This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
File:                     64F0BC2149C243BFA686EEB3823182E372255DFA.mft (raw, json)
Hash identifier:          RD9qCbxQ7cpYAnX2MZlxNe72vb8htZN1l/K76LlvGhI=
Subject key identifier:   38:8B:C4:3A:34:BA:3E:E7:37:F8:10:A4:CA:E6:9D:FF:C4:E5:F2:7B
Authority key identifier: 64:F0:BC:21:49:C2:43:BF:A6:86:EE:B3:82:31:82:E3:72:25:5D:FA
Certificate issuer:       /CN=64F0BC2149C243BFA686EEB3823182E372255DFA
Certificate serial:       0514DAEA5C7202425F965A11F3B8E083A6F444D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
Manifest number:          53
Signing time:             Fri 19 Dec 2025 16:16:05 +0000
Manifest this update:     Fri 19 Dec 2025 16:11:05 +0000
Manifest next update:     Sat 20 Dec 2025 18:33:05 +0000
Files and hashes:         1: 34352e3137352e37362e302f32322d3234203d3e20323638383930.roa (hash: nzWORvceCO3rXo6Eca3kRIF+Td54EnyUicBgbeaIvhA=)
                          2: 64F0BC2149C243BFA686EEB3823182E372255DFA.crl (hash: C2rSfbDGw8SHfEL8A+jpuCplZwLlcrZ1OK2iEpAHrpM=)
                          3: 323830343a356332303a3a2f33322d3334203d3e20323638383930.roa (hash: eiH19wRtxxKWmEYwwaGj1ft3uaL5tG3RN0O0K9ps7S8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:14:da:ea:5c:72:02:42:5f:96:5a:11:f3:b8:e0:83:a6:f4:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F0BC2149C243BFA686EEB3823182E372255DFA
        Validity
            Not Before: Dec 19 16:11:05 2025 GMT
            Not After : Dec 20 18:33:05 2025 GMT
        Subject: CN=388BC43A34BA3EE737F810A4CAE69DFFC4E5F27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:41:1f:80:e0:33:26:9d:8e:ea:b3:28:06:
                    2b:9b:6c:a0:80:d9:47:c3:eb:9c:06:74:4d:89:50:
                    a4:df:92:16:29:02:41:6f:7b:74:6e:52:f5:56:b2:
                    b2:3f:e2:b0:f0:4d:80:d7:f4:7f:9c:ec:d3:d8:08:
                    1b:25:78:fd:18:5d:b8:1d:84:01:10:12:c8:4f:78:
                    41:1a:7c:13:53:86:1f:5e:1b:88:07:81:19:14:ef:
                    8a:7a:6e:a0:bb:80:15:2b:7d:18:c0:1d:3f:05:2d:
                    60:73:71:83:cc:44:af:1c:05:92:9d:c2:c7:5a:2d:
                    f3:a1:61:0a:34:ac:95:d3:1d:dd:c9:65:1a:e5:9e:
                    23:c5:53:7e:8f:96:08:1a:63:2a:66:12:da:dd:72:
                    94:6e:d5:24:e8:67:67:66:87:14:e4:a6:90:d2:e8:
                    42:cf:f7:07:8a:c7:1e:7b:b7:5b:a7:50:3d:11:ee:
                    8b:75:f6:62:68:f9:f3:da:36:1a:bf:82:a0:7e:1f:
                    09:9f:a1:7d:6b:47:0b:1e:c8:6c:a3:ce:81:fd:99:
                    ba:b6:f4:bd:74:b7:4b:59:0e:f2:a1:78:c6:bc:39:
                    8d:0c:d1:20:2c:9c:db:ef:52:99:1b:ab:cd:bf:7d:
                    ab:78:ca:52:37:bc:69:0a:70:13:6d:5c:03:43:28:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:C4:3A:34:BA:3E:E7:37:F8:10:A4:CA:E6:9D:FF:C4:E5:F2:7B
            X509v3 Authority Key Identifier:
                keyid:64:F0:BC:21:49:C2:43:BF:A6:86:EE:B3:82:31:82:E3:72:25:5D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:52:b5:6c:31:49:bc:7c:b0:ff:4b:b9:69:75:ef:48:75:d9:
         0e:0d:c0:d8:27:fa:47:7b:66:32:5c:94:b2:0f:2c:98:dc:c5:
         15:67:ba:05:13:c7:12:f7:0d:27:2f:1b:7b:8e:1e:85:89:98:
         5f:5c:62:9c:a7:fc:43:b2:3b:66:77:92:63:0b:67:d3:7c:0c:
         b8:bc:ae:cd:97:fd:c7:13:9d:9c:ab:8f:d2:df:3a:d4:b5:02:
         ce:8f:f8:65:51:77:09:32:56:ca:bf:b2:57:60:14:6f:15:29:
         b6:16:66:67:a2:7c:a4:ab:62:e0:2e:c2:1c:d5:df:2e:b5:81:
         e1:09:12:6c:a0:8a:a6:9c:a8:65:fa:f4:24:8c:71:63:38:4d:
         86:a6:2b:15:b1:03:d1:72:14:53:57:1f:61:46:9e:85:1d:9d:
         44:08:aa:c3:f3:da:33:ca:70:d4:41:c0:31:58:1f:c1:57:d4:
         80:da:6d:b9:55:36:18:78:8d:fb:10:b2:55:91:69:95:60:be:
         85:40:5a:f4:14:32:0d:91:df:2a:2d:ee:21:e4:fd:93:05:ac:
         bc:72:e4:0a:37:36:01:ec:0a:f3:b6:79:88:84:71:91:4c:54:
         a8:44:ea:27:c0:af:5e:b0:f0:e7:37:9e:09:fd:0f:95:6d:94:
         1e:57:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:31:49 2025 by rpki-client