This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
File:                     CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft (raw, json)
Hash identifier:          u7wN6d82pX3gc+A/S3AJ4oc3KuvP8d27Ol5pLbwHGgg=
Subject key identifier:   08:60:6B:16:28:E9:72:22:77:41:BB:CD:4F:6F:12:BB:FC:13:97:44
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       83A8CF8F2B9F8B6320B6D8E946E866E2B032AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
Manifest number:          02AB
Signing time:             Fri 19 Dec 2025 19:13:04 +0000
Manifest this update:     Fri 19 Dec 2025 19:08:04 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:04 +0000
Files and hashes:         1: 3138372e38342e34362e302f32342d3234203d3e203533303532.roa (hash: nXz/KIfSPddgcWo+NtatqCl+xZjVvZgyj/lvyTHw/C4=)
                          2: CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl (hash: kYlCrEaW5elFAziRCNEUgCKAdDFkclP5jsBdE4Rp/B8=)
                          3: 3138372e38342e34352e302f32342d3234203d3e203533303532.roa (hash: 900GwKoLxuywtHi2SqZ8G9+u+NIBylaMovKRM4pBjzA=)
                          4: 3138372e38342e34362e302f32332d3233203d3e203533303532.roa (hash: UClQSg5d2LzxtVMA205cUo5yxx7LvOnaqlInimQg1EE=)
                          5: 3138372e38342e33342e302f32342d3234203d3e203533303532.roa (hash: lmgeY7fAaR10ssIywHoCCyP8LGBH5UNBrGPC7eZ4zQc=)
                          6: 323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa (hash: p8Q9xfZr584df8txYSR0rLNpxjNicadK5aC0oskhtTk=)
                          7: 3138372e38342e34342e302f32322d3232203d3e203533303532.roa (hash: 9TZ27uObGwwd8p5TrpjhMQuSRIxIL+nppt+AbR+BmNI=)
                          8: 3138372e38342e34332e302f32342d3234203d3e203533303532.roa (hash: 9wBAR6EySCOoaeFgP1A76cbE58LPawf6gcKLInE4pnU=)
                          9: 3138372e38342e34342e302f32342d3234203d3e203533303532.roa (hash: 9Uw/JLq355+siGWWAMU/CgDbUsZIqm/MEzVaCAYKBtk=)
                          10: 3138372e38342e34342e302f32332d3233203d3e203533303532.roa (hash: xD4wdwwwR+oV8RsTzFOurC+sut3yZ7juddhGug2RQrw=)
                          11: 3138372e38342e33322e302f32322d3232203d3e203533303532.roa (hash: vOhIqgDTIadDaon1gt7fCVy/mpXJQkIz6qG3ekLd3T0=)
                          12: 3138372e38342e34372e302f32342d3234203d3e203533303532.roa (hash: ptMqnRj8LqtTtDG+YnpbMJF32fawipWNhijOzS4MOEU=)
                          13: 3138372e38342e33332e302f32342d3234203d3e203533303532.roa (hash: btC3yb2gw201qNYvn2GqTUoBvBbe/gJJzsej3Db9zs4=)
                          14: 323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (hash: i+HC1DDB2921eTVEjjqDNcq5RxoE+kOgojnIe172JKk=)
                          15: 323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (hash: Z8VMqKtS6c8oQSl/sZyuGYDCXY6Slrmo17tssEBJDrI=)
                          16: 323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (hash: bJTlkydbXUGBFokn1m1/Z4uHnSRjk6Hkb7sXiET52kk=)
                          17: 3138372e38342e33352e302f32342d3234203d3e203533303532.roa (hash: bZVmKTe4oncs3dZRChOZ0UYNu+g+uqMW4C2vDaiETUQ=)
