This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
File:                     1A38A38646592073E79DD636D868C5FD813E2EAB.mft (raw, json)
Hash identifier:          KYXmQN+On5hfx7yt7WOD+Blx5VIERVlRCuxYsvclZMs=
Subject key identifier:   AA:F8:D7:8B:F0:AB:08:90:E4:71:DD:EE:43:63:73:21:37:99:2B:C8
Authority key identifier: 1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB
Certificate issuer:       /CN=1A38A38646592073E79DD636D868C5FD813E2EAB
Certificate serial:       049C260C49D0A4198A3412980D507360712B7D2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
Manifest number:          012B
Signing time:             Sat 20 Dec 2025 05:34:41 +0000
Manifest this update:     Sat 20 Dec 2025 05:29:41 +0000
Manifest next update:     Sun 21 Dec 2025 08:44:41 +0000
Files and hashes:         1: 3137372e35342e3136302e302f31392d3332203d3e203532393931.roa (hash: GRHtAw8IRXyDj2utvNYmAUBYsDsFFQzi1ziAHF/4w6I=)
                          2: 323830343a326665633a3a2f33322d313238203d3e203532393931.roa (hash: 3my3uv7ltgNut1ncZIKASqKiMcpFfLlntY163c+uZmc=)
                          3: 1A38A38646592073E79DD636D868C5FD813E2EAB.crl (hash: K4i/YJX1G+VtsORJFk9XKegFPtil2lwocdOMC6IjnrQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl
                          rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9c:26:0c:49:d0:a4:19:8a:34:12:98:0d:50:73:60:71:2b:7d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A38A38646592073E79DD636D868C5FD813E2EAB
        Validity
            Not Before: Dec 20 05:29:41 2025 GMT
            Not After : Dec 21 08:44:41 2025 GMT
        Subject: CN=AAF8D78BF0AB0890E471DDEE4363732137992BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:bd:70:cc:f5:ee:b8:7e:0e:da:14:d3:d9:
                    70:ac:0a:9b:77:ab:ef:d5:46:23:41:07:fd:14:8d:
                    fe:72:38:77:00:30:23:c3:57:97:33:8a:df:97:1b:
                    a7:98:74:94:37:90:dd:ef:37:09:a7:71:1a:e2:1c:
                    78:d2:ec:6d:e1:2b:5b:73:4b:22:e7:47:d1:b7:6f:
                    dd:39:03:30:d0:d7:de:65:27:ee:08:9b:2f:cb:3a:
                    7a:a6:3a:ef:c2:73:2d:f3:d4:ce:63:e4:e8:c9:37:
                    c4:2c:18:a2:c4:4a:8d:d0:76:d4:46:51:3e:73:c8:
                    40:22:23:28:8c:a9:ae:e8:6c:8b:c3:ac:2c:84:3f:
                    23:ef:71:e1:ce:29:3c:24:3e:70:86:83:cf:d9:80:
                    8a:b2:5d:8d:89:53:53:6e:d1:7c:70:6d:0c:95:dd:
                    0b:19:57:1f:96:4b:2a:cb:da:68:a9:6a:7a:a4:af:
                    4c:60:a2:09:1f:1e:b7:df:07:f2:7f:de:8c:e5:ba:
                    41:a6:65:ed:8c:56:93:94:c4:e7:f6:ba:5d:de:b2:
                    8c:d1:f5:87:09:6b:07:a8:64:71:56:33:d2:fa:b7:
                    db:62:a3:3a:05:ab:21:57:a6:7b:53:43:c3:8e:33:
                    ae:a7:44:5c:70:9a:34:e9:d8:42:7e:19:25:71:e0:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F8:D7:8B:F0:AB:08:90:E4:71:DD:EE:43:63:73:21:37:99:2B:C8
