This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
File:                     21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft (raw, json)
Hash identifier:          bg6amvNMuryMGilW0XHAMhho8H1CXEDoltgY6xwWG/I=
Subject key identifier:   A8:43:87:FA:B3:50:B5:69:8A:44:FC:0E:A6:3B:63:FA:9E:19:8E:62
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       64B668A2BFBDF07B31C07364F58969FAA432639E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
Manifest number:          0E
Signing time:             Sat 20 Dec 2025 09:54:44 +0000
Manifest this update:     Sat 20 Dec 2025 09:49:44 +0000
Manifest next update:     Sun 21 Dec 2025 11:27:44 +0000
Files and hashes:         1: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (hash: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=)
                          2: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs=)
                          3: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (hash: jIt7K6cMDluL2ivR2MlC/lVEKDeY8cBnN5Cq1s8X470=)
                          4: 3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (hash: msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=)
                          5: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (hash: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs=)
                          6: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=)
                          7: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg=)
                          8: 323830343a313164633a653030303a3a2f33362d3336203d3e20323633343434.roa (hash: sdWDdEzXTllJ+b9NYdd0B6N/n2HV3FuMKb/yJx7dh8k=)
                          9: 323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (hash: 47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=)
                          10: 3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (hash: rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=)
                          11: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (hash: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8=)
                          12: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: UTzGGjVGwAzOOUF7F0ZvNmPm5rv5LvLa1K3tF9sa8g4=)
                          13: 21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl (hash: N18/NsylhCR5yexfz7yZsDg0TWTVUNKoWL/vlPWgqFU=)
                          14: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (hash: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI=)
                          15: 3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (hash: lUN+QHTKJKyHBU3vjixy9YwVPc/E7x0KU1Uy3nCCZ9k=)
                          16: 3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa (hash: YrSyty5bGR1uRDb8Pc1OIQ8F/gdjbsfNhN9xHOiu3FA=)
                          17: 3137372e39312e3136322e302f32332d3233203d3e20323633343434.roa (hash: qfhSga2IMpoaAnUO25wNSoxFtOa32oTy1r7EZiIHqUA=)
                          18: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (hash: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo=)
                          19: 3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (hash: RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=)
                          20: 3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (hash: 8AGZo5c6QxM495LEDMYWHMa04vhnyj+L2PBY1psr7lo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 11:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:68:a2:bf:bd:f0:7b:31:c0:73:64:f5:89:69:fa:a4:32:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 20 09:49:44 2025 GMT
            Not After : Dec 21 11:27:44 2025 GMT
