This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
File:                     9A0F3F8F96F763E503AA1695E46721EED45714D7.mft (raw, json)
Hash identifier:          JrDHnS89qrOrA5MDoKrHUGaKJL4MPRKchT0kljS+DVs=
Subject key identifier:   DA:63:C6:76:E0:CB:9F:3D:7C:D9:83:33:B9:43:F9:4F:7E:E3:DC:04
Authority key identifier: 9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7
Certificate issuer:       /CN=9A0F3F8F96F763E503AA1695E46721EED45714D7
Certificate serial:       7357B9343E67FF4C7342D592DCD2F00DC600AFD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
Manifest number:          DD
Signing time:             Fri 19 Dec 2025 11:21:10 +0000
Manifest this update:     Fri 19 Dec 2025 11:16:10 +0000
Manifest next update:     Sat 20 Dec 2025 15:11:10 +0000
Files and hashes:         1: 9A0F3F8F96F763E503AA1695E46721EED45714D7.crl (hash: lT01b6BKZBLm2eXwE3xcwS1N65GeH4DUbaeSm5ei5xo=)
                          2: 34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa (hash: V7ee/ZIyjG1csvf3721aEFPJJ+X8O/x+M2dogK6V9Vg=)
                          3: 323830343a383331303a3a2f33322d313238203d3e20323732313734.roa (hash: gY8DEVjBzvPz7spBGxxGuDN6TdzH048FCCv/sMByRtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl
                          rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 15:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:57:b9:34:3e:67:ff:4c:73:42:d5:92:dc:d2:f0:0d:c6:00:af:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0F3F8F96F763E503AA1695E46721EED45714D7
        Validity
            Not Before: Dec 19 11:16:10 2025 GMT
            Not After : Dec 20 15:11:10 2025 GMT
        Subject: CN=DA63C676E0CB9F3D7CD98333B943F94F7EE3DC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:66:11:23:93:88:71:23:9a:4d:26:8b:6a:
                    17:63:47:54:c1:54:75:a2:79:24:3c:0a:bc:08:6f:
                    c1:45:43:9d:5b:6b:f3:ef:0c:cc:0a:6f:31:7c:74:
                    7f:af:86:9b:72:f2:69:7a:27:0f:72:64:12:da:61:
                    90:11:25:0f:4f:c8:a1:19:10:d0:5d:78:f5:a3:58:
                    9b:a8:ea:4d:26:fa:35:74:2f:93:d7:e1:9c:26:4b:
                    7c:26:17:22:ae:7a:d0:20:9d:e5:71:e2:59:12:e6:
                    a8:1d:3a:7a:61:da:80:8c:2d:1b:3c:d3:3b:e9:0f:
                    85:9a:bd:25:69:43:1d:c8:07:98:dd:31:01:83:1f:
                    96:e5:5a:39:d5:44:4e:74:9a:3e:38:44:b2:11:ad:
                    01:8f:ec:11:31:e5:4a:77:da:99:96:28:4c:7e:2b:
                    a6:70:8d:48:40:41:6f:96:30:6b:ff:ab:7c:91:26:
                    b5:35:cd:64:0b:27:77:f7:92:8e:b6:af:56:2c:ae:
                    1e:39:96:ce:62:c1:94:2c:b2:d3:5b:c6:8c:ef:f6:
                    a5:8d:43:82:eb:a7:b3:16:56:d0:fd:ca:a3:62:2b:
                    66:ca:3b:54:f9:14:6b:6b:ec:92:49:fe:9f:57:a5:
