This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
File:                     5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft (raw, json)
Hash identifier:          +Lcg6brHbj/8wNLea9slaU4QBoaIjvdlT7NZkd2Fsa4=
Subject key identifier:   A3:D6:0E:09:07:FA:5A:5C:C0:28:16:27:28:A6:0C:BF:8B:29:D1:7C
Authority key identifier: 5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
Certificate issuer:       /CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
Certificate serial:       6205286A574B7F6B49DBBEFCF5E23BDB300D6E16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
Manifest number:          34
Signing time:             Mon 15 Dec 2025 11:32:48 +0000
Manifest this update:     Mon 15 Dec 2025 11:27:48 +0000
Manifest next update:     Tue 16 Dec 2025 12:19:48 +0000
Files and hashes:         1: 5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl (hash: N0q1vkOvPTpwYK83vFIGB+klIlv1/oBCDBf9sIRLLZs=)
                          2: 323830343a353863383a3a2f33322d313238203d3e20323638313439.roa (hash: FfX++mMThMyA5Phf+j3yBrq+Yb9+v6+7rFQbrQ23iVY=)
                          3: 34352e3137302e39322e302f32322d3332203d3e20323638313439.roa (hash: ABcV00bsmj4p/EAXwK9p2+WcufB6flOhojnHHzFZ/Ic=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Dec 2025 12:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:05:28:6a:57:4b:7f:6b:49:db:be:fc:f5:e2:3b:db:30:0d:6e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
        Validity
            Not Before: Dec 15 11:27:48 2025 GMT
            Not After : Dec 16 12:19:48 2025 GMT
        Subject: CN=A3D60E0907FA5A5CC028162728A60CBF8B29D17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:0d:3f:e6:c5:b9:5f:fa:cf:dc:19:97:34:
                    f1:cd:42:9f:84:bb:88:a4:a3:57:58:f9:ab:6f:45:
                    65:3b:02:dc:a8:91:b9:c6:92:52:68:73:f1:7b:e5:
                    f0:49:1d:ee:35:28:9f:22:49:63:f4:9c:74:29:8b:
                    4a:f7:d4:6a:3d:c4:fa:33:df:af:88:a6:da:59:e5:
                    08:18:33:63:f0:f0:ee:36:ca:6b:ae:14:1e:74:30:
                    56:36:6d:a6:45:84:b0:ba:51:61:7b:38:4a:39:a4:
                    10:2e:d2:3f:e0:37:ac:44:6a:84:9a:13:c1:52:94:
                    7f:a5:08:7f:f2:33:6a:b0:1c:63:7a:04:37:f1:f2:
                    4a:f3:e1:5a:93:1d:70:b4:91:5e:4d:68:6c:8f:8e:
                    28:06:8d:96:5f:fe:9d:12:7c:f8:66:b7:ae:dc:57:
                    27:22:c8:8e:a1:8c:86:ff:cb:eb:fc:2b:3d:cf:26:
                    b5:47:97:a9:f3:8b:3c:81:e1:9f:08:e7:a7:e0:cc:
                    09:e6:15:d3:06:39:77:09:9d:df:53:96:81:97:c1:
                    e4:32:7a:2f:91:d9:56:d6:0a:fe:37:25:07:6e:0f:
                    4a:78:f1:10:44:73:5d:90:86:4f:b0:4a:4f:92:84:
                    cd:63:96:5d:33:13:9e:40:b0:1b:6d:3f:a7:aa:5e:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:0E:09:07:FA:5A:5C:C0:28:16:27:28:A6:0C:BF:8B:29:D1:7C
