This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
File:                     D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft (raw, json)
Hash identifier:          0qPoK+UQlIrSMknPNSxQbu8RW9mMOS21uHq5vP0qfak=
Subject key identifier:   E8:42:0F:BF:1F:C5:A1:BE:11:59:63:BC:C9:34:30:45:B6:F9:8B:A4
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Certificate issuer:       /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial:       0290B7070F663B5CDD91FB7574C8E10AD30EDD94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
Manifest number:          033F
Signing time:             Sat 20 Dec 2025 15:58:50 +0000
Manifest this update:     Sat 20 Dec 2025 15:53:50 +0000
Manifest next update:     Sun 21 Dec 2025 18:11:50 +0000
Files and hashes:         1: D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl (hash: q3piBMj8h6gkwHDIQx9W6OGwrSge5Vpg4tNmDGRGH90=)
                          2: 34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (hash: w87/DuMMNL5quM7rpiLUGB40gEl0zQN0r0/6pjpOXBw=)
                          3: 323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (hash: IE1zJNXn6RAOdArFw8Bsas97RLb4ASTXUHeSRlYevWo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
                          rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 18:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:90:b7:07:0f:66:3b:5c:dd:91:fb:75:74:c8:e1:0a:d3:0e:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
        Validity
            Not Before: Dec 20 15:53:50 2025 GMT
            Not After : Dec 21 18:11:50 2025 GMT
        Subject: CN=E8420FBF1FC5A1BE115963BCC9343045B6F98BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:03:84:f2:fa:fe:0c:d0:ad:be:31:a8:f1:
                    60:e0:80:4a:ca:c9:23:4a:5d:ad:51:e6:0d:24:29:
                    a9:5c:3f:57:d8:8f:4c:79:6a:2e:45:13:b6:4a:d7:
                    5a:b7:ff:dd:71:c5:0e:a8:03:f2:04:83:f8:3f:0c:
                    2d:db:ec:e5:c2:1b:d7:8b:32:68:9f:5e:7a:8a:f8:
                    62:80:49:66:a1:f1:40:25:34:c8:c4:52:14:69:36:
                    55:8d:3a:22:29:3e:80:83:96:54:4e:21:99:bf:bb:
                    d9:a4:0a:d6:21:27:63:78:0d:aa:fb:07:c5:e6:7c:
                    46:9b:45:e6:63:bd:28:67:25:b2:60:89:f5:85:59:
                    b3:2e:80:d2:b4:4f:b5:7f:7f:15:d7:4f:ca:a9:02:
                    79:d1:c3:5c:ac:ee:72:b4:11:5b:1d:12:64:dd:92:
                    a7:8a:b1:7f:ad:eb:45:11:7e:2c:c6:5e:55:e5:cb:
                    6f:d3:c6:21:0c:46:d5:d9:1e:36:e8:c2:51:94:74:
                    51:bb:7a:34:27:1e:5f:c1:39:7e:79:09:92:b8:cd:
                    ca:6a:38:87:b5:37:fc:8b:fa:af:cd:66:52:32:72:
                    a1:4e:c9:1d:f8:14:1e:8a:0c:1b:6a:ed:cb:4b:72:
                    fb:e9:e6:20:58:4b:67:49:a5:15:f2:0a:cb:8b:9e:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:0F:BF:1F:C5:A1:BE:11:59:63:BC:C9:34:30:45:B6:F9:8B:A4
