This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
File:                     05563772FA5F7F02E46B10D42952096452B02F7E.mft (raw, json)
Hash identifier:          PDMQTteyJlj0HJ6D3TFW/HoffgqZX/KPYovjGfxWIQU=
Subject key identifier:   65:A0:F4:35:75:E6:6E:E2:88:A1:0A:03:C5:56:DC:74:96:69:F9:58
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       5C740492E23206970FAC2C6AC45C7E207EBA8382
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
Manifest number:          0307
Signing time:             Fri 19 Dec 2025 11:16:42 +0000
Manifest this update:     Fri 19 Dec 2025 11:11:42 +0000
Manifest next update:     Sat 20 Dec 2025 15:03:42 +0000
Files and hashes:         1: 323830343a376661383a3a2f33322d3334203d3e20323731373031.roa (hash: SEEupRr1QDGt/5miV5/3UgXzYTwLMXslX2a17HM4rNQ=)
                          2: 34352e3136342e3135322e302f32322d3234203d3e20323731373031.roa (hash: 2o870nQVY5eEvJ1gHPUxPOOBHp3AZafEKZfUj/Grup4=)
                          3: 3137302e37392e3233362e302f32322d3234203d3e20323731373031.roa (hash: SHBVV6lgBpwkNF9fyfo55c4kc04JgiOIDObMTNvLpD0=)
                          4: 05563772FA5F7F02E46B10D42952096452B02F7E.crl (hash: 4XBF1zsdNuw4Tmm7HQXmV2nt5CJ/NpsNTMqHVzv2NEk=)
                          5: 323830343a376661383a633030303a3a2f33342d3336203d3e20323731373031.roa (hash: DBl/Xxx/EXcxN8N1xUDhlvSiljtvTlECeuJOcGhka2o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:74:04:92:e2:32:06:97:0f:ac:2c:6a:c4:5c:7e:20:7e:ba:83:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: Dec 19 11:11:42 2025 GMT
            Not After : Dec 20 15:03:42 2025 GMT
        Subject: CN=65A0F43575E66EE288A10A03C556DC749669F958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:56:81:ba:76:cf:90:20:21:3b:f3:a1:d9:
                    c4:d8:4c:b6:7d:3e:c4:8e:01:b4:07:c1:8f:f7:86:
                    2a:0f:ea:68:b3:6c:ef:64:c3:2d:c2:c6:39:b4:b1:
                    5f:8c:2a:ee:cf:42:11:51:52:cf:ad:68:07:97:b6:
                    0c:ce:30:3a:45:cd:b0:15:64:ca:d2:bc:b2:77:45:
                    01:43:63:45:24:45:bc:a2:1a:72:d1:1a:c2:42:9f:
                    7b:63:d0:2c:37:d4:45:33:de:9d:11:d2:57:1c:a9:
                    98:77:40:06:e6:8a:11:e2:a5:da:b8:bc:7a:26:a8:
                    b0:92:fa:11:24:d7:da:34:38:ac:11:09:dd:a3:7e:
                    d9:41:a7:cf:5b:87:a8:8e:0a:cf:9b:e1:f8:34:29:
                    33:ef:ef:72:8e:ce:cc:4c:f5:55:ed:33:d9:67:49:
                    3a:58:15:e3:2e:71:06:21:47:69:22:3b:2d:1e:a9:
                    5f:5f:d3:59:e9:a6:5e:f8:13:fb:58:7d:77:ef:dd:
                    2e:63:dd:fe:72:8d:17:bc:9b:35:d8:b3:8f:e8:c5:
                    d5:7f:0d:dc:e6:77:3e:7c:d7:0d:b7:1c:13:8c:c6:
                    14:be:78:a9:98:8d:26:ac:65:88:5b:fa:9f:ce:f1:
