This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
File:                     0144765DC0A3D9D0EADA845625C5E7F14C552690.mft (raw, json)
Hash identifier:          XnSFkKiDRZ9oFNxnzUFzTYDxkfGU03Ww+EZE9aZR070=
Subject key identifier:   09:73:D2:91:23:78:1B:08:42:65:F4:92:14:A5:21:73:23:84:AE:9F
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       718D06B94FE98B806C416B3E50D238A06D2E6070
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
Manifest number:          033C
Signing time:             Wed 17 Dec 2025 01:48:08 +0000
Manifest this update:     Wed 17 Dec 2025 01:43:08 +0000
Manifest next update:     Thu 18 Dec 2025 04:37:08 +0000
Files and hashes:         1: 3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (hash: 1mzUcj1sNHKzjfDU+7cHNnepGEyMUv6pmpxEnNz5KuQ=)
                          2: 3139302e31312e3230382e302f32322d3232203d3e20323730363532.roa (hash: hnJhIlX1z2pCKEWSn9M5vvHn9RjGgWodCeRfYdgMFDw=)
                          3: 3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa (hash: gIrZGV6qfZRPc1k7EX8lPWpUTjt8p41wk0Spq/jn2UA=)
                          4: 3139302e31312e3230382e302f32342d3234203d3e20323730363532.roa (hash: BmtgFOdBLPBquuUWRKGzkW7Qm+ELv88BCjIfbP3+w1o=)
                          5: 3139302e31312e3231302e302f32332d3233203d3e20323730363532.roa (hash: FoimR/i8e/K9I4JwsdqOtV8GRxBWwnRq1NIO/wvW2qM=)
                          6: 323830343a366635303a3a2f34302d3430203d3e20323730363532.roa (hash: 85VYWPylZPG3azTO4ruejh22G4V2zLLp2zu3VS5xoDc=)
                          7: 323830343a366635303a343030303a3a2f33342d3334203d3e20323730363532.roa (hash: w0hnOtDNtUYfkospoe066OtiVdBA3sr+BtUAHJ8gQVY=)
                          8: 0144765DC0A3D9D0EADA845625C5E7F14C552690.crl (hash: qxe54HlrakDqfhLTPL7UR9vd3SmsYds6nYVnFuBGAoA=)
                          9: 3139302e31312e3231312e302f32342d3234203d3e20323730363532.roa (hash: 3F1/mZIHE4YwnyOK4gjpdhRY/JvtAB2Lm31znwjrJfo=)
                          10: 323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa (hash: guWzVWdZDSS3vHkNkAmE5el4RHx6iRZVqybu7ipDh6o=)
                          11: 323830343a366635303a3a2f33322d3332203d3e20323730363532.roa (hash: VK3FH23DXj4u16+Zm8MmLj7wQrLYEl6IunfdVCDfIB4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8d:06:b9:4f:e9:8b:80:6c:41:6b:3e:50:d2:38:a0:6d:2e:60:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Dec 17 01:43:08 2025 GMT
            Not After : Dec 18 04:37:08 2025 GMT
        Subject: CN=0973D29123781B084265F49214A521732384AE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:20:9e:73:a9:47:94:98:9f:22:1f:76:5c:
                    35:7b:2a:85:29:ed:17:4a:52:f0:f6:c7:50:4c:ac:
                    86:ae:5c:d7:a5:5a:46:c9:f2:3c:19:57:9d:ee:ad:
                    32:58:8a:7a:f9:1b:e9:95:cd:27:bb:cd:a5:fc:14:
                    49:71:76:53:4a:15:aa:0d:e4:63:78:d8:6f:69:ba:
                    63:66:0b:86:09:00:36:56:c0:cf:f4:27:6e:c1:2d:
                    61:19:ca:f7:34:fa:d1:20:f3:9b:79:82:5a:0f:4c:
                    56:2b:b8:ed:65:70:0a:a0:b9:ba:5c:09:fe:7f:f4:
                    f9:35:49:3e:42:8e:e9:f6:02:7a:5c:b5:a5:e0:a5:
                    ca:9d:7a:ac:c2:56:69:fa:b5:aa:4c:25:ae:7f:c0:
                    52:f0:23:4c:e8:89:ad:21:17:82:f4:7b:a9:43:c2:
                    a8:a3:da:55:fd:5a:e1:eb:13:d5:65:34:0d:06:cd:
                    27:d6:3f:bc:62:59:13:ce:41:e3:40:b9:c6:93:1f:
                    68:f4:36:45:8c:49:f4:64:ef:25:66:f0:e4:9c:48:
                    09:f8:26:bc:32:a6:bf:76:ac:fb:27:97:77:89:73:
                    f4:55:2b:5c:e0:87:29:e9:57:72:be:05:a0:2f:03:
                    62:eb:8a:69:a6:55:54:46:c7:16:c7:fc:b3:4f:7a:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:73:D2:91:23:78:1B:08:42:65:F4:92:14:A5:21:73:23:84:AE:9F
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:e9:37:6a:b1:c3:6f:b4:78:bf:2b:11:39:1b:04:1c:c5:
         ff:91:75:4a:e7:1d:ee:06:fc:86:e3:26:2f:1d:7d:7b:9c:48:
         6a:0b:fa:e3:e0:b8:80:ec:18:a2:bc:70:2c:54:8f:22:69:d2:
         2a:a1:c4:11:9f:f1:9a:81:65:86:dc:44:2a:48:45:b9:c5:c7:
         c7:81:30:55:c7:8a:f4:6d:43:d8:45:47:49:da:34:31:a6:ee:
         41:a9:8f:60:76:24:86:4f:9f:2b:e2:25:9e:53:6d:73:31:d5:
         08:d3:04:30:84:9c:be:50:3b:48:be:f4:92:3b:9b:18:66:25:
         14:45:f7:68:27:f8:b8:93:7b:f5:c7:3f:a1:13:a4:c7:74:6a:
         b7:e2:78:75:20:25:65:87:32:cc:f9:9a:57:84:3d:ec:07:9a:
         4f:f3:24:07:1a:95:bb:86:92:4a:61:fa:68:98:ba:09:d4:a7:
         69:bf:1d:3d:07:98:a3:96:22:0d:02:41:14:14:39:01:83:c5:
         e3:08:63:59:ef:e1:94:f4:11:35:eb:30:3c:ec:f8:cb:4d:e0:
         31:9f:5e:a9:80:c4:4a:c6:ca:1a:ac:b9:aa:08:48:78:3f:a7:
         ab:bd:ac:f0:47:4d:60:db:a6:85:75:50:88:43:9a:42:90:be:
         9b:83:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:10:49 2025 by rpki-client