This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
File:                     D04A2BA80F368597BB2029B3E31276E45382A900.mft (raw, json)
Hash identifier:          lLcMQr/RRKSi9F/vvvSnBmflTORvTQPnkAB6usUfK+w=
Subject key identifier:   58:2F:DD:9B:46:5D:3A:ED:39:F3:52:07:E3:23:DF:0A:3A:A4:32:BC
Authority key identifier: D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00
Certificate issuer:       /CN=D04A2BA80F368597BB2029B3E31276E45382A900
Certificate serial:       1BADE4A795C5CB0BA7CCD732E64FA59715C88856
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
Manifest number:          030B
Signing time:             Fri 19 Dec 2025 19:07:51 +0000
Manifest this update:     Fri 19 Dec 2025 19:02:51 +0000
Manifest next update:     Sat 20 Dec 2025 19:12:51 +0000
Files and hashes:         1: D04A2BA80F368597BB2029B3E31276E45382A900.crl (hash: HLNj+KSUeiKmXWfiYspindG2QQfwY2te+y1kXfcDEtw=)
                          2: 323830343a313466383a3a2f33322d3438203d3e20323633333632.roa (hash: pssXzzkZaq3UsM851rUzbCGW51xSnEtBsco0X5hWz5E=)
                          3: 3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa (hash: b9wsKYq5erHquZE6Op6Jcbt6QAtYV75xNDBj0athA44=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl
                          rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ad:e4:a7:95:c5:cb:0b:a7:cc:d7:32:e6:4f:a5:97:15:c8:88:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04A2BA80F368597BB2029B3E31276E45382A900
        Validity
            Not Before: Dec 19 19:02:51 2025 GMT
            Not After : Dec 20 19:12:51 2025 GMT
        Subject: CN=582FDD9B465D3AED39F35207E323DF0A3AA432BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:d6:51:17:5f:7d:0e:b5:c4:8f:0b:2c:25:
                    c2:f9:d7:45:b3:9d:ca:6a:f2:8e:fb:89:7e:5a:ab:
                    6a:37:89:97:39:8b:7f:71:c0:a6:ff:1d:14:78:39:
                    8c:be:79:35:d2:cd:0e:95:21:1c:cf:e4:7f:4a:38:
                    26:d9:a6:7e:90:7a:63:e6:9f:77:22:f1:67:51:ef:
                    27:39:b0:d9:c6:23:32:6a:cd:bc:c2:e0:05:c5:e1:
                    02:b8:e8:b4:8b:21:63:fc:00:1c:0d:34:e9:49:12:
                    f8:29:82:32:a0:1f:32:56:94:2c:b4:53:41:b0:06:
                    a0:27:04:87:61:6a:cc:b5:37:28:ad:70:72:5a:7b:
                    e7:58:19:01:f1:cf:6c:bd:fc:dc:5c:fd:2b:38:07:
                    50:75:f6:46:4e:27:eb:3d:c2:7e:01:8c:06:2e:e0:
                    cd:76:b5:12:2e:33:45:7f:8a:86:d8:ff:d5:60:a9:
                    c3:c2:7a:b4:75:9a:98:8a:99:77:7d:50:67:f8:2c:
                    47:d9:b2:99:73:dd:98:fb:c2:f8:71:c9:ce:28:af:
                    d0:b6:d2:09:84:e1:a8:12:bf:7a:eb:78:c2:cb:4a:
                    0c:3f:33:0e:89:25:fc:7a:99:40:a1:d7:1c:b3:d5:
                    50:e9:48:74:8c:58:89:37:91:f5:ee:ac:5b:3e:23:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:DD:9B:46:5D:3A:ED:39:F3:52:07:E3:23:DF:0A:3A:A4:32:BC