            X509v3 Authority Key Identifier:
                keyid:1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:79:ce:5e:8c:c7:1b:1e:66:ae:e7:cd:51:9c:a6:18:72:
         0a:70:6c:ef:48:47:25:16:8b:66:85:b6:eb:1d:29:e1:27:4a:
         7b:b6:15:9b:2e:4d:d9:d0:14:17:56:ad:8f:0b:d7:88:89:ae:
         89:bc:b1:10:ed:e7:14:19:c9:02:21:dd:86:a3:1b:08:50:90:
         60:41:ca:28:58:3e:1a:bf:cc:49:6e:0d:f5:ae:56:ff:8a:05:
         60:48:be:95:77:ac:20:f0:f2:6f:94:20:d6:23:9b:c8:9f:1c:
         41:36:9e:5f:47:bc:0e:f2:a8:8c:c6:0f:e9:de:8c:80:26:1f:
         8d:45:0b:89:19:36:38:7b:8f:d3:db:48:63:a5:5d:07:2e:80:
         a5:84:bd:04:74:2f:a6:f8:84:4c:ff:97:ea:f1:a3:f6:36:fd:
         be:3e:cf:e0:b2:79:1c:40:b0:0a:71:f3:10:0f:9b:ea:e9:68:
         e9:a5:cc:c7:fc:81:a2:be:d2:f7:06:62:be:8f:5c:76:75:83:
         aa:f6:bf:f6:92:c2:b9:27:5c:6c:9a:04:fe:52:8b:c7:01:96:
         04:4c:ba:09:01:79:bb:32:2b:f2:2a:fb:51:b0:4c:72:f9:2d:
         b6:0a:65:3b:f2:22:e1:88:bf:5c:13:cb:44:dc:7b:81:9a:fa:
         c6:ba:44:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBJwmDEnQpBmKNBKYDVBzYHErfS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEzOEEzODY0NjU5MjA3M0U3OURENjM2RDg2OEM1RkQ4
MTNFMkVBQjAeFw0yNTEyMjAwNTI5NDFaFw0yNTEyMjEwODQ0NDFaMDMxMTAvBgNV
BAMTKEFBRjhENzhCRjBBQjA4OTBFNDcxRERFRTQzNjM3MzIxMzc5OTJCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5r1wzPXuuH4O2hTT2XCsCpt3
q+/VRiNBB/0Ujf5yOHcAMCPDV5czit+XG6eYdJQ3kN3vNwmncRriHHjS7G3hK1tz
SyLnR9G3b905AzDQ195lJ+4Imy/LOnqmOu/Ccy3z1M5j5OjJN8QsGKLESo3QdtRG
UT5zyEAiIyiMqa7obIvDrCyEPyPvceHOKTwkPnCGg8/ZgIqyXY2JU1Nu0XxwbQyV
3QsZVx+WSyrL2mipanqkr0xgogkfHrffB/J/3ozlukGmZe2MVpOUxOf2ul3esozR
9YcJaweoZHFWM9L6t9tiozoFqyFXpntTQ8OOM66nRFxwmjTp2EJ+GSVx4LdBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqvjXi/CrCJDkcd3uQ2NzITeZK8gwHwYDVR0j
BBgwFoAUGjijhkZZIHPnndY22GjF/YE+LqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUc0a2tvakNkdmpORlQzd3RwcWhualR6R2E2TUhTeHdXejExRGppWGh5
enkvMC8xQTM4QTM4NjQ2NTkyMDczRTc5REQ2MzZEODY4QzVGRDgxM0UyRUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMzhBMzg2NDY1OTIwNzNF
NzlERDYzNkQ4NjhDNUZEODEzRTJFQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUc0a2tvakNkdmpORlQzd3RwcWhualR6R2E2TUhTeHdXejExRGppWGh5enkvMC8x
QTM4QTM4NjQ2NTkyMDczRTc5REQ2MzZEODY4QzVGRDgxM0UyRUFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHlh5zl6MxxseZq7nzVGcphhyCnBs70hHJRaLZoW26x0p4SdKe7YVmy5N2dAU
F1atjwvXiImuibyxEO3nFBnJAiHdhqMbCFCQYEHKKFg+Gr/MSW4N9a5W/4oFYEi+
lXesIPDyb5Qg1iObyJ8cQTaeX0e8DvKojMYP6d6MgCYfjUULiRk2OHuP09tIY6Vd
By6ApYS9BHQvpviETP+X6vGj9jb9vj7P4LJ5HECwCnHzEA+b6ulo6aXMx/yBor7S
9wZivo9cdnWDqva/9pLCuSdcbJoE/lKLxwGWBEy6CQF5uzIr8ir7UbBMcvkttgpl
O/Ii4Yi/XBPLRNx7gZr6xrpESA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:45 2025 by rpki-client