            X509v3 Authority Key Identifier:
                keyid:5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:d4:4a:94:ec:71:b5:c9:d3:0a:1e:7e:fb:66:b8:4c:71:
         d4:1a:fb:c7:8d:56:ce:3c:42:ea:66:62:b8:98:23:86:35:39:
         66:f0:eb:ff:36:77:a2:18:c4:04:6c:a4:20:c6:e9:09:e2:46:
         7f:a9:ed:0a:36:e5:de:df:d3:a8:30:45:fc:72:2c:2c:53:d8:
         5a:c8:97:64:c6:a8:91:b1:12:04:96:64:9a:9d:c8:32:ca:4c:
         33:8b:1e:b3:ab:0a:e2:68:a6:bf:25:e7:9d:87:2a:86:4d:42:
         c5:fb:9d:36:a0:d8:00:05:5a:8f:09:d1:e0:7a:55:b4:1b:90:
         f1:3d:fc:1a:4f:e6:83:ac:3c:08:3b:2c:bf:aa:3b:64:7b:80:
         d5:a9:00:37:3a:7c:4a:1d:69:aa:8f:92:8d:c9:6e:f7:58:ff:
         70:d3:a6:0b:a6:80:07:71:29:43:68:af:69:ba:62:c2:70:87:
         92:96:f9:37:78:01:b1:f1:27:44:a8:8f:09:31:ab:14:0f:0d:
         ee:25:15:44:69:32:e2:e6:49:bf:48:53:69:3e:54:d7:f8:44:
         b7:42:47:98:e3:ad:4e:a3:f6:2e:be:dc:cd:99:6f:7d:5f:c0:
         ab:f6:02:08:a6:b4:d7:a0:59:e3:0e:39:76:8b:09:46:04:e5:
         b0:54:a8:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYgUoaldLf2tJ27789eI72zANbhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBOUMwMUY1MzQxQzdEQkVDNEExQTA5QkEwQjJDMTc2
ODYxMzk4RTAeFw0yNTEyMTUxMTI3NDhaFw0yNTEyMTYxMjE5NDhaMDMxMTAvBgNV
BAMTKEEzRDYwRTA5MDdGQTVBNUNDMDI4MTYyNzI4QTYwQ0JGOEIyOUQxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YQ0/5sW5X/rP3BmXNPHNQp+E
u4iko1dY+atvRWU7AtyokbnGklJoc/F75fBJHe41KJ8iSWP0nHQpi0r31Go9xPoz
36+IptpZ5QgYM2Pw8O42ymuuFB50MFY2baZFhLC6UWF7OEo5pBAu0j/gN6xEaoSa
E8FSlH+lCH/yM2qwHGN6BDfx8krz4VqTHXC0kV5NaGyPjigGjZZf/p0SfPhmt67c
VyciyI6hjIb/y+v8Kz3PJrVHl6nzizyB4Z8I56fgzAnmFdMGOXcJnd9TloGXweQy
ei+R2VbWCv43JQduD0p48RBEc12Qhk+wSk+ShM1jll0zE55AsBttP6eqXp8RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo9YOCQf6WlzAKBYnKKYMv4sp0XwwHwYDVR0j
BBgwFoAUX6nAH1NBx9vsShoJugssF2hhOY4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNllYTDN3eWp1d3J0ZnNGM3I4cmVMRlE1S25iZUF5R2hrdUs1Z2hLSmlD
UWQvMC81RkE5QzAxRjUzNDFDN0RCRUM0QTFBMDlCQTBCMkMxNzY4NjEzOThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTlDMDFGNTM0MUM3REJF
QzRBMUEwOUJBMEIyQzE3Njg2MTM5OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NllYTDN3eWp1d3J0ZnNGM3I4cmVMRlE1S25iZUF5R2hrdUs1Z2hLSmlDUWQvMC81
RkE5QzAxRjUzNDFDN0RCRUM0QTFBMDlCQTBCMkMxNzY4NjEzOThFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnRzUSpTscbXJ0woefvtmuExx1Br7x41WzjxC6mZiuJgjhjU5ZvDr/zZ3ohjE
BGykIMbpCeJGf6ntCjbl3t/TqDBF/HIsLFPYWsiXZMaokbESBJZkmp3IMspMM4se
s6sK4mimvyXnnYcqhk1CxfudNqDYAAVajwnR4HpVtBuQ8T38Gk/mg6w8CDssv6o7
ZHuA1akANzp8Sh1pqo+Sjclu91j/cNOmC6aAB3EpQ2ivabpiwnCHkpb5N3gBsfEn
RKiPCTGrFA8N7iUVRGky4uZJv0hTaT5U1/hEt0JHmOOtTqP2Lr7czZlvfV/Aq/YC
CKa016BZ4w45dosJRgTlsFSo2A==
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:56:18 2025 by rpki-client