This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
File:                     FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json)
Hash identifier:          CSONt6CS4PG1KPBx4Kuv7SIRw7ag8FNY2x4H6XOgUOo=
Subject key identifier:   40:B7:6F:94:F7:9D:A2:35:72:71:7C:90:3C:0E:A9:C6:9C:1F:F9:73
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       4AD482F5403BBDB8AE9E6B65F04BF6CF96C7600C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
Manifest number:          033D
Signing time:             Tue 23 Dec 2025 17:06:09 +0000
Manifest this update:     Tue 23 Dec 2025 17:01:09 +0000
Manifest next update:     Wed 24 Dec 2025 17:35:09 +0000
Files and hashes:         1: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=)
                          2: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=)
                          3: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: B3LnR3ZpU4cCRBBpfz/Kufuvn1NdaAvQpE2ProXHjUQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 17:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:82:f5:40:3b:bd:b8:ae:9e:6b:65:f0:4b:f6:cf:96:c7:60:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Dec 23 17:01:09 2025 GMT
            Not After : Dec 24 17:35:09 2025 GMT
        Subject: CN=40B76F94F79DA23572717C903C0EA9C69C1FF973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:58:16:4e:9f:75:92:83:c9:93:df:d2:0a:
                    58:2d:e4:71:62:c3:0a:af:dc:16:05:03:31:f1:d8:
                    44:38:ee:d7:5f:b9:96:b0:7a:54:2e:7c:bc:a4:02:
                    7e:aa:49:b9:c1:a7:84:54:25:3d:83:97:75:6f:dd:
                    00:4d:c6:1a:2e:cc:88:1b:1a:7f:fe:55:b4:00:d4:
                    28:85:fb:5f:52:d5:e2:c4:17:83:1f:03:cf:87:56:
                    bf:fb:3b:47:b8:a7:c3:56:fa:df:92:99:97:8b:3b:
                    b7:6c:f6:c7:65:46:6d:3c:e9:64:25:c3:0d:05:17:
                    69:fa:5e:9f:f7:12:d4:de:51:54:f9:90:f1:23:54:
                    98:7b:3c:a6:7f:57:f7:80:6d:6b:3d:b8:65:77:bd:
                    47:c1:ca:f1:23:56:82:2d:ef:5f:09:62:e4:0d:72:
                    db:2b:53:fc:14:3c:a8:d5:f0:48:1e:27:6f:59:f7:
                    15:63:e2:f7:7d:1d:34:67:16:43:7c:9a:e7:ea:3d:
                    36:9d:ba:80:fe:68:a4:d0:70:13:78:6d:64:b3:ac:
                    b2:61:f3:6d:44:a8:0f:a4:50:16:23:4c:b4:c4:ac:
                    6d:89:a1:71:c9:dc:63:41:24:99:41:47:38:bb:96:
                    48:7c:76:75:13:be:8d:99:0c:69:56:e3:dd:69:fb:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:6F:94:F7:9D:A2:35:72:71:7C:90:3C:0E:A9:C6:9C:1F:F9:73
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:cb:d8:62:84:cf:02:7c:7a:c2:ea:90:5e:0a:60:bd:a7:
         f6:17:62:92:6a:6d:74:64:73:72:c5:9a:78:5a:1d:08:12:a2:
         0d:cb:9f:02:e8:28:bb:f6:a4:2b:d5:38:3c:a8:49:72:c3:34:
         d1:ed:a5:df:49:e6:02:5f:66:9c:6b:48:4c:e2:8f:fc:b9:89:
         82:e5:71:de:e8:55:45:24:48:bf:9f:cf:e5:6d:b0:c4:ce:10:
         56:67:2a:24:4f:8f:4d:af:9f:a1:b6:80:66:08:8c:0b:4d:48:
         d9:55:cb:a6:db:f2:b3:90:56:15:2b:47:0c:6b:d6:01:da:01:
         11:4a:14:ba:9a:19:b0:1e:c6:7e:87:ec:bd:ba:df:d2:bc:b6:
         ab:7b:eb:c4:e2:a8:34:73:d0:39:ce:fd:e8:aa:6f:43:71:e8:
         5a:b5:47:c4:b0:df:57:ae:48:f4:a0:73:05:88:d1:0e:51:b7:
         24:76:95:81:0d:5b:2c:e8:4b:0b:31:a7:ec:be:fc:32:0f:b8:
         e6:e7:42:c5:5e:1d:77:df:09:ea:1a:d6:c8:4a:c0:4b:2b:15:
         9b:2c:26:65:79:a3:97:1a:8a:88:a2:22:87:eb:e3:d7:06:04:
         ce:24:a7:f9:9c:db:d6:99:3a:75:7b:a5:d3:37:70:71:49:3d:
         7d:5d:65:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUStSC9UA7vbiunmtl8Ev2z5bHYAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC
Qzg1OThFMTAeFw0yNTEyMjMxNzAxMDlaFw0yNTEyMjQxNzM1MDlaMDMxMTAvBgNV
BAMTKDQwQjc2Rjk0Rjc5REEyMzU3MjcxN0M5MDNDMEVBOUM2OUMxRkY5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDys1gWTp91koPJk9/SClgt5HFi
wwqv3BYFAzHx2EQ47tdfuZawelQufLykAn6qSbnBp4RUJT2Dl3Vv3QBNxhouzIgb
Gn/+VbQA1CiF+19S1eLEF4MfA8+HVr/7O0e4p8NW+t+SmZeLO7ds9sdlRm086WQl
ww0FF2n6Xp/3EtTeUVT5kPEjVJh7PKZ/V/eAbWs9uGV3vUfByvEjVoIt718JYuQN
ctsrU/wUPKjV8EgeJ29Z9xVj4vd9HTRnFkN8mufqPTaduoD+aKTQcBN4bWSzrLJh
821EqA+kUBYjTLTErG2JoXHJ3GNBJJlBRzi7lkh8dnUTvo2ZDGlW491p+xirAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQLdvlPedojVycXyQPA6pxpwf+XMwHwYDVR0j
BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0
OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC
RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0OTMvMC9G
RDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGOzL2GKEzwJ8esLqkF4KYL2n9hdikmptdGRzcsWaeFodCBKiDcufAugou/ak
K9U4PKhJcsM00e2l30nmAl9mnGtITOKP/LmJguVx3uhVRSRIv5/P5W2wxM4QVmcq
JE+PTa+fobaAZgiMC01I2VXLptvys5BWFStHDGvWAdoBEUoUupoZsB7Gfofsvbrf
0ry2q3vrxOKoNHPQOc796KpvQ3HoWrVHxLDfV65I9KBzBYjRDlG3JHaVgQ1bLOhL
CzGn7L78Mg+45udCxV4dd98J6hrWyErASysVmywmZXmjlxqKiKIih+vj1wYEziSn
+Zzb1pk6dXul0zdwcUk9fV1lhA==
-----END CERTIFICATE-----
Generated at Tue Dec 23 20:40:24 2025 by rpki-client