This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          YaZAWBchzBUkYX+3XA0TW+NvX7EbkXiAVq0hI8lPIRo=
Subject key identifier:   55:C5:67:FF:6F:5A:8E:2D:27:53:0B:CE:2D:6F:BA:0D:96:B7:D1:03
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       20C25564CB815ECE25CA16A7DCC27327337AA0C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          03AA
Signing time:             Fri 19 Dec 2025 01:30:01 +0000
Manifest this update:     Fri 19 Dec 2025 01:25:01 +0000
Manifest next update:     Sat 20 Dec 2025 01:30:01 +0000
Files and hashes:         1: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: 308U9YuTQinc/6h6pROcQyW/yhUpaoAEuJenvQ6ZLxc=)
                          2: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: gmytMNlxeH3j9hJIGBJLZdvIvhQMZEwJGXACmpzXzXk=)
                          3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: Wug+49fsILEyKYGScY2wqtIiVLgElAmYKH9meqGAtZE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c2:55:64:cb:81:5e:ce:25:ca:16:a7:dc:c2:73:27:33:7a:a0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Dec 19 01:25:01 2025 GMT
            Not After : Dec 20 01:30:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:bf:5b:3f:27:a9:11:0d:10:83:b9:02:ea:
                    01:c0:70:47:46:4e:77:83:e4:f8:8c:dd:43:eb:58:
                    73:e9:7c:9f:40:1d:10:c5:14:89:89:8a:0f:fd:72:
                    1f:e2:db:41:8d:a0:5e:cb:f5:fc:9b:db:02:3e:86:
                    7f:0d:12:fb:8a:38:73:29:42:82:da:0c:de:17:0c:
                    92:47:f8:42:4f:ef:a1:10:7f:9a:fb:11:b4:f6:8e:
                    40:45:5c:d5:5e:47:72:9e:a6:30:d0:4f:69:4b:e6:
                    0b:c6:a0:ae:2b:62:6b:61:05:7b:7d:f5:d1:ba:65:
                    ba:96:45:d0:9e:77:d7:c2:08:61:f8:19:56:cf:d0:
                    d3:d9:5a:d7:7b:7b:39:78:04:0b:58:f6:07:f2:e2:
                    17:61:b8:c8:d6:34:4e:86:74:56:8d:60:3c:9f:77:
                    6c:34:03:a4:c0:12:72:6c:03:5f:88:88:a1:fb:d8:
                    24:13:56:e7:a4:30:69:86:45:d7:ef:63:e7:0d:1a:
                    74:84:75:10:8d:75:a7:7f:50:aa:a0:ca:2d:f0:f8:
                    56:9f:d8:4b:bf:cb:61:77:35:77:73:33:6a:d6:90:
                    c7:eb:c8:0a:0d:e7:1b:31:1e:63:09:72:4f:21:74:
                    e0:f0:ca:78:a3:c2:3d:42:c8:91:80:4c:ee:74:91:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:67:FF:6F:5A:8E:2D:27:53:0B:CE:2D:6F:BA:0D:96:B7:D1:03
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:c5:80:af:49:9a:96:92:11:63:b0:12:7e:76:c6:ee:ed:
         a8:f3:7c:a8:ea:cf:3a:f7:85:0a:de:9b:31:19:7f:b0:e6:2e:
         5d:01:88:66:a7:b3:9c:6d:de:86:60:3b:86:68:a3:eb:02:de:
         2e:e6:d4:23:fa:1b:f3:98:b1:e6:f2:91:ad:39:3f:d4:ea:0f:
         92:a0:50:08:ed:ce:94:7b:0e:6a:26:64:41:24:3e:6d:9a:69:
         a9:3b:86:5d:88:a5:70:3d:19:60:95:46:8d:ab:a8:b2:13:28:
         b7:c0:75:f3:80:e5:b9:28:c5:97:d2:12:1d:8e:34:7e:fc:b1:
