This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
File:                     70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft (raw, json)
Hash identifier:          EPHBGvEi0eX19UFxFge/wsF0kj/tFv/pfywmPwt4QRM=
Subject key identifier:   80:54:6F:BF:27:BE:87:BB:E2:92:BE:7F:C7:C6:89:15:7C:56:F6:FE
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Certificate issuer:       /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial:       311F7B415EA90F0532F0F41D5EA5B93954B154DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
Manifest number:          0F
Signing time:             Fri 19 Dec 2025 20:16:11 +0000
Manifest this update:     Fri 19 Dec 2025 20:11:11 +0000
Manifest next update:     Sat 20 Dec 2025 23:14:11 +0000
Files and hashes:         1: 323830343a353635343a353030303a3a2f33362d3336203d3e20323637393931.roa (hash: fNX4gfp7yjsItJ3UT10tH27ej97v3dTM+gOw9YUQiaE=)
                          2: 323830343a353635343a333030303a3a2f33362d3336203d3e20323637393931.roa (hash: seo5AyP8pZXGXJNh1icScd67u2tKSyZldsov4qju+nI=)
                          3: 323830343a353635343a3a2f33362d3336203d3e20323637393931.roa (hash: Wxb5t2KAfHXdPnIG7ApkkwmhhjXpexcJsIQktIG+YLQ=)
                          4: 34352e3136372e35352e302f32342d3234203d3e20323637393931.roa (hash: GdKWxwuNIyGD4JsuQVGEZwAvo2O7++yp6nP5dcdEfKc=)
                          5: 323830343a353635343a613030303a3a2f33362d3336203d3e20323637393931.roa (hash: 43gQIvdQ8iscOf5FTFum+ze96mG4K50tRZhAk/TkwBo=)
                          6: 323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa (hash: fO+JJwzQmnhloBfacLAAcH6zgy3F5pzes8JZyuga2Xg=)
                          7: 3139322e3130302e3232332e302f32342d3234203d3e20323637393931.roa (hash: 2vHMOjPT7zj4B0k99AvS5GA71k0boa5WPOAR/UxqJFg=)
                          8: 323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa (hash: cFX9BycWNMyW2bJATeVm/0+Vd8d2yaqmcaHLjEHkTN4=)
                          9: 323830343a353635343a633030303a3a2f33362d3336203d3e20323637393931.roa (hash: AQgLiaiI9mEgHFVbCPn4o5Hlxva6FMxpH4ibd7zkd5U=)
                          10: 34352e3136372e35322e302f32342d3234203d3e20323637393931.roa (hash: HWgYDJPNCCgkl9eSCNqzfyAqqZpoDh5Oax6vp1RkYaU=)
                          11: 323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa (hash: t8F8m/2o0M1FAIsCs0WDEjLbjy+QpCjodsRtqiVhWkA=)
                          12: 323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa (hash: 8Zh/w8jCXqX94ZfpgesG/alD/eW6VG1Buzdm1v3aTAY=)
                          13: 70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl (hash: l23tvvUUzpYh/I2XTUrchhM7BYtelvZFTkrYl5ejdss=)
                          14: 323830343a353635343a653030303a3a2f33362d3336203d3e20323637393931.roa (hash: JywXVfaYSOPOlG7KwcKaNYwAofzUXO2WgbWjpUnYNdk=)
                          15: 323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa (hash: wLZXqfa+FRSRfm/KiAjG/QBu5MP7nOGLMM/s/knZWvE=)
                          16: 323830343a353635343a323030303a3a2f33362d3336203d3e20323637393931.roa (hash: 3wOzjexIrFQ1I25ha6xailOI5zcy6LHh8pMpGVv9l4U=)
                          17: 323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa (hash: J0jmDvm9gddVwJ3kt03v5E9Iq4C4ZuvjByglJkuxU0o=)
                          18: 34352e3136372e35322e302f32322d3232203d3e20323637393931.roa (hash: I+aXxgT/WzosJsNtnfBgIP+7NlSjjNf8kxLpgPb42DY=)
                          19: 323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa (hash: v/PvMWRUKvqfKJ9sLydOgLwazjWN97EOjkABMZAGsAE=)
