This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
File:                     D8683D560654AD562BAFEB400C4C97282B65EB8D.mft (raw, json)
Hash identifier:          igI/URsVwUQjJwbCVk11gi/mWJsPwjz608/b5iLTJdE=
Subject key identifier:   8C:77:8D:73:81:74:9D:E2:A8:43:B4:06:0D:C7:D1:51:65:42:DB:A2
Authority key identifier: D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D
Certificate issuer:       /CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
Certificate serial:       1196C153C2CE1DEC462E21A487553E48D734D164
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
Manifest number:          0346
Signing time:             Sun 21 Dec 2025 08:08:37 +0000
Manifest this update:     Sun 21 Dec 2025 08:03:37 +0000
Manifest next update:     Mon 22 Dec 2025 10:55:37 +0000
Files and hashes:         1: D8683D560654AD562BAFEB400C4C97282B65EB8D.crl (hash: 89QtHvwfqBe8o1Xa9cmuib5Sr9hmRhs/tz2RCSMAWL0=)
                          2: 323830343a376262383a3a2f33322d3438203d3e20323731343530.roa (hash: y4KnppT1mGj4RW0OtPChkXMD7Bd2MZRk12SVx2UDn+E=)
                          3: 3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa (hash: vbLfRY8132503Kg5fgBxwlCePnPcCsL+EQe8oJSr1vY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl
                          rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 10:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:96:c1:53:c2:ce:1d:ec:46:2e:21:a4:87:55:3e:48:d7:34:d1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
        Validity
            Not Before: Dec 21 08:03:37 2025 GMT
            Not After : Dec 22 10:55:37 2025 GMT
        Subject: CN=8C778D7381749DE2A843B4060DC7D1516542DBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:e6:fa:cb:62:17:28:24:bc:d7:22:73:0a:
                    21:8d:e7:34:5b:33:35:2c:c8:f4:44:fa:91:04:30:
                    94:5b:f8:b5:53:cd:f9:9a:cb:f9:69:f6:bd:a7:87:
                    d9:ff:83:07:76:00:e2:59:4a:ec:f5:71:07:84:68:
                    0e:f1:57:ee:6f:a1:99:91:f2:90:7b:00:2a:7e:4d:
                    00:a1:07:ef:a3:e9:79:5e:60:36:43:00:9d:16:b7:
                    59:8d:12:dd:a8:16:81:e6:03:2d:d8:ab:13:27:c5:
                    dd:e6:38:a3:14:96:b8:86:0e:f7:36:af:c5:cf:fb:
                    79:29:fa:bc:80:95:61:78:86:ef:0c:18:dc:f6:b9:
                    88:d9:97:35:7c:6a:22:c6:8b:60:dd:f3:13:a9:3f:
                    fb:0a:8f:ae:50:6e:d2:7e:bc:cb:3d:73:86:02:a8:
                    78:51:f2:0f:b8:ae:85:8c:f7:93:00:26:b4:8f:ce:
                    53:a7:f9:70:e4:41:55:c2:5a:8b:cc:30:20:b6:8d:
                    4a:51:55:d6:b5:59:ed:bf:52:a0:e7:c8:28:7e:ad:
                    6b:b5:37:c1:c7:b9:eb:c2:db:54:13:c6:30:4f:ab:
                    c7:d1:d0:94:c3:d6:ca:82:b5:32:b6:a5:11:36:a6:
                    fd:f7:f8:6c:c0:8e:ff:b6:b0:07:55:27:29:6a:93:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:8D:73:81:74:9D:E2:A8:43:B4:06:0D:C7:D1:51:65:42:DB:A2
