This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
File:                     D04A2BA80F368597BB2029B3E31276E45382A900.mft (raw, json)
Hash identifier:          DOjKYVRkwjmzWf5kl6yxkZU56bMICd4+nK4Cg+b191M=
Subject key identifier:   5C:72:99:5E:74:EF:FD:7C:F6:C1:68:66:EE:0B:68:6E:02:1D:19:8C
Authority key identifier: D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00
Certificate issuer:       /CN=D04A2BA80F368597BB2029B3E31276E45382A900
Certificate serial:       5207315E6A82A53D4AA4EEBF367CFA3BFCE245D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
Manifest number:          030E
Signing time:             Sun 21 Dec 2025 21:52:55 +0000
Manifest this update:     Sun 21 Dec 2025 21:47:55 +0000
Manifest next update:     Tue 23 Dec 2025 01:15:55 +0000
Files and hashes:         1: 3139312e33372e3135322e302f32312d3234203d3e20323633333632.roa (hash: b9wsKYq5erHquZE6Op6Jcbt6QAtYV75xNDBj0athA44=)
                          2: 323830343a313466383a3a2f33322d3438203d3e20323633333632.roa (hash: pssXzzkZaq3UsM851rUzbCGW51xSnEtBsco0X5hWz5E=)
                          3: D04A2BA80F368597BB2029B3E31276E45382A900.crl (hash: hrYf2Tr/vNuG8ItyDcoyiy/Tzf0Ey1jds1hyMDpb55k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl
                          rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 01:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:07:31:5e:6a:82:a5:3d:4a:a4:ee:bf:36:7c:fa:3b:fc:e2:45:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04A2BA80F368597BB2029B3E31276E45382A900
        Validity
            Not Before: Dec 21 21:47:55 2025 GMT
            Not After : Dec 23 01:15:55 2025 GMT
        Subject: CN=5C72995E74EFFD7CF6C16866EE0B686E021D198C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:cb:ae:fd:02:96:a6:24:52:1e:79:ef:9b:
                    3e:db:af:d3:5b:83:ad:f4:d7:0b:63:17:ac:2b:3c:
                    68:7b:9b:57:70:70:41:62:00:ef:ad:2f:92:74:b4:
                    65:76:e6:fa:a6:00:f9:9f:87:bf:33:43:7c:5f:9c:
                    0c:9a:fe:58:e1:94:3f:7a:f3:df:49:3c:23:80:b4:
                    f6:a6:eb:dd:fd:1d:72:54:42:a8:32:ff:63:72:63:
                    01:64:7b:0b:68:69:42:21:11:e5:0b:6d:6c:ef:02:
                    a4:6f:1c:69:a3:f7:0b:4b:d0:40:24:2b:e0:9d:dd:
                    f5:a1:24:56:6d:2d:78:f1:79:23:26:5c:f1:d9:74:
                    ea:b6:13:e6:fa:d8:51:cc:07:94:96:72:b9:00:3c:
                    35:11:7a:6b:73:29:fc:1a:e9:b8:e6:88:59:e9:8a:
                    e4:b6:2f:37:f1:74:cd:af:5a:ab:32:04:53:f1:ff:
                    26:9e:10:5d:f7:ea:dd:f8:8a:45:5a:34:6c:c9:d6:
                    4d:d0:d9:9b:be:bc:cf:29:a7:0f:56:6d:5d:35:e1:
                    7a:9f:51:56:dd:60:38:5c:f1:52:4e:dd:59:95:91:
                    54:24:98:da:eb:0f:6a:c9:b6:17:61:67:c5:b1:e6:
                    b9:15:bf:a1:58:9f:bb:c8:2c:ae:a3:ef:93:36:ad:
                    62:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:72:99:5E:74:EF:FD:7C:F6:C1:68:66:EE:0B:68:6E:02:1D:19:8C
            X509v3 Authority Key Identifier:
                keyid:D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:75:3c:1b:70:67:ea:da:5d:b5:7c:9c:c5:df:1b:59:fd:5b:
         76:81:a0:dc:47:69:6b:bf:62:72:be:f5:74:5e:6c:7c:4c:49:
         5b:72:a1:f8:9f:79:3d:17:67:7e:93:6a:73:46:0f:f3:11:70:
         6a:d9:10:ed:93:93:bd:01:2d:cc:74:87:bc:a2:e4:f6:9c:3e:
         56:14:0a:de:ec:56:69:b9:2c:58:0f:6c:66:35:5e:b7:c2:3a:
         66:f6:76:ce:ea:cb:21:61:7e:fc:9e:3f:ea:e3:bf:fc:e6:01:
         3d:61:7c:c4:b7:48:e1:3f:cb:88:dc:5a:19:68:fa:e6:15:7d:
         84:33:66:48:c1:13:ba:06:67:98:8c:fa:9c:99:be:07:a8:9c:
         40:9f:40:79:14:80:03:5e:00:b0:38:d9:03:6a:fe:ca:84:a1:
         3c:9a:64:02:38:36:d5:82:f0:2c:d8:e9:ce:e0:7b:27:f9:4a:
         12:ec:4d:84:08:18:1c:d6:a4:46:51:e9:99:20:02:be:09:b5:
         82:09:58:89:5f:10:aa:14:58:98:1c:a5:e0:95:c8:00:ec:40:
         ca:75:0f:6c:10:81:75:ba:21:b8:4f:a8:a6:aa:a2:b9:b6:e2:
         5e:b6:a5:ae:3c:69:10:c5:00:d8:58:13:60:6a:c1:75:1d:cd:
         5c:4a:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----