This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
File:                     12FE16FACD299316FCEF73CFEA782844D7C2E698.mft (raw, json)
Hash identifier:          dA2theer8RtwuJ1SuFiAxC0Tm1Vh3S/8DhscGnsGgZo=
Subject key identifier:   39:58:92:64:6F:AB:CD:28:F3:0C:25:E1:55:B9:02:2C:FC:59:0C:26
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       4C6580B5344988ED43431B37CEBE79F0EB4BC6DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
Manifest number:          035F
Signing time:             Sat 20 Dec 2025 01:30:00 +0000
Manifest this update:     Sat 20 Dec 2025 01:25:00 +0000
Manifest next update:     Sun 21 Dec 2025 02:09:00 +0000
Files and hashes:         1: 3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa (hash: dT04SxtoIfHKNgfRnmS8wDU/y3BbzN7ryg9QMjXB4dQ=)
                          2: 12FE16FACD299316FCEF73CFEA782844D7C2E698.crl (hash: bYujwnsT49SFRoy4EYc2MFgJEEQyOhSGus+Kn9XHUF8=)
                          3: 323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (hash: xBmcP/YeDZGsb4KTokoRr2w6rc0i+MAEv6W8eR0cvJ8=)
                          4: 3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa (hash: qwc85KZmQFkRWm0Jf2vYrh9+e5dCKo3pBlg4i+Jspwk=)
                          5: 3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (hash: vRosT9i71yxByMp0a25QrskbJjHc15Im++AZI3B+iDY=)
                          6: 3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (hash: EkdUBTRybeS4MvPS7pCPdEG0stlXZoG/OmAso7kZpnQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 02:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:80:b5:34:49:88:ed:43:43:1b:37:ce:be:79:f0:eb:4b:c6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Dec 20 01:25:00 2025 GMT
            Not After : Dec 21 02:09:00 2025 GMT
        Subject: CN=395892646FABCD28F30C25E155B9022CFC590C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:37:e6:27:a3:60:3b:96:8e:ce:8b:47:ae:
                    a0:9e:fb:01:db:59:01:d1:75:23:6f:f7:60:3a:72:
                    9e:47:ac:eb:78:ab:3d:82:ef:40:28:87:41:6e:5a:
                    73:7c:fb:c7:83:57:6a:7b:21:6f:69:51:26:86:de:
                    88:da:16:fb:29:21:2b:6d:8d:9a:27:c4:51:2b:cd:
                    4f:2b:38:4b:ef:61:0d:af:28:51:0a:02:b2:a4:8c:
                    c3:ee:67:c2:6e:1f:fb:82:97:f6:63:54:ae:b3:c7:
                    c7:69:95:75:8b:7e:b1:40:48:6a:82:2a:53:80:50:
                    ad:63:f5:a4:a7:09:d4:da:a7:f0:f7:3f:19:bf:a7:
                    62:56:c5:3e:91:81:ad:09:d2:1d:23:7e:fe:a3:1f:
                    a6:52:fa:f8:7d:07:62:ea:1b:eb:1e:69:4f:95:6a:
                    a4:30:f6:f5:cb:5b:61:85:96:ee:36:32:8f:7f:dc:
                    3f:47:e9:5b:45:13:a4:e0:a0:d8:b7:32:f4:8e:f3:
                    72:52:9e:80:bb:81:b7:30:07:ea:b2:af:f1:7b:e7:
                    a2:e5:83:63:00:7c:08:49:87:20:1a:5f:33:00:48:
                    df:82:32:1e:66:f6:65:98:4b:d1:ea:ae:f5:5f:7d:
                    e6:ef:6a:6a:89:4f:bd:b2:12:8b:43:42:de:c6:68:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:92:64:6F:AB:CD:28:F3:0C:25:E1:55:B9:02:2C:FC:59:0C:26
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:bc:93:0b:66:7c:91:66:cd:e1:03:9f:39:74:c9:af:53:17:
         d1:b9:f3:3e:aa:e0:40:16:e2:1b:1c:ab:2b:51:39:e2:e3:ec:
         d4:f5:65:12:8c:14:5b:93:a5:ea:de:59:0d:70:22:e9:b3:0d:
         cb:92:bd:80:fc:81:2e:cf:4e:10:11:8c:85:8e:72:60:5e:f1:
         c4:94:7f:fd:e0:46:e3:61:ef:f4:ad:28:8f:86:f6:db:d3:f2:
         e4:a5:d5:10:b8:9e:94:18:6f:45:b5:17:dc:c9:58:cf:f2:0e:
         53:52:8b:dd:86:18:dd:08:d9:1c:f9:eb:b6:3e:d2:e6:f7:3f:
         1b:56:ca:53:39:ad:d1:1c:2a:27:31:1d:ff:90:ba:34:0b:f1:
         64:65:36:ff:e7:31:9f:f1:ec:0a:52:05:0e:27:86:78:b6:a2:
         fd:01:9b:6d:0d:d3:1d:a9:b9:b4:3f:d0:5a:23:28:c6:95:06:
         33:60:1f:72:c5:2f:98:11:be:99:ef:de:99:00:fb:9f:2c:29:
         de:15:a3:32:ca:1e:d2:d5:c6:13:0e:42:a1:5d:02:0f:f3:50:
         8a:65:73:d7:0d:e4:dd:82:61:ed:82:fe:c5:e3:34:31:b5:0f:
         c2:ba:cd:94:b9:24:f0:99:ed:36:f9:c3:67:5d:9e:4f:63:71:
         d7:ce:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:36:38 2025 by rpki-client