This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
File:                     A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json)
Hash identifier:          aEUqY1eLZEi2bRgFr4iA0O+rylETDLpzNcOg9Z9IFHk=
Subject key identifier:   93:2F:2D:13:A8:29:E8:9D:00:D7:E6:DD:7A:34:3E:93:C4:D7:22:49
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       151CD25DC4FE608A4C810B4723416C489E7AC050
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
Manifest number:          031A
Signing time:             Fri 19 Dec 2025 21:05:34 +0000
Manifest this update:     Fri 19 Dec 2025 21:00:34 +0000
Manifest next update:     Sat 20 Dec 2025 21:16:34 +0000
Files and hashes:         1: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: Fzh/MpNGlYerUIk/qO2Cie/Z+aQ8xObBkpElqyXoNIk=)
                          2: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=)
                          3: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=)
                          4: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1c:d2:5d:c4:fe:60:8a:4c:81:0b:47:23:41:6c:48:9e:7a:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Dec 19 21:00:34 2025 GMT
            Not After : Dec 20 21:16:34 2025 GMT
        Subject: CN=932F2D13A829E89D00D7E6DD7A343E93C4D72249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:4a:ed:70:02:1d:2e:11:9c:69:21:5e:36:
                    8c:3d:08:2a:3d:5c:6a:51:ab:43:81:fd:5e:4b:27:
                    87:5e:59:4d:d6:be:6c:57:e1:66:c1:49:46:4e:d4:
                    ae:91:27:ab:21:46:3c:b7:18:98:ac:4f:1a:6c:4c:
                    23:be:c9:37:6e:15:f7:32:bd:9e:c3:31:3f:e5:9f:
                    30:98:c0:0c:96:04:60:13:8b:aa:c7:e2:fb:21:0d:
                    36:d7:8c:8f:93:2d:0f:8f:69:c9:f2:14:b3:99:3e:
                    ad:8a:25:ed:2f:ae:c4:96:a0:67:a9:ea:b6:b3:c0:
                    71:4f:33:30:0f:91:a3:d3:5d:d6:2f:a9:3e:5b:f3:
                    84:e4:5a:1b:be:55:76:88:14:ed:7e:d6:28:fa:b5:
                    ea:7c:13:a1:78:f0:5e:fb:fb:aa:38:e0:3f:1a:60:
                    e6:b4:a4:b2:df:e2:07:9c:cf:e7:d8:e6:a8:ee:42:
                    3e:fa:b9:ac:b6:39:ff:80:ea:37:66:ec:b9:49:e8:
                    6e:e0:0f:97:98:f8:37:54:f6:66:ec:53:5c:19:7d:
                    b2:e8:c7:49:f0:ef:61:4c:98:ac:ab:51:98:6d:80:
                    7d:ab:28:1e:cc:c8:09:2a:8e:22:b5:bb:fb:b8:d3:
                    17:1d:bf:75:25:c1:50:28:0b:71:9e:6d:f2:ee:7f:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:2D:13:A8:29:E8:9D:00:D7:E6:DD:7A:34:3E:93:C4:D7:22:49
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:35:d1:8a:ab:d3:21:67:99:67:22:8c:91:d7:b3:02:cc:91:
         91:8e:04:a5:c9:cb:c1:1f:4e:db:31:f4:78:3f:3e:ea:d2:72:
         2f:90:78:cc:f2:52:a5:8d:95:16:b2:5f:e9:90:d8:21:8f:58:
         67:58:5d:97:18:bf:1b:43:b9:ea:7f:b1:6c:0d:53:3e:73:92:
         5f:e2:d5:f9:94:4d:14:3f:fc:84:9f:07:a2:3e:f2:41:f4:60:
         3f:8a:3f:eb:a5:04:3b:25:ce:ad:9d:71:9d:af:21:50:9b:75:
         e4:a3:64:a3:e3:c7:c9:bd:30:78:d1:af:58:f3:0f:28:4d:63:
         8e:a5:57:a3:e1:9d:8b:4e:f3:3b:dd:30:ba:cb:37:75:11:07:
         87:b6:ba:01:e0:af:9e:d1:03:51:c9:05:d0:6b:41:10:f2:00:
         d2:9c:cd:f3:94:3c:05:3d:5d:d7:80:23:aa:dc:32:80:e9:78:
         ce:43:56:0c:6a:9e:e1:73:da:bd:de:ca:ab:55:2c:f2:fc:c0:
         67:c4:7e:15:7e:72:9a:6f:d4:a8:0a:b2:0e:31:ed:5d:6b:c4:
         a9:7a:b6:71:ae:9a:b0:27:98:5c:d4:14:fc:27:c2:de:85:ae:
         4e:e6:bd:39:92:c7:d5:8c:65:fe:93:45:70:d2:12:0d:ad:b0:
         a9:b4:80:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFRzSXcT+YIpMgQtHI0FsSJ56wFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2
RDUyNTI5MTAeFw0yNTEyMTkyMTAwMzRaFw0yNTEyMjAyMTE2MzRaMDMxMTAvBgNV
BAMTKDkzMkYyRDEzQTgyOUU4OUQwMEQ3RTZERDdBMzQzRTkzQzRENzIyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOkrtcAIdLhGcaSFeNow9CCo9
XGpRq0OB/V5LJ4deWU3WvmxX4WbBSUZO1K6RJ6shRjy3GJisTxpsTCO+yTduFfcy
vZ7DMT/lnzCYwAyWBGATi6rH4vshDTbXjI+TLQ+PacnyFLOZPq2KJe0vrsSWoGep
6razwHFPMzAPkaPTXdYvqT5b84TkWhu+VXaIFO1+1ij6tep8E6F48F77+6o44D8a
YOa0pLLf4gecz+fY5qjuQj76uay2Of+A6jdm7LlJ6G7gD5eY+DdU9mbsU1wZfbLo
x0nw72FMmKyrUZhtgH2rKB7MyAkqjiK1u/u40xcdv3UlwVAoC3GebfLuf3IfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUky8tE6gp6J0A1+bdejQ+k8TXIkkwHwYDVR0j
BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B
UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx
MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B
MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdzXRiqvTIWeZZyKMkdezAsyRkY4EpcnLwR9O2zH0eD8+6tJyL5B4zPJSpY2V
FrJf6ZDYIY9YZ1hdlxi/G0O56n+xbA1TPnOSX+LV+ZRNFD/8hJ8Hoj7yQfRgP4o/
66UEOyXOrZ1xna8hUJt15KNko+PHyb0weNGvWPMPKE1jjqVXo+Gdi07zO90wuss3
dREHh7a6AeCvntEDUckF0GtBEPIA0pzN85Q8BT1d14AjqtwygOl4zkNWDGqe4XPa
vd7Kq1Us8vzAZ8R+FX5ymm/UqAqyDjHtXWvEqXq2ca6asCeYXNQU/CfC3oWuTua9
OZLH1Yxl/pNFcNISDa2wqbSA7g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:15:05 2025 by rpki-client