                          18: 323830343a326634383a3a2f33352d3335203d3e203533303532.roa (hash: 6PLeUvtT+KVe+DrjTNHr6wre2GRXcTCr12nAkWKXpjw=)
                          19: 3138372e38342e33322e302f32342d3234203d3e203533303532.roa (hash: g5ktHwBrPb8+EV88G9qM6/0Gv9hItwrPCf8Q+6f8vzk=)
                          20: 3138372e38342e33342e302f32332d3233203d3e203533303532.roa (hash: u32/uZ4yBcFZXvw1hLPy5wYAoSgbMpUkCDwo8kvjvVg=)
                          21: 3138372e38342e33322e302f32332d3233203d3e203533303532.roa (hash: EjrCf60Rtu0VafIasVQW6Z1H0RWmHru/DLLXdifrZ5U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            83:a8:cf:8f:2b:9f:8b:63:20:b6:d8:e9:46:e8:66:e2:b0:32:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Dec 19 19:08:04 2025 GMT
            Not After : Dec 20 22:02:04 2025 GMT
        Subject: CN=08606B1628E972227741BBCD4F6F12BBFC139744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:88:3e:69:31:83:97:29:a8:d2:46:bb:8c:65:
                    d4:26:cc:14:88:76:5b:ff:38:b7:01:f6:f6:40:8f:
                    23:71:cc:a4:56:83:6f:8f:a2:12:4d:77:20:ea:c5:
                    be:1f:8f:6e:49:7a:87:69:98:6f:ac:7c:16:5a:ae:
                    5a:1c:04:f1:83:48:79:c5:4c:68:6f:20:4d:1c:7b:
                    76:f2:ff:e9:86:64:09:bb:3b:2f:78:4b:42:e8:c1:
                    27:26:89:fa:32:5a:28:65:3a:b7:5f:41:05:82:f0:
                    4c:84:f2:b3:95:ea:b2:dc:3b:83:c5:36:7a:25:4d:
                    aa:bf:30:fe:42:20:12:25:16:98:6d:21:70:29:62:
                    38:5e:5f:de:7f:09:d8:48:53:47:d3:db:33:7c:53:
                    34:52:b5:0e:d3:59:cd:3e:cb:02:46:74:8b:1a:64:
                    73:2c:e6:e8:51:79:ef:23:6d:21:5c:0e:d2:17:95:
                    92:de:10:ce:5e:07:6a:9d:2a:bd:a5:92:23:70:64:
                    4d:f3:44:bb:49:58:ef:11:1b:18:fa:50:db:ce:97:
                    e9:6a:47:62:e3:42:97:55:3a:d7:bf:ad:60:11:5a:
                    ce:a2:98:bd:07:2d:12:49:af:16:cd:fb:3f:d7:4c:
                    de:13:ab:93:3d:cd:bd:9c:f6:a8:fd:2d:9a:58:c1:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:60:6B:16:28:E9:72:22:77:41:BB:CD:4F:6F:12:BB:FC:13:97:44
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:dd:74:50:46:81:5a:2a:fb:04:e3:a0:fa:9e:65:19:70:
         61:7b:92:60:f6:8f:ac:eb:8e:a3:08:98:10:93:c9:eb:22:c7:
         22:0e:f1:f0:f2:66:59:86:26:5c:7d:25:77:75:e5:2a:2e:71:
         f4:d6:04:5a:56:9f:0f:6c:85:03:07:3d:56:26:8b:f9:e9:ba:
         39:02:70:be:e6:26:d8:f5:fd:0a:ad:bd:f3:ed:77:fd:91:13:
         ce:d4:1e:53:f4:5e:87:ae:0b:58:93:97:d7:72:ea:43:25:85:
         a9:2d:3b:e6:f4:cb:90:6c:7b:cc:b5:40:e7:04:c2:9f:a6:04:
         cf:ba:44:06:2a:c5:75:4d:17:a8:12:22:ed:fb:02:d7:82:23:
         37:40:47:06:00:a5:79:1e:e2:c2:a9:cf:be:c9:43:6f:3f:0d:
         96:bc:13:2a:4e:b6:4f:44:c3:c6:08:4c:0d:74:23:dd:47:e3:
         09:f3:ff:89:60:3a:7e:f8:f7:fa:63:03:f6:a1:c5:d4:5d:4a:
         41:b0:ad:22:8f:ab:dd:2c:a9:32:69:da:37:f2:52:10:5e:9f:
         0d:76:ff:1c:f4:6f:ba:92:a4:44:68:64:0e:7c:e0:bf:42:63:
         13:eb:88:d4:6d:0f:42:9d:73:10:b4:41:95:fa:a1:8d:20:93:
         bb:8d:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:06:10 2025 by rpki-client