            X509v3 Authority Key Identifier:
                keyid:D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:cb:de:ec:7c:c8:0e:62:c2:d5:03:f3:e2:91:0a:ea:37:
         e5:22:88:88:16:6a:e1:2a:ef:7a:22:2b:4c:bb:97:0a:ca:0d:
         a5:b1:13:50:3a:1f:e7:64:4b:43:75:ec:27:30:45:9c:ef:47:
         17:cd:8a:78:ef:00:93:f0:5a:8f:8f:27:18:13:94:c1:88:44:
         ef:7a:51:1a:fa:76:0f:ba:4e:35:8b:ca:d6:32:64:32:79:18:
         a7:2e:8b:9d:5a:74:0d:92:83:1f:4f:dc:85:86:65:35:a5:98:
         46:cd:b5:4c:e5:71:20:01:7f:68:06:be:37:18:27:12:8c:24:
         d8:fa:66:eb:ef:c5:4c:4e:ab:33:5d:56:b5:69:85:60:83:2d:
         24:cf:be:c1:80:6b:92:f3:5d:98:68:d7:00:75:94:22:42:5d:
         51:d2:29:96:7d:4f:9c:71:9a:7c:a8:67:46:82:31:9e:fd:ea:
         f8:03:67:d3:4b:18:57:d3:e9:e3:a4:ae:08:06:e9:35:78:e3:
         20:cf:bd:a4:ca:5e:85:cd:80:9b:52:1c:87:e8:50:5c:0d:58:
         74:b2:af:47:30:11:35:a8:f1:d9:07:4e:92:06:d9:6f:9c:c7:
         8b:8b:3b:26:21:f3:02:6f:af:77:7f:39:fe:41:b1:0b:64:a4:
         83:07:be:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG63kp5XFywunzNcy5k+llxXIiFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0QTJCQTgwRjM2ODU5N0JCMjAyOUIzRTMxMjc2RTQ1
MzgyQTkwMDAeFw0yNTEyMTkxOTAyNTFaFw0yNTEyMjAxOTEyNTFaMDMxMTAvBgNV
BAMTKDU4MkZERDlCNDY1RDNBRUQzOUYzNTIwN0UzMjNERjBBM0FBNDMyQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTtZRF199DrXEjwssJcL510Wz
ncpq8o77iX5aq2o3iZc5i39xwKb/HRR4OYy+eTXSzQ6VIRzP5H9KOCbZpn6QemPm
n3ci8WdR7yc5sNnGIzJqzbzC4AXF4QK46LSLIWP8ABwNNOlJEvgpgjKgHzJWlCy0
U0GwBqAnBIdhasy1NyitcHJae+dYGQHxz2y9/Nxc/Ss4B1B19kZOJ+s9wn4BjAYu
4M12tRIuM0V/iobY/9VgqcPCerR1mpiKmXd9UGf4LEfZsplz3Zj7wvhxyc4or9C2
0gmE4agSv3rreMLLSgw/Mw6JJfx6mUCh1xyz1VDpSHSMWIk3kfXurFs+I7nlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWC/dm0ZdOu0581IH4yPfCjqkMrwwHwYDVR0j
BBgwFoAU0EorqA82hZe7ICmz4xJ25FOCqQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUs3bTdKM25ZdTRIb0Z0eXJSRnNROFFHN0dzRXFvOXNzUXFjM05kdFJR
QTQvMC9EMDRBMkJBODBGMzY4NTk3QkIyMDI5QjNFMzEyNzZFNDUzODJBOTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNEEyQkE4MEYzNjg1OTdC
QjIwMjlCM0UzMTI3NkU0NTM4MkE5MDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUs3bTdKM25ZdTRIb0Z0eXJSRnNROFFHN0dzRXFvOXNzUXFjM05kdFJRQTQvMC9E
MDRBMkJBODBGMzY4NTk3QkIyMDI5QjNFMzEyNzZFNDUzODJBOTAwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMUrL3ux8yA5iwtUD8+KRCuo35SKIiBZq4SrveiIrTLuXCsoNpbETUDof52RL
Q3XsJzBFnO9HF82KeO8Ak/Baj48nGBOUwYhE73pRGvp2D7pONYvK1jJkMnkYpy6L
nVp0DZKDH0/chYZlNaWYRs21TOVxIAF/aAa+NxgnEowk2Ppm6+/FTE6rM11WtWmF
YIMtJM++wYBrkvNdmGjXAHWUIkJdUdIpln1PnHGafKhnRoIxnv3q+ANn00sYV9Pp
46SuCAbpNXjjIM+9pMpehc2Am1Ich+hQXA1YdLKvRzARNajx2QdOkgbZb5zHi4s7
JiHzAm+vd385/kGxC2Skgwe+HA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:34:46 2025 by rpki-client