         d8:bd:83:63:47:ce:a0:86:ba:95:89:dc:7e:3d:27:f6:3c:59:
         bc:f6:64:44:c9:06:06:eb:29:5f:44:3e:28:79:cc:b5:e3:32:
         f3:4f:ba:07:a0:12:a7:98:51:fd:84:7a:20:80:2e:d9:81:26:
         0c:a0:47:a0:3e:a3:5f:32:04:e4:b9:20:6a:db:7e:73:9b:f1:
         93:fc:17:ea:0a:1f:af:7f:09:17:71:7e:4a:0d:1f:b2:c3:db:
         53:60:2a:ad:c5:33:ff:9c:b8:7a:80:9a:ee:7a:6c:89:66:b7:
         5e:9d:08:41:91:23:78:9c:a1:34:ea:33:7a:f7:24:62:7e:d6:
         df:f4:a3:7b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUIMJVZMuBXs4lyhan3MJzJzN6oMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyMTBFNTUyMkY1MTUzRkRBN0E3M0U0RUUyQjMwMEJD
MENDOUEwQjAeFw0yNTEyMTkwMTI1MDFaFw0yNTEyMjAwMTMwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQxQkJGNUIzRjI3QTkxMTBE
MTA4M0I5MDJFQTAxQzA3MDQ3NDY0RTc3ODNFNEY4OENERDQzRUI1ODczRTk3QzlG
NDAxRDEwQzUxNDg5ODk4QTBGRkQ3MjFGRTJEQjQxOERBMDVFQ0JGNUZDOUJEQjAy
M0U4NjdGMEQxMkZCOEEzODczMjk0MjgyREEwQ0RFMTcwQzkyNDdGODQyNEZFRkEx
MTA3RjlBRkIxMUI0RjY4RTQwNDU1Q0Q1NUU0NzcyOUVBNjMwRDA0RjY5NEJFNjBC
QzZBMEFFMkI2MjZCNjEwNTdCN0RGNUQxQkE2NUJBOTY0NUQwOUU3N0Q3QzIwODYx
RjgxOTU2Q0ZEMEQzRDk1QUQ3N0I3QjM5NzgwNDBCNThGNjA3RjJFMjE3NjFCOEM4
RDYzNDRFODY3NDU2OEQ2MDNDOUY3NzZDMzQwM0E0QzAxMjcyNkMwMzVGODg4OEEx
RkJEODI0MTM1NkU3QTQzMDY5ODY0NUQ3RUY2M0U3MEQxQTc0ODQ3NTEwOEQ3NUE3
N0Y1MEFBQTBDQTJERjBGODU2OUZEODRCQkZDQjYxNzczNTc3NzMzMzZBRDY5MEM3
RUJDODBBMERFNzFCMzExRTYzMDk3MjRGMjE3NEUwRjBDQTc4QTNDMjNENDJDODkx
ODA0Q0VFNzQ5MTgwNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvRu/Wz8nqRENEIO5AuoBwHBHRk53g+T4jN1D61hz6XyfQB0QxRSJ
iYoP/XIf4ttBjaBey/X8m9sCPoZ/DRL7ijhzKUKC2gzeFwySR/hCT++hEH+a+xG0
9o5ARVzVXkdynqYw0E9pS+YLxqCuK2JrYQV7ffXRumW6lkXQnnfXwghh+BlWz9DT
2VrXe3s5eAQLWPYH8uIXYbjI1jROhnRWjWA8n3dsNAOkwBJybANfiIih+9gkE1bn
pDBphkXX72PnDRp0hHUQjXWnf1CqoMot8PhWn9hLv8thdzV3czNq1pDH68gKDecb
MR5jCXJPIXTg8Mp4o8I9QsiRgEzudJGAXQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFXFZ/9vWo4tJ1MLzi1vug2Wt9EDMB8GA1UdIwQYMBaAFGchDlUi9RU/2npz5O4r
MAvAzJoLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdO
RDlmbk1wVlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUz
RkRBN0E3M0U0RUUyQjMwMEJDMENDOUEwQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82NzIxMEU1NTIyRjUxNTNGREE3QTczRTRFRTJCMzAwQkMwQ0M5
QTBCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdORDlmbk1w
VlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUzRkRBN0E3
M0U0RUUyQjMwMEJDMENDOUEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH2ExYCvSZqWkhFjsBJ+dsbu
7ajzfKjqzzr3hQremzEZf7DmLl0BiGans5xt3oZgO4Zoo+sC3i7m1CP6G/OYseby
ka05P9TqD5KgUAjtzpR7DmomZEEkPm2aaak7hl2IpXA9GWCVRo2rqLITKLfAdfOA
5bkoxZfSEh2ONH78sdi9g2NHzqCGupWJ3H49J/Y8Wbz2ZETJBgbrKV9EPih5zLXj
MvNPugegEqeYUf2EeiCALtmBJgygR6A+o18yBOS5IGrbfnOb8ZP8F+oKH69/CRdx
fkoNH7LD21NgKq3FM/+cuHqAmu56bIlmt16dCEGRI3icoTTqM3r3JGJ+1t/0o3s=
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:29:51 2025 by rpki-client