b:
         ad:71:53:61:62:33:35:e1:47:e3:40:51:5e:38:c5:4b:62:f8:
         81:84:94:be:4d:d4:35:1b:fc:4a:71:fd:52:ad:4c:a4:65:df:
         95:27:8b:08:dc:60:c1:c3:37:c0:bd:8c:ef:6e:e5:fc:e6:d6:
         f4:f5:67:5b:c5:7b:25:2f:5e:e0:7b:8c:6b:4c:9d:66:77:1a:
         8b:e9:f8:bf:39:51:52:82:84:7c:5d:ac:bc:fd:3f:c8:74:6b:
         63:e9:5f:9a:c5:3d:08:34:5a:04:ec:45:f5:a4:0c:ed:c3:2b:
         2c:1c:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:16:25 2025 by rpki-client