                          20: 34352e3136372e35332e302f32342d3234203d3e20323637393931.roa (hash: ZYjATdqm9Y+2Mzsy/LQYqoHmCk3JGb6Gu3ihlAVq7qU=)
                          21: 323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa (hash: +oQZX1OF0xLvSYm/1d7Sl7iyopCfC+jsNeqeRN+LZxQ=)
                          22: 323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa (hash: vV4MXmlVu3UxmGhKaq4jiWkPqWSwR5seNQECN7FuvH4=)
                          23: 34352e3136372e35342e302f32342d3234203d3e20323637393931.roa (hash: rjgHGsCTBPDTDg7X203IEk5P4TNzu4bDNSIY277SePk=)
                          24: 323830343a353635343a3a2f33322d3332203d3e20323637393931.roa (hash: 0Md8bBdIrHm99GKfDgUYlf7oNDewfb8uvX5TdiMYMFw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1f:7b:41:5e:a9:0f:05:32:f0:f4:1d:5e:a5:b9:39:54:b1:54:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
        Validity
            Not Before: Dec 19 20:11:11 2025 GMT
            Not After : Dec 20 23:14:11 2025 GMT
        Subject: CN=80546FBF27BE87BBE292BE7FC7C689157C56F6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:c6:f3:ed:8d:e8:a1:bf:39:4a:a2:03:0a:
                    48:88:e5:56:2a:9f:6b:1b:9b:63:57:6e:10:3b:33:
                    46:bc:d7:e5:ba:a0:84:d5:a2:8e:72:a1:df:9e:25:
                    f7:41:22:d8:a4:da:60:27:23:fd:13:65:47:76:de:
                    a3:93:b8:09:7f:ef:9d:27:2a:95:15:37:24:b8:bf:
                    72:26:55:cc:2e:81:7c:ba:f4:ae:8c:03:31:0d:70:
                    22:3c:fd:96:cc:0a:32:55:14:97:a2:db:dc:0e:61:
                    74:bc:9c:1a:b2:48:fa:3c:10:d3:c9:f7:81:5e:e8:
                    79:1a:9d:f4:af:e1:9a:76:dd:de:6e:e4:a3:a1:a3:
                    d0:76:35:47:41:dc:fa:a9:9f:cb:77:fa:43:0e:28:
                    d4:a6:c5:56:b7:39:4f:05:29:13:4c:de:44:69:d3:
                    00:1e:83:9e:88:8d:7b:2f:cb:55:62:01:a6:62:09:
                    e0:57:1d:07:c9:e3:ba:7a:1d:de:71:a6:db:46:e4:
                    a5:6c:5e:b8:e9:71:79:e5:c2:4f:06:0e:22:65:1c:
                    87:5e:4a:aa:f0:fd:a9:1a:a0:61:60:28:81:21:52:
                    6c:eb:eb:18:da:fa:60:43:1d:c2:18:e9:2b:c8:c5:
                    00:2e:ad:2e:76:ac:5c:bf:12:42:00:d3:48:71:77:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:6F:BF:27:BE:87:BB:E2:92:BE:7F:C7:C6:89:15:7C:56:F6:FE
            X509v3 Authority Key Identifier:
                keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:d8:1e:36:4b:c1:77:28:0c:54:1f:c6:8f:9a:4a:73:cf:
         f4:fa:52:19:d8:47:d3:36:03:2c:b4:d6:40:44:da:6d:3e:c6:
         e6:25:08:60:95:e5:f6:61:86:c7:4e:91:8e:6d:b0:db:76:d7:
         95:b4:a8:47:21:28:71:09:e4:53:91:80:31:5d:cb:0e:2b:53:
         7c:8f:b5:98:df:7b:36:61:04:1b:86:b5:97:d2:39:6b:bf:ab:
         1b:ef:83:09:7e:02:01:17:c9:ab:e3:91:bb:cc:8f:36:f4:23:
         7d:43:6a:e9:21:c4:97:16:34:01:96:e8:2b:2d:e4:57:d5:91:
         1c:06:fc:73:a6:ff:47:1c:09:3a:50:62:5c:15:99:c5:a4:5a:
         7d:90:31:02:c4:46:d7:d8:0e:8f:6d:93:97:18:a4:15:1f:f4:
         53:9e:83:2d:1a:09:01:ed:f8:9c:c1:24:96:79:2a:ee:0c:65:
         64:9e:9d:31:c5:2c:cd:4b:77:3e:f0:72:f6:1c:70:22:d7:65:
         fd:ea:47:64:02:ac:3b:e3:dc:c5:cb:a2:eb:61:26:54:31:1e:
         f5:25:fe:4d:e7:ce:1c:06:a8:ee:a7:f1:0b:1f:a8:11:e0:ed:
         6d:ff:e8:b0:7c:63:c7:32:79:07:ab:8e:c3:de:f4:96:98:d7:
         e2:4d:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:45 2025 by rpki-client