                    e1:51:08:85:58:64:12:a9:d9:d5:c1:74:d0:0f:a0:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:F4:35:75:E6:6E:E2:88:A1:0A:03:C5:56:DC:74:96:69:F9:58
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:69:b6:f3:16:68:f7:f8:01:59:dc:ad:e0:44:4a:99:d1:00:
         12:64:bf:dd:ef:5c:b3:0d:41:52:22:2f:0c:c3:bc:74:af:9a:
         ca:69:d6:69:25:17:71:f5:f9:04:20:33:35:03:f1:60:77:f2:
         13:7d:3f:76:96:40:32:a0:5a:dd:09:be:74:6b:a4:70:33:1b:
         c3:cc:88:42:76:2f:bb:f8:bd:7a:e8:83:92:9f:b3:f7:43:d7:
         0d:19:27:62:ad:9f:ab:42:85:5e:f9:d4:90:7f:4c:39:21:a8:
         ca:c0:4e:63:ab:73:19:e4:4b:b6:0b:71:b8:40:d8:bc:27:cb:
         d2:8f:c2:a7:41:e2:3c:17:56:89:c4:94:da:1b:c5:9c:e3:29:
         72:db:97:a3:f9:6b:ed:14:a5:61:34:12:b6:49:ca:7f:3e:ac:
         48:8c:df:91:c6:6c:5e:75:93:bb:6e:0b:7b:fc:61:87:60:3a:
         6d:1c:fb:25:b1:ea:d5:30:a5:97:9c:f3:42:61:7c:43:65:94:
         41:f2:15:6e:a7:d6:9b:7a:79:44:93:bd:c9:3f:f3:4a:8b:f3:
         63:b1:45:92:47:cb:02:62:f8:1c:84:ba:09:3d:d5:be:ba:94:
         d8:61:77:62:14:c3:38:63:5a:36:30:f5:4f:e5:a5:7c:55:f8:
         48:df:78:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXHQEkuIyBpcPrCxqxFx+IH66g4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU1NjM3NzJGQTVGN0YwMkU0NkIxMEQ0Mjk1MjA5NjQ1
MkIwMkY3RTAeFw0yNTEyMTkxMTExNDJaFw0yNTEyMjAxNTAzNDJaMDMxMTAvBgNV
BAMTKDY1QTBGNDM1NzVFNjZFRTI4OEExMEEwM0M1NTZEQzc0OTY2OUY5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxFaBunbPkCAhO/Oh2cTYTLZ9
PsSOAbQHwY/3hioP6mizbO9kwy3Cxjm0sV+MKu7PQhFRUs+taAeXtgzOMDpFzbAV
ZMrSvLJ3RQFDY0UkRbyiGnLRGsJCn3tj0Cw31EUz3p0R0lccqZh3QAbmihHipdq4
vHomqLCS+hEk19o0OKwRCd2jftlBp89bh6iOCs+b4fg0KTPv73KOzsxM9VXtM9ln
STpYFeMucQYhR2kiOy0eqV9f01nppl74E/tYfXfv3S5j3f5yjRe8mzXYs4/oxdV/
Ddzmdz581w23HBOMxhS+eKmYjSasZYhb+p/O8eFRCIVYZBKp2dXBdNAPoHRvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZaD0NXXmbuKIoQoDxVbcdJZp+VgwHwYDVR0j
BBgwFoAUBVY3cvpffwLkaxDUKVIJZFKwL34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEc5M3FYek1xQkRwdHY2bmNLRmNVYnVySFNvZTFpSDhDOFNybkJYTERw
MkEvMC8wNTU2Mzc3MkZBNUY3RjAyRTQ2QjEwRDQyOTUyMDk2NDUyQjAyRjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1NTYzNzcyRkE1RjdGMDJF
NDZCMTBENDI5NTIwOTY0NTJCMDJGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEc5M3FYek1xQkRwdHY2bmNLRmNVYnVySFNvZTFpSDhDOFNybkJYTERwMkEvMC8w
NTU2Mzc3MkZBNUY3RjAyRTQ2QjEwRDQyOTUyMDk2NDUyQjAyRjdFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACmm28xZo9/gBWdyt4ERKmdEAEmS/3e9csw1BUiIvDMO8dK+aymnWaSUXcfX5
BCAzNQPxYHfyE30/dpZAMqBa3Qm+dGukcDMbw8yIQnYvu/i9euiDkp+z90PXDRkn
Yq2fq0KFXvnUkH9MOSGoysBOY6tzGeRLtgtxuEDYvCfL0o/Cp0HiPBdWicSU2hvF
nOMpctuXo/lr7RSlYTQStknKfz6sSIzfkcZsXnWTu24Le/xhh2A6bRz7JbHq1TCl
l5zzQmF8Q2WUQfIVbqfWm3p5RJO9yT/zSovzY7FFkkfLAmL4HIS6CT3VvrqU2GF3
YhTDOGNaNjD1T+WlfFX4SN948Q==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:52:10 2025 by rpki-client