This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
File:                     7040E70A343ED61D14BF33985442CD6EB7927B4D.mft (raw, json)
Hash identifier:          hblS7I33ZQTxkcm3akJKu1WnrWyYJUJIW/UZgZsReb0=
Subject key identifier:   AF:D9:D4:89:93:D0:5B:9D:AF:5F:41:C0:C9:D8:74:5E:BD:41:CB:CE
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       3530C0876D97F6EF02C19DD461334DFD4A6D3FAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
Manifest number:          D0
Signing time:             Sun 21 Dec 2025 09:59:45 +0000
Manifest this update:     Sun 21 Dec 2025 09:54:45 +0000
Manifest next update:     Mon 22 Dec 2025 11:27:45 +0000
Files and hashes:         1: 323830343a376663343a333a3a2f34382d3438203d3e20323731373038.roa (hash: dC7cWDkFOewhXkv+/kUNFMWPY+ZS8WuWCgaoMZHxoTo=)
                          2: 323830343a376663343a3a2f33322d3332203d3e20323731373038.roa (hash: NUK9V86/iiMIUaM6/a1PstgGOWJmaupaSgFgG/59pSU=)
                          3: 323830343a376663343a666666663a3a2f34382d3438203d3e20323731373038.roa (hash: vKUnLn7P8oPw0w3pBAEq0wBq/HcSgypWNtviWt9bonw=)
                          4: 323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa (hash: GHBVxgnBfHRhdMdttxO2cVBkYjtiXfaqedtAdO+CMrM=)
                          5: 3230312e3133312e3130332e302f32342d3234203d3e20323731373038.roa (hash: txOkupoTcZcx+0j2rjrFMLXCvQTBzYNkDiMmqyq+MQA=)
                          6: 7040E70A343ED61D14BF33985442CD6EB7927B4D.crl (hash: uDBAASuleabpbZO1szYhQ13HciN8lwmVJabz4gM7HbU=)
                          7: 323830343a376663343a3a2f33332d3333203d3e20323731373038.roa (hash: Mhbw2LZdn2s8A8jdRjcT+74OYsv0DSHzcOPokMjEygU=)
                          8: 323830343a376663343a343a3a2f34382d3438203d3e20323731373038.roa (hash: h0l+EzSxb2C0/zC+niTOrH/lzpgTBe9f6MRUbH63qnE=)
                          9: 3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa (hash: cO16ey9RwUeuZE+IfI0B2WMrlMx03Ly4tDErYZ6YuKU=)
                          10: 34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa (hash: m7fanAuWMqdRAiDRdvGpGqzVkHxLfxaieqdJgeGJhqs=)
                          11: 3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa (hash: YbuR1zOx8+jKTIWygiCYdcw8WewIsHRyRxRtFwlQVCI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 11:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:c0:87:6d:97:f6:ef:02:c1:9d:d4:61:33:4d:fd:4a:6d:3f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Dec 21 09:54:45 2025 GMT
            Not After : Dec 22 11:27:45 2025 GMT
        Subject: CN=AFD9D48993D05B9DAF5F41C0C9D8745EBD41CBCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:52:76:92:d6:c7:55:80:57:ae:77:73:bc:
                    d8:03:c1:a6:99:a9:60:26:f5:84:d9:9e:9b:ca:9f:
                    b2:0b:bd:4a:af:26:fd:5a:2f:e8:72:94:e6:05:79:
                    4b:b6:ad:d6:7e:6a:f6:31:c0:32:8a:9c:5a:c9:ab:
                    5d:89:fa:90:e8:0f:0a:f1:28:c8:ae:bd:96:81:ef:
                    51:61:a8:14:0c:35:82:6a:79:46:d6:81:89:c1:d1:
                    31:37:cc:d3:87:0a:53:8d:d5:d7:73:fb:91:47:a2:
                    65:70:6d:08:1a:5b:ea:e7:0d:c8:c6:7c:a7:98:ca:
                    cc:43:7e:ad:25:ac:22:fd:ae:cd:93:e2:20:94:63:
                    aa:52:21:9e:96:a1:7c:71:05:cc:64:e7:d5:c1:c1:
                    4e:77:b1:e4:fb:be:d4:eb:34:6a:e3:4f:45:4a:b3:
                    cd:7b:2a:4f:2d:8d:b9:c3:c3:eb:2c:fc:7d:94:41:
                    d5:f7:73:83:d4:68:24:b3:28:6d:e4:f4:27:a9:e2:
                    61:4b:74:a7:e6:77:ac:06:27:09:21:1f:13:cf:c9:
                    9b:39:c7:5d:92:a5:ed:d8:8a:b6:e4:36:48:76:b9:
                    62:c9:f7:01:76:5f:29:f5:73:c2:54:2c:a0:5d:32:
                    0b:16:a7:b7:8f:e5:d1:15:c6:96:fe:ad:ee:94:79:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:D4:89:93:D0:5B:9D:AF:5F:41:C0:C9:D8:74:5E:BD:41:CB:CE
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:65:43:5a:d0:ce:26:51:2d:9c:4b:10:f5:65:55:d1:a4:64:
         d5:7a:a6:18:fc:1d:f2:7d:bf:a6:69:9e:c8:40:fc:93:03:80:
         0b:73:de:a0:04:47:22:81:bd:81:1d:6c:f8:d3:3b:d8:44:72:
         11:1a:dd:be:6c:3b:e8:1c:0b:3a:d8:59:e1:73:2c:ee:a5:c2:
         16:8e:99:c4:99:57:04:c2:1b:b4:a5:dc:9f:97:34:12:08:30:
         32:d8:ef:fe:3b:18:16:8e:83:9a:8a:1c:f9:a3:2f:31:8d:06:
         c9:6c:b7:3b:d5:98:06:67:4d:61:61:e2:02:95:fa:98:79:6f:
         06:9e:64:f2:c4:ba:4f:1d:9f:c3:8e:f0:06:01:16:8c:5e:40:
         d1:7f:24:e2:0a:8d:72:3b:4d:60:b4:f9:06:87:62:cb:c5:27:
         df:bc:f7:ed:9d:07:39:83:81:76:1b:1d:20:62:18:5f:18:40:
         b9:75:38:d4:e9:05:42:22:de:fd:2e:24:e7:b0:4d:cb:cf:bc:
         f9:f1:22:eb:c7:07:3b:fc:99:f0:cc:33:9a:88:ca:21:01:2c:
         a7:f4:d6:7c:b9:3e:68:16:56:fc:e4:59:ba:d9:e5:80:f0:95:
         13:2f:12:04:44:a7:18:53:bd:0c:53:b2:23:45:eb:3e:cf:26:
         d9:8f:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:09:24 2025 by rpki-client