This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
File:                     CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json)
Hash identifier:          rzHqHobyG2SJCcI1CrxGpDlzoK90GQjRllC6gtPz5y0=
Subject key identifier:   25:9E:A8:4E:7B:B1:DA:9D:B0:A2:5C:B6:73:AA:FF:E5:38:A0:82:3B
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       1E1C6C15390E552083D5AFB61118350F34DE3A96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
Manifest number:          0350
Signing time:             Mon 29 Dec 2025 15:20:01 +0000
Manifest this update:     Mon 29 Dec 2025 15:15:01 +0000
Manifest next update:     Tue 30 Dec 2025 17:24:01 +0000
Files and hashes:         1: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=)
                          2: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: 6EuHrmjV1Yyhv9a6uurMhtoOlt5XIFr+SZzmxKNC8WU=)
                          3: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=)
                          4: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=)
                          5: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=)
                          6: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=)
                          7: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=)
                          8: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=)
                          9: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 17:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1c:6c:15:39:0e:55:20:83:d5:af:b6:11:18:35:0f:34:de:3a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Dec 29 15:15:01 2025 GMT
            Not After : Dec 30 17:24:01 2025 GMT
        Subject: CN=259EA84E7BB1DA9DB0A25CB673AAFFE538A0823B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:08:c7:30:7c:8b:28:b7:3f:bb:a4:1a:be:
                    76:f2:8b:27:b1:a9:32:33:1e:d1:f7:7a:5e:4e:9e:
                    48:30:0b:9e:80:d0:64:03:1c:85:ca:3b:11:da:a6:
                    b1:8a:eb:3e:e1:a3:5f:ed:af:e4:30:2e:97:88:b9:
                    f9:50:13:f2:2a:59:38:a7:c3:c3:9b:6d:a1:50:17:
                    61:66:a3:19:3d:84:4a:37:14:ce:12:37:0a:f1:66:
                    f8:72:72:bc:bc:04:28:db:a5:d4:98:f9:e2:1d:b1:
                    2e:ce:94:31:40:48:18:d1:63:3d:41:86:e5:9a:e6:
                    8b:ce:7c:2f:47:75:f6:81:98:bc:49:89:4a:49:72:
                    50:f4:25:b5:75:f3:6d:36:72:d6:80:50:33:af:47:
                    11:6a:5b:c2:78:55:f4:b1:6e:56:83:54:43:35:64:
                    70:f3:32:3c:37:f6:24:30:f6:60:ac:4d:aa:46:46:
                    ad:17:fa:73:41:41:b3:e9:c0:a4:78:68:5b:cd:0b:
                    c4:e3:2f:b7:40:08:6e:48:28:a0:5b:c9:b2:c1:1d:
                    d2:c0:a1:79:76:24:6e:53:7e:05:9b:f9:5f:93:0a:
                    9a:c6:38:fd:d4:8a:fc:1d:03:f5:0b:19:d3:86:0f:
                    f2:7b:0f:0c:8e:09:80:84:96:ca:31:a4:a9:d7:bb:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:A8:4E:7B:B1:DA:9D:B0:A2:5C:B6:73:AA:FF:E5:38:A0:82:3B
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:d2:d6:d8:92:27:42:30:b3:db:53:ab:69:af:33:59:43:
         4f:20:d8:94:fe:41:c7:5d:29:91:36:98:56:bf:00:e5:b9:92:
         f2:ef:77:17:cc:57:98:85:b3:0a:98:af:3c:10:b9:01:15:10:
         36:7f:1f:ba:dc:7b:8d:10:80:eb:65:98:27:73:9b:08:92:e5:
         16:de:14:25:94:99:aa:e4:af:24:8d:96:28:f7:f6:bc:7b:9f:
         5f:88:f5:19:df:c4:a1:dd:eb:4f:c1:4b:d3:76:4f:ba:73:38:
         23:09:aa:47:04:b8:0d:b8:bc:59:74:1f:5c:3d:02:36:5c:5b:
         0c:75:5b:c4:41:63:25:52:04:9d:cc:44:dc:62:dc:1f:cb:6e:
         45:4a:d9:f1:48:3e:4c:4a:50:67:6e:6b:0e:bd:ac:49:18:70:
         67:88:84:be:6a:68:7b:d7:65:3c:b9:da:ec:25:cc:e6:98:fb:
         9f:7f:d1:01:90:f1:f8:d3:e6:b4:6b:09:24:df:7c:02:ff:6a:
         9d:85:c9:f8:77:96:94:e4:89:9e:5b:57:aa:57:d5:d8:b2:7b:
         b7:81:1d:50:1d:4e:3c:19:4f:e3:49:e0:ab:d6:da:dc:f5:80:
         f7:89:24:3f:79:0d:d4:69:54:dd:dc:29:9d:03:4d:bf:d9:99:
         5e:9a:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:45:11 2025 by rpki-client