This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
File:                     A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft (raw, json)
Hash identifier:          rpnlDXMnymn7Mcj6OrPIaqt5wGDnFyC+VIgq/JFqC+0=
Subject key identifier:   13:F5:C8:1E:D4:C3:88:57:04:4A:75:5A:49:B4:C4:1F:68:93:3F:7C
Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Certificate issuer:       /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
Certificate serial:       717CEB79517ECE1DEFD8FA43D2E759C3AA75F74C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
Manifest number:          0329
Signing time:             Sun 21 Dec 2025 09:25:54 +0000
Manifest this update:     Sun 21 Dec 2025 09:20:54 +0000
Manifest next update:     Mon 22 Dec 2025 11:04:54 +0000
Files and hashes:         1: 323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (hash: ItHOB5NSOr3tcfc/B7XnxF4I381M7cjemmgQf3Y+EaI=)
                          2: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl (hash: zI9/8dokXwliKAQVKJn3/MaW7RTFqj/PKXo6m3zg1Ps=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl
                          rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 11:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7c:eb:79:51:7e:ce:1d:ef:d8:fa:43:d2:e7:59:c3:aa:75:f7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Validity
            Not Before: Dec 21 09:20:54 2025 GMT
            Not After : Dec 22 11:04:54 2025 GMT
        Subject: CN=13F5C81ED4C38857044A755A49B4C41F68933F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:6f:70:a7:17:91:42:3f:05:1a:9a:2a:f3:
                    17:cb:68:0c:06:ac:48:7f:8a:7e:73:04:85:a4:eb:
                    a2:32:d0:a0:b0:fe:42:65:32:b3:23:46:78:ab:5d:
                    84:b9:7e:43:c7:67:4b:8e:2a:a2:d2:27:f6:fd:bf:
                    39:d4:8e:c1:bd:a7:fa:71:c9:44:3a:9d:2a:ec:fa:
                    fa:16:19:83:29:c8:d1:c6:10:e8:c0:c2:9a:2d:5c:
                    eb:92:45:e7:50:71:ed:31:74:bf:eb:49:9e:1a:1e:
                    aa:46:2b:21:df:17:88:6c:3c:86:78:32:f6:ac:a6:
                    a8:ef:7c:81:95:20:c7:f4:45:ac:53:73:19:f6:82:
                    fd:b7:b7:28:ee:fb:ed:ae:52:0f:1f:8b:a7:7f:2b:
                    20:50:1e:30:b6:6e:e4:c0:cc:f0:fd:93:c2:4c:ea:
                    34:5a:76:8a:50:07:7f:00:df:d3:03:d0:a2:cc:54:
                    b9:8d:56:bb:57:58:3e:82:e2:37:76:25:59:0c:cd:
                    0e:19:fc:35:3a:bb:fb:b7:62:86:7c:de:97:b8:8e:
                    79:c9:42:26:34:33:83:7f:06:90:4e:9b:43:f9:2a:
                    e9:71:26:23:af:19:52:16:31:91:c2:84:22:41:05:
                    70:8e:43:8c:0b:f1:ad:0d:94:9c:cf:2b:6b:a0:5a:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F5:C8:1E:D4:C3:88:57:04:4A:75:5A:49:B4:C4:1F:68:93:3F:7C
            X509v3 Authority Key Identifier:
                keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:32:22:fa:af:d2:ba:c5:fa:2f:66:38:88:3f:43:9e:af:fc:
         d2:77:00:75:58:01:ab:41:92:ae:8d:ab:98:63:3c:fe:f2:62:
         14:fe:99:38:e3:4e:b1:8c:4e:61:a0:17:8a:84:d4:2a:41:e6:
         f5:64:82:0e:aa:57:54:0b:8e:2c:90:07:a4:c8:9d:af:8a:ee:
         84:14:cc:dc:4e:da:ef:4a:6b:50:ca:6e:39:21:a9:92:6e:26:
         41:eb:50:b8:f8:cb:30:6d:fc:6e:c8:11:00:67:95:d7:84:6f:
         13:57:22:67:b9:57:5f:a5:43:9c:27:1b:d0:ed:12:32:8d:95:
         b1:78:a4:15:c7:3c:81:03:6e:74:e0:3d:25:e5:53:bb:c8:82:
         7b:68:08:2e:aa:97:50:81:5e:4c:8a:8b:d6:c7:2d:c9:e8:a3:
         04:81:c9:66:b8:18:0e:86:92:8d:bd:86:78:89:6b:56:cc:b4:
         f1:3d:b1:9c:91:fc:81:0c:f2:f3:e9:7a:cf:3d:e0:2a:31:8e:
         e8:69:1c:a9:90:27:4f:35:dd:c2:be:05:f7:33:06:1d:0e:d9:
         8f:3e:1d:de:f6:3a:07:2c:bc:e3:35:a0:65:13:f9:f6:a4:8c:
         2b:2e:00:68:87:04:17:d0:ca:ee:e6:a0:49:ef:19:42:a9:7d:
         ad:86:aa:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcXzreVF+zh3v2PpD0udZw6p190wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBMzNDMkI5QjlCMUE1NjgzNDRDMTZFODlDRTg0RTdC
Q0U1RjA0MTAeFw0yNTEyMjEwOTIwNTRaFw0yNTEyMjIxMTA0NTRaMDMxMTAvBgNV
BAMTKDEzRjVDODFFRDRDMzg4NTcwNDRBNzU1QTQ5QjRDNDFGNjg5MzNGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWW9wpxeRQj8FGpoq8xfLaAwG
rEh/in5zBIWk66Iy0KCw/kJlMrMjRnirXYS5fkPHZ0uOKqLSJ/b9vznUjsG9p/px
yUQ6nSrs+voWGYMpyNHGEOjAwpotXOuSRedQce0xdL/rSZ4aHqpGKyHfF4hsPIZ4
MvaspqjvfIGVIMf0RaxTcxn2gv23tyju++2uUg8fi6d/KyBQHjC2buTAzPD9k8JM
6jRadopQB38A39MD0KLMVLmNVrtXWD6C4jd2JVkMzQ4Z/DU6u/u3YoZ83pe4jnnJ
QiY0M4N/BpBOm0P5KulxJiOvGVIWMZHChCJBBXCOQ4wL8a0NlJzPK2ugWok9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUE/XIHtTDiFcESnVaSbTEH2iTP3wwHwYDVR0j
BBgwFoAUpaM8K5ubGlaDRMFuic6E57zl8EEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5
WlUvMC9BNUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTMzQzJCOUI5QjFBNTY4
MzQ0QzE2RTg5Q0U4NEU3QkNFNUYwNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5WlUvMC9B
NUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALDIi+q/SusX6L2Y4iD9Dnq/80ncAdVgBq0GSro2rmGM8/vJiFP6ZOONOsYxO
YaAXioTUKkHm9WSCDqpXVAuOLJAHpMidr4ruhBTM3E7a70prUMpuOSGpkm4mQetQ
uPjLMG38bsgRAGeV14RvE1ciZ7lXX6VDnCcb0O0SMo2VsXikFcc8gQNudOA9JeVT
u8iCe2gILqqXUIFeTIqL1sctyeijBIHJZrgYDoaSjb2GeIlrVsy08T2xnJH8gQzy
8+l6zz3gKjGO6GkcqZAnTzXdwr4F9zMGHQ7Zjz4d3vY6Byy84zWgZRP59qSMKy4A
aIcEF9DK7uagSe8ZQql9rYaqPA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:20:09 2025 by rpki-client