        Subject: CN=A84387FAB350B5698A44FC0EA63B63FA9E198E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:c7:e0:1c:fa:89:7c:a1:d0:6f:41:b0:c6:
                    4f:c4:29:af:f9:7c:37:ec:a2:e4:f7:1d:b6:f0:c9:
                    24:c1:4f:a9:be:c8:ae:51:45:c2:b8:21:5f:d0:6f:
                    52:b7:29:f2:0e:94:14:e0:e5:ea:ff:46:cd:46:ad:
                    d7:7d:f1:fe:73:2a:6e:d1:cf:1e:bb:59:e2:d6:79:
                    6b:66:f8:8e:4a:4a:c0:6f:26:41:9e:15:ef:14:fa:
                    bc:3d:e9:4e:b2:b3:0d:35:b4:17:b2:fd:77:9d:05:
                    ef:31:c0:7e:9b:1d:7f:86:12:4e:eb:2e:38:bf:13:
                    88:e5:50:b4:72:05:b6:14:51:e9:f8:11:b8:94:0f:
                    24:ac:78:05:0f:63:83:c3:84:35:54:28:32:ae:f9:
                    76:71:e1:71:1f:4e:1f:6a:5a:71:3b:86:27:a8:e6:
                    21:d2:76:10:cb:cf:38:0f:3e:0d:9b:66:6a:6a:c4:
                    cd:ef:76:38:8c:1d:be:30:f8:9e:ac:ba:91:ad:2a:
                    22:8f:3b:c2:a9:45:2d:59:7d:de:83:ed:d9:a4:ff:
                    da:8f:a9:10:33:ce:33:31:8a:f2:7f:16:98:1f:c4:
                    91:0e:40:74:76:6c:ba:b7:15:9a:5e:36:24:c4:f7:
                    ff:46:c1:81:f1:07:0c:ac:72:bf:25:d0:cd:fd:f0:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:87:FA:B3:50:B5:69:8A:44:FC:0E:A6:3B:63:FA:9E:19:8E:62
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:f3:46:97:08:5e:01:70:09:ce:9f:e8:be:12:52:06:b1:
         ca:b6:92:23:3d:eb:cf:17:82:5a:31:43:48:1e:73:58:25:16:
         3f:b0:bc:a1:63:3a:20:ab:92:a7:d6:ea:1f:ad:d9:75:b1:d4:
         14:51:48:95:46:fd:4a:cf:5e:68:ec:b5:b8:94:8e:94:4a:52:
         80:b0:66:c4:2f:af:e2:8a:10:aa:8e:74:d8:dd:ed:81:95:c0:
         09:21:fd:92:65:0e:cc:ff:79:5b:f9:3c:c7:04:55:05:c0:2f:
         e0:f9:40:97:c0:a7:de:36:2e:93:e4:61:ab:6c:09:4b:37:a6:
         c5:5f:f1:b9:7d:64:bb:84:c6:f4:3b:da:1b:8d:be:c5:2c:af:
         5f:3a:25:87:6d:56:e7:3c:54:2e:de:88:a1:bf:e0:70:d3:79:
         be:46:5c:dc:a4:36:e2:23:b7:27:c0:87:86:52:5e:15:68:50:
         8f:a8:ed:c7:76:82:65:4e:89:c9:d9:b9:6b:72:75:fe:32:d9:
         b1:cd:a9:b5:6c:28:fb:96:be:95:eb:98:08:5e:2d:38:ed:f8:
         ff:88:3e:25:5e:e5:9f:7d:40:45:c2:90:ba:dc:c1:bc:ce:27:
         f4:40:52:97:08:e9:ca:2a:56:af:c5:93:ee:33:f6:d5:55:2e:
         1d:a0:a1:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZLZoor+98HsxwHNk9Ylp+qQyY54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3
MDE4NDgwRDAeFw0yNTEyMjAwOTQ5NDRaFw0yNTEyMjExMTI3NDRaMDMxMTAvBgNV
BAMTKEE4NDM4N0ZBQjM1MEI1Njk4QTQ0RkMwRUE2M0I2M0ZBOUUxOThFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp88fgHPqJfKHQb0Gwxk/EKa/5
fDfsouT3HbbwySTBT6m+yK5RRcK4IV/Qb1K3KfIOlBTg5er/Rs1Grdd98f5zKm7R
zx67WeLWeWtm+I5KSsBvJkGeFe8U+rw96U6ysw01tBey/XedBe8xwH6bHX+GEk7r
Lji/E4jlULRyBbYUUen4EbiUDySseAUPY4PDhDVUKDKu+XZx4XEfTh9qWnE7hieo
5iHSdhDLzzgPPg2bZmpqxM3vdjiMHb4w+J6supGtKiKPO8KpRS1Zfd6D7dmk/9qP
qRAzzjMxivJ/FpgfxJEOQHR2bLq3FZpeNiTE9/9GwYHxBwyscr8l0M398NQvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqEOH+rNQtWmKRPwOpjtj+p4ZjmIwHwYDVR0j
BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB
QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtOdUMvMC8y
MTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmx3zRpcIXgFwCc6f6L4SUgaxyraSIz3rzxeCWjFDSB5zWCUWP7C8oWM6IKuS
p9bqH63ZdbHUFFFIlUb9Ss9eaOy1uJSOlEpSgLBmxC+v4ooQqo502N3tgZXACSH9
kmUOzP95W/k8xwRVBcAv4PlAl8Cn3jYuk+Rhq2wJSzemxV/xuX1ku4TG9DvaG42+
xSyvXzolh21W5zxULt6Iob/gcNN5vkZc3KQ24iO3J8CHhlJeFWhQj6jtx3aCZU6J
ydm5a3J1/jLZsc2ptWwo+5a+leuYCF4tOO34/4g+JV7ln31ARcKQutzBvM4n9EBS
lwjpyipWr8WT7jP21VUuHaChLA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:24:29 2025 by rpki-client