                    76:96:7c:b4:10:e0:3f:b5:74:83:9b:ff:8d:b2:36:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:C6:76:E0:CB:9F:3D:7C:D9:83:33:B9:43:F9:4F:7E:E3:DC:04
            X509v3 Authority Key Identifier:
                keyid:9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:9f:47:9f:27:f2:f8:d1:97:51:27:b4:fe:19:44:59:42:52:
         c2:13:74:42:ac:64:8a:51:ce:b5:22:98:22:89:57:1f:00:ef:
         ed:4c:52:4c:23:84:c6:d3:d1:d0:8b:92:b9:93:b1:22:e7:b7:
         c4:08:d6:ed:96:c1:02:46:a5:e6:26:4c:55:42:de:07:17:6c:
         d3:70:e2:90:a9:ff:1a:12:79:80:33:3a:a3:69:37:93:32:8b:
         3f:cb:59:b1:39:0b:9d:6b:7c:09:48:2a:f0:61:67:7b:8e:8d:
         14:5b:94:fa:53:9d:53:f4:b0:01:74:1b:b6:af:31:66:61:20:
         1b:0b:9d:8a:07:97:8a:fd:1d:d2:58:25:69:de:0b:f6:35:9e:
         be:90:02:26:d0:08:e2:27:85:54:2f:35:52:e3:57:56:3f:35:
         a5:29:dd:44:77:33:4e:0a:20:1d:ab:c9:c8:24:df:ce:66:20:
         73:a5:eb:95:51:2e:5d:ca:10:1c:dc:ed:c7:f9:54:66:a6:18:
         d4:22:b4:a0:8f:d5:a2:0f:7b:45:04:bf:c9:3a:68:a9:9a:10:
         1e:ee:67:41:43:de:44:03:cb:95:75:89:c2:0f:31:f8:fd:f9:
         72:d1:c8:cc:12:3e:d3:23:c7:6b:fb:8d:2e:da:c6:b3:63:13:
         f4:24:8c:cb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUc1e5ND5n/0xzQtWS3NLwDcYAr9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEwRjNGOEY5NkY3NjNFNTAzQUExNjk1RTQ2NzIxRUVE
NDU3MTRENzAeFw0yNTEyMTkxMTE2MTBaFw0yNTEyMjAxNTExMTBaMDMxMTAvBgNV
BAMTKERBNjNDNjc2RTBDQjlGM0Q3Q0Q5ODMzM0I5NDNGOTRGN0VFM0RDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5GYRI5OIcSOaTSaLahdjR1TB
VHWieSQ8CrwIb8FFQ51ba/PvDMwKbzF8dH+vhpty8ml6Jw9yZBLaYZARJQ9PyKEZ
ENBdePWjWJuo6k0m+jV0L5PX4ZwmS3wmFyKuetAgneVx4lkS5qgdOnph2oCMLRs8
0zvpD4WavSVpQx3IB5jdMQGDH5blWjnVRE50mj44RLIRrQGP7BEx5Up32pmWKEx+
K6ZwjUhAQW+WMGv/q3yRJrU1zWQLJ3f3ko62r1Ysrh45ls5iwZQsstNbxozv9qWN
Q4Lrp7MWVtD9yqNiK2bKO1T5FGtr7JJJ/p9XpXaWfLQQ4D+1dIOb/42yNtjfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU2mPGduDLnz182YMzuUP5T37j3AQwHwYDVR0j
BBgwFoAUmg8/j5b3Y+UDqhaV5Gch7tRXFNcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81RDVpeUNuaE1qcU1Na1czVFpkM3l5VmhCd3k2R3ozMkQxRTZIcHBhSGEx
LzAvOUEwRjNGOEY5NkY3NjNFNTAzQUExNjk1RTQ2NzIxRUVENDU3MTRENy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85QTBGM0Y4Rjk2Rjc2M0U1MDNB
QTE2OTVFNDY3MjFFRUQ0NTcxNEQ3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVE
NWl5Q25oTWpxTU1rVzNUWmQzeXlWaEJ3eTZHejMyRDFFNkhwcGFIYTEvMC85QTBG
M0Y4Rjk2Rjc2M0U1MDNBQTE2OTVFNDY3MjFFRUQ0NTcxNEQ3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
wp9Hnyfy+NGXUSe0/hlEWUJSwhN0QqxkilHOtSKYIolXHwDv7UxSTCOExtPR0IuS
uZOxIue3xAjW7ZbBAkal5iZMVULeBxds03DikKn/GhJ5gDM6o2k3kzKLP8tZsTkL
nWt8CUgq8GFne46NFFuU+lOdU/SwAXQbtq8xZmEgGwudigeXiv0d0lglad4L9jWe
vpACJtAI4ieFVC81UuNXVj81pSndRHczTgogHavJyCTfzmYgc6XrlVEuXcoQHNzt
x/lUZqYY1CK0oI/Vog97RQS/yTpoqZoQHu5nQUPeRAPLlXWJwg8x+P35ctHIzBI+
0yPHa/uNLtrGs2MT9CSMyw==
-----END CERTIFICATE-----