This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.mft
File:                     AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.mft (raw, json)
Hash identifier:          pUfobGbRV4eH/DnHgLIK4nJzXvty559DdHAvSJw+B2Y=
Subject key identifier:   BE:FD:72:D2:C9:8E:37:CD:04:83:3D:F6:99:52:A6:18:AE:2E:3F:C3
Authority key identifier: AC:9E:0E:79:3C:23:1D:6A:A0:D6:BE:4B:68:E9:2C:90:E8:B2:9D:16
Certificate issuer:       /CN=AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16
Certificate serial:       539B8BD92863F5B2A236D97BEBB0915A7B8AB39D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.mft
Manifest number:          07
Signing time:             Sat 20 Dec 2025 04:04:30 +0000
Manifest this update:     Sat 20 Dec 2025 03:59:30 +0000
Manifest next update:     Sun 21 Dec 2025 06:05:30 +0000
Files and hashes:         1: 34352e3232362e3133382e302f32332d3234203d3e20323636393637.roa (hash: HMW2hMKQJ3oaZqcKsMS0f9Xb8u/H3b3qgYdnfJS2XaE=)
                          2: 323830343a343631343a3a2f33322d3430203d3e20323636393637.roa (hash: pYqL6OgWGOGBgsBKshqtxA4UuwySlWHRhdjZ+lDCkDE=)
                          3: AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.crl (hash: u43KMJamb8+lWJmJ/NqBPDMp1f1F1mij6qLcxNcElCI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9b:8b:d9:28:63:f5:b2:a2:36:d9:7b:eb:b0:91:5a:7b:8a:b3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16
        Validity
            Not Before: Dec 20 03:59:30 2025 GMT
            Not After : Dec 21 06:05:30 2025 GMT
        Subject: CN=BEFD72D2C98E37CD04833DF69952A618AE2E3FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:b9:9d:f3:22:d4:2d:f4:fb:a4:01:8a:b0:
                    82:32:c7:82:fa:16:b7:ff:df:9c:fa:71:f0:64:34:
                    3f:eb:57:52:7e:17:3d:c8:87:19:85:49:01:87:8d:
                    6d:35:c5:c7:8e:0f:34:31:b1:6e:31:41:63:72:a8:
                    00:22:73:9b:a6:b2:a4:00:40:3c:76:c1:51:7b:18:
                    e7:ad:96:c7:fa:3c:9c:90:71:93:c9:96:24:8c:6f:
                    2d:d0:54:ca:59:62:f5:d7:a9:77:22:68:99:96:00:
                    1e:0e:e7:34:35:29:ca:b7:94:58:f6:b5:5e:b3:ff:
                    3e:38:9d:e4:a2:38:77:3c:3e:35:f5:ea:09:b1:97:
                    8d:83:e9:c1:23:11:64:c1:a9:41:61:3d:b3:54:50:
                    bd:1c:cd:01:b1:5f:39:05:af:62:ff:a0:3a:e6:b9:
                    9e:ce:68:b1:6c:33:bc:f4:72:c4:d9:dd:a6:2a:3d:
                    c3:fa:8c:b6:7f:82:3a:d6:72:0b:95:44:3a:6d:a7:
                    11:fd:e5:e6:e8:c1:08:4d:26:73:82:1b:ce:e0:35:
                    87:5a:83:36:0a:57:7b:da:fd:16:db:ec:85:01:05:
                    30:ab:c5:e5:f4:5d:f7:64:57:5d:a5:6c:a5:4d:4b:
                    4c:cc:b3:93:7f:bc:59:0a:e6:12:3b:71:53:eb:e1:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FD:72:D2:C9:8E:37:CD:04:83:3D:F6:99:52:A6:18:AE:2E:3F:C3
            X509v3 Authority Key Identifier:
                keyid:AC:9E:0E:79:3C:23:1D:6A:A0:D6:BE:4B:68:E9:2C:90:E8:B2:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC9E0E793C231D6AA0D6BE4B68E92C90E8B29D16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ec:9e:38:7a:2d:76:7f:ad:07:b6:a1:cc:e8:8f:c5:59:3b:
         5c:ae:5e:9d:0e:73:bd:45:34:f9:ef:8a:72:16:cf:5b:6f:55:
         78:57:93:1c:21:fd:6d:52:6c:d9:e0:c1:43:fd:5d:05:be:be:
         9e:8d:14:90:3c:64:3f:13:45:d9:d2:dc:d1:f3:c8:b5:8f:01:
         c1:51:6d:ac:b7:0c:f6:2f:1d:ee:a6:f1:b6:61:58:d5:7d:04:
         d0:2f:09:04:9f:3f:7b:24:6b:a0:ce:fc:51:84:3e:b6:95:81:
         41:4d:9a:0d:5e:63:07:7e:c4:a7:41:38:c6:1f:57:5a:de:96:
         5e:43:ae:36:49:a5:77:12:4b:5b:c3:0d:9d:09:95:ef:c7:1f:
         4f:4d:1e:21:00:f2:0d:1b:0c:f2:36:ee:41:0a:da:8f:5e:65:
         bb:5b:9f:6a:cc:9b:1b:9a:8b:be:c7:37:2d:65:de:98:bf:75:
         b5:66:d0:01:c4:f2:9c:02:bb:6f:11:d1:a6:95:b5:50:20:89:
         4b:f5:a5:76:52:a4:ba:44:64:b0:cd:6c:8d:28:3e:e3:12:8d:
         2a:6b:f2:f4:39:06:5e:23:92:f6:79:cd:9a:5a:97:80:a9:37:
         f6:22:ca:03:4c:0e:d3:04:31:46:b5:ea:fe:02:c2:ef:1e:f1:
         27:35:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:21 2025 by rpki-client