            X509v3 Authority Key Identifier:
                keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:45:85:35:af:7d:8f:94:bd:8a:15:c2:07:e7:66:22:f3:08:
         3c:59:d7:68:50:2b:af:2e:d9:d5:e5:14:63:aa:8c:28:18:39:
         78:bd:a8:ed:45:3f:95:91:0c:77:08:65:78:f5:47:6e:c7:55:
         e8:d8:0e:d2:04:46:bc:32:01:4c:20:4d:ae:7f:f8:d3:e4:68:
         80:88:f9:65:cd:e9:50:f8:b6:7c:41:6a:14:98:85:97:b7:05:
         5e:a1:cc:39:71:60:3c:c9:44:38:c6:9a:13:8f:b4:a6:b1:ef:
         a0:8f:24:8f:9c:b6:64:11:cb:81:d6:c9:d4:79:c1:14:b3:73:
         17:03:26:3d:7b:d3:8e:fe:0d:a0:74:77:7e:67:99:d6:70:e4:
         95:d4:0b:8b:2d:7e:fa:11:ce:a7:e4:a9:b7:20:c5:30:f3:d1:
         b4:62:ad:a1:e6:1a:37:6f:aa:58:77:04:06:ad:d3:36:ae:5f:
         04:97:20:73:99:92:dc:68:66:ac:bd:fd:fd:e8:0c:8d:95:de:
         da:76:05:10:e5:f0:bb:f5:71:b9:e2:6c:fc:f0:a5:f6:67:6c:
         3a:3a:c4:6b:9e:8c:ae:00:b9:69:97:61:c6:5f:a6:87:d3:88:
         b2:83:a9:e1:43:bb:40:2d:37:a5:02:e7:3a:7c:90:6a:e5:9c:
         04:59:48:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUApC3Bw9mO1zdkft1dMjhCtMO3ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGQTM4NzZDQjBGMzQzQUM5QkI5NzU3RUVCMDRCMjU1
RDRFNTRCMTAeFw0yNTEyMjAxNTUzNTBaFw0yNTEyMjExODExNTBaMDMxMTAvBgNV
BAMTKEU4NDIwRkJGMUZDNUExQkUxMTU5NjNCQ0M5MzQzMDQ1QjZGOThCQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvAOE8vr+DNCtvjGo8WDggErK
ySNKXa1R5g0kKalcP1fYj0x5ai5FE7ZK11q3/91xxQ6oA/IEg/g/DC3b7OXCG9eL
MmifXnqK+GKASWah8UAlNMjEUhRpNlWNOiIpPoCDllROIZm/u9mkCtYhJ2N4Dar7
B8XmfEabReZjvShnJbJgifWFWbMugNK0T7V/fxXXT8qpAnnRw1ys7nK0EVsdEmTd
kqeKsX+t60URfizGXlXly2/TxiEMRtXZHjbowlGUdFG7ejQnHl/BOX55CZK4zcpq
OIe1N/yL+q/NZlIycqFOyR34FB6KDBtq7ctLcvvp5iBYS2dJpRXyCsuLnks9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6EIPvx/Fob4RWWO8yTQwRbb5i6QwHwYDVR0j
BBgwFoAU0fo4dssPNDrJu5dX7rBLJV1OVLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHdjVXJTaGk4ekFLcVN2NG5SUG1CNWRnWVdoenZpTGlIbW02WEx2ZzQ2
d0YvMS9EMUZBMzg3NkNCMEYzNDNBQzlCQjk3NTdFRUIwNEIyNTVENEU1NEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkEzODc2Q0IwRjM0M0FD
OUJCOTc1N0VFQjA0QjI1NUQ0RTU0QjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHdjVXJTaGk4ekFLcVN2NG5SUG1CNWRnWVdoenZpTGlIbW02WEx2ZzQ2d0YvMS9E
MUZBMzg3NkNCMEYzNDNBQzlCQjk3NTdFRUIwNEIyNTVENEU1NEIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMUWFNa99j5S9ihXCB+dmIvMIPFnXaFArry7Z1eUUY6qMKBg5eL2o7UU/lZEM
dwhlePVHbsdV6NgO0gRGvDIBTCBNrn/40+RogIj5Zc3pUPi2fEFqFJiFl7cFXqHM
OXFgPMlEOMaaE4+0prHvoI8kj5y2ZBHLgdbJ1HnBFLNzFwMmPXvTjv4NoHR3fmeZ
1nDkldQLiy1++hHOp+SptyDFMPPRtGKtoeYaN2+qWHcEBq3TNq5fBJcgc5mS3Ghm
rL39/egMjZXe2nYFEOXwu/VxueJs/PCl9mdsOjrEa56MrgC5aZdhxl+mh9OIsoOp
4UO7QC03pQLnOnyQauWcBFlIuQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:21:51 2025 by rpki-client