This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
File:                     713D42750562117CA0DB7D96A623898EF91F6ADA.mft (raw, json)
Hash identifier:          fhhs2yCXKxDWlyZIYKCZaEZKfcWWziyqoysmK/D4aG4=
Subject key identifier:   EB:69:CF:B6:31:79:52:DB:D2:C7:29:79:61:0F:05:64:D8:EF:40:E6
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       4230B85F0BE16043DF18D6D34753D191639783B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 17:29:52 +0000
Manifest this update:     Fri 19 Dec 2025 17:24:52 +0000
Manifest next update:     Sat 20 Dec 2025 20:40:52 +0000
Files and hashes:         1: 3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (hash: dFxhsTTxQ4BzI7CQMi3J8+57mauDkXfp5fNpHegCPqM=)
                          2: 3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (hash: 8P++dIvVL9cVPeF6kQ9dlfW+y+48EDEnpaGZVI1Z78w=)
                          3: 713D42750562117CA0DB7D96A623898EF91F6ADA.crl (hash: fmeWWroHb4rB5wGi4Ee1oYkNteINqHsXqjZj3QbujpI=)
                          4: 3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (hash: wDXSXL+Gnf/OxVt5oPAvXHzhvhRZ3gQBq5hdMYUZRVg=)
                          5: 3138392e32382e302e302f32302d3234203d3e203238323739.roa (hash: 1lVrNO0KNBLbFazA/al91uSmno5cnDpgovZDfgKqdrU=)
                          6: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (hash: 9doD4vXpx/hiaKFea6OrtYIr48lxvMB9xifUy3qjF2k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:30:b8:5f:0b:e1:60:43:df:18:d6:d3:47:53:d1:91:63:97:83:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Dec 19 17:24:52 2025 GMT
            Not After : Dec 20 20:40:52 2025 GMT
        Subject: CN=EB69CFB6317952DBD2C72979610F0564D8EF40E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:02:33:87:46:51:8c:39:5f:10:d9:b8:0f:
                    84:c8:61:c2:22:26:25:40:87:d1:4a:a2:d8:33:63:
                    be:8a:f8:cd:4f:0d:d7:18:e8:71:ac:09:2b:5b:b3:
                    ad:7b:c9:94:7b:3c:d3:d1:f6:e5:dd:77:dd:26:10:
                    24:7c:4d:7f:69:f6:13:31:0d:5e:66:9d:d0:ac:29:
                    92:d3:0d:3e:c2:72:6c:e8:17:25:8a:38:0a:86:f2:
                    fc:3a:e9:b8:c6:9c:ab:eb:2d:19:30:4f:e0:96:f8:
                    d4:ba:8c:b7:08:0b:47:4a:c9:94:72:54:fe:ba:99:
                    e8:2c:bd:58:fa:94:32:b9:ef:04:f4:89:1b:81:3c:
                    31:18:d5:43:92:95:f2:1e:8e:4b:9f:54:e0:19:28:
                    27:ae:cc:17:ad:fe:17:d3:cc:71:77:b4:d1:d9:db:
                    b8:0e:a2:93:46:58:8c:a3:46:c2:9a:89:ba:5c:0f:
                    01:db:da:b2:20:cb:19:3c:40:52:05:01:fb:17:d6:
                    17:f0:68:d1:b4:b0:b8:4f:da:27:15:af:3e:98:48:
                    1e:86:96:cb:3d:92:0e:35:df:fe:74:a9:85:80:ab:
                    43:5a:b4:b6:59:96:b9:cc:64:8c:97:95:d5:b0:40:
                    cd:c3:89:a4:3e:db:fe:65:f9:99:18:93:65:5e:56:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:69:CF:B6:31:79:52:DB:D2:C7:29:79:61:0F:05:64:D8:EF:40:E6
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:f7:74:c0:db:17:1e:cc:02:fb:12:de:62:a0:ce:e2:bd:
         36:1d:c0:fc:15:80:f3:21:88:50:94:44:fc:84:ba:85:f0:4d:
         e4:2d:89:ad:f1:1b:29:bc:b1:3d:49:83:50:9d:e0:ba:fa:6c:
         11:0b:4e:77:9c:9e:17:f5:fc:e5:ec:f5:49:1f:2d:c5:97:ba:
         78:bd:ae:35:f2:63:82:49:f2:36:ef:2f:7d:ec:0b:ad:d6:de:
         e1:45:8f:71:d1:de:94:54:96:37:cf:81:c2:6e:57:44:3b:d9:
         eb:bd:39:0e:db:1e:de:14:71:e8:e9:12:68:39:f5:3e:55:f9:
         55:35:ef:1d:c4:60:5b:50:89:3e:50:14:d2:af:54:87:05:d4:
         23:7a:f8:f0:0c:a7:55:c2:47:ef:e8:22:50:f5:4c:57:41:6b:
         c6:6c:ce:2c:06:d1:4b:91:6d:02:75:5d:7e:bb:f3:64:3c:40:
         e4:4c:62:30:ae:d6:80:3a:68:a4:77:a4:bd:27:98:77:14:46:
         53:94:f8:02:fb:49:21:f1:85:2b:54:c2:36:81:ac:a1:f5:53:
         e3:e8:14:7c:a1:4e:2d:82:25:e6:7f:35:17:d9:35:2f:63:8a:
         1b:35:15:d9:6a:c9:f7:06:db:99:bf:38:49:89:69:d7:4f:f2:
         a3:74:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:57 2025 by rpki-client