            X509v3 Authority Key Identifier:
                keyid:D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:a1:94:df:42:9a:8c:02:2c:2b:66:b2:ee:65:5f:14:41:
         00:cc:ca:d2:9f:26:ee:ec:4f:6c:1e:52:7e:e9:48:02:af:49:
         b7:f9:76:3d:76:1a:42:e8:b1:08:a0:0a:c9:73:77:9c:f5:29:
         6b:e9:33:31:9a:54:7b:05:ef:12:2f:f8:27:59:c8:6e:7d:21:
         c2:33:07:1e:1d:05:56:7a:61:c2:6b:ce:54:50:3a:d7:d1:c3:
         fe:4f:77:c3:03:10:74:58:62:01:1d:d6:5a:10:e9:ae:3a:68:
         8b:d7:f4:c7:d0:38:f3:ff:2e:7c:37:e2:2b:e9:2f:1f:c1:e9:
         69:0a:5b:80:d7:f2:49:f9:c9:ae:93:60:94:65:bf:67:8c:90:
         fd:0b:5e:dc:e5:fa:e2:42:cd:9f:4a:3b:78:3e:7c:19:a6:9f:
         ab:bf:37:f0:18:cf:d1:b9:37:15:d9:ea:22:de:0f:91:1a:bb:
         92:73:96:fa:b5:41:e8:ed:bc:7f:dd:00:8e:2a:86:64:cc:92:
         fe:9c:72:fd:87:19:8a:90:25:48:ca:f6:09:41:ae:70:b8:ff:
         2a:bb:3b:77:27:74:3c:3c:e6:1e:20:00:dd:cc:83:8e:21:30:
         28:b1:19:6e:32:5d:1d:28:d7:fa:10:ff:3e:2d:30:5f:c6:c7:
         f7:74:05:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEZbBU8LOHexGLiGkh1U+SNc00WQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg2ODNENTYwNjU0QUQ1NjJCQUZFQjQwMEM0Qzk3Mjgy
QjY1RUI4RDAeFw0yNTEyMjEwODAzMzdaFw0yNTEyMjIxMDU1MzdaMDMxMTAvBgNV
BAMTKDhDNzc4RDczODE3NDlERTJBODQzQjQwNjBEQzdEMTUxNjU0MkRCQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWeb6y2IXKCS81yJzCiGN5zRb
MzUsyPRE+pEEMJRb+LVTzfmay/lp9r2nh9n/gwd2AOJZSuz1cQeEaA7xV+5voZmR
8pB7ACp+TQChB++j6XleYDZDAJ0Wt1mNEt2oFoHmAy3YqxMnxd3mOKMUlriGDvc2
r8XP+3kp+ryAlWF4hu8MGNz2uYjZlzV8aiLGi2Dd8xOpP/sKj65QbtJ+vMs9c4YC
qHhR8g+4roWM95MAJrSPzlOn+XDkQVXCWovMMCC2jUpRVda1We2/UqDnyCh+rWu1
N8HHuevC21QTxjBPq8fR0JTD1sqCtTK2pRE2pv33+GzAjv+2sAdVJylqk/qlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjHeNc4F0neKoQ7QGDcfRUWVC26IwHwYDVR0j
BBgwFoAU2Gg9VgZUrVYrr+tADEyXKCtl640wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hRRVJ2V0FKVEFCQU12NEtqZ2ZaOUZVUnh5bzNHd3BKQkZ6ZlZQVFE5
VEEvMS9EODY4M0Q1NjA2NTRBRDU2MkJBRkVCNDAwQzRDOTcyODJCNjVFQjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4NjgzRDU2MDY1NEFENTYy
QkFGRUI0MDBDNEM5NzI4MkI2NUVCOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3hRRVJ2V0FKVEFCQU12NEtqZ2ZaOUZVUnh5bzNHd3BKQkZ6ZlZQVFE5VEEvMS9E
ODY4M0Q1NjA2NTRBRDU2MkJBRkVCNDAwQzRDOTcyODJCNjVFQjhELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaLqhlN9CmowCLCtmsu5lXxRBAMzK0p8m7uxPbB5SfulIAq9Jt/l2PXYaQuix
CKAKyXN3nPUpa+kzMZpUewXvEi/4J1nIbn0hwjMHHh0FVnphwmvOVFA619HD/k93
wwMQdFhiAR3WWhDprjpoi9f0x9A48/8ufDfiK+kvH8HpaQpbgNfySfnJrpNglGW/
Z4yQ/Qte3OX64kLNn0o7eD58Gaafq7838BjP0bk3FdnqIt4PkRq7knOW+rVB6O28
f90AjiqGZMyS/pxy/YcZipAlSMr2CUGucLj/Krs7dyd0PDzmHiAA3cyDjiEwKLEZ
bjJdHSjX+hD/Pi0wX8bH93QF+Q==
-----END CERTIFICATE-----
Generated at Mon Dec 22 00:50:47 2025 by rpki-client