This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
File:                     CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft (raw, json)
Hash identifier:          nixtybk8S1CfLKgMv8VYt+C9M6cxQ9QgpKl5pUJiJ10=
Subject key identifier:   C1:3A:02:D1:31:90:C1:57:A9:A5:0A:CE:A2:88:5D:ED:28:94:29:0A
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       7BB7A236638E4804B255F1F246E311B4C8C245DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
Manifest number:          02AA
Signing time:             Fri 19 Dec 2025 01:33:04 +0000
Manifest this update:     Fri 19 Dec 2025 01:28:04 +0000
Manifest next update:     Sat 20 Dec 2025 03:10:04 +0000
Files and hashes:         1: 3138372e38342e33342e302f32332d3233203d3e203533303532.roa (hash: u32/uZ4yBcFZXvw1hLPy5wYAoSgbMpUkCDwo8kvjvVg=)
                          2: 3138372e38342e34362e302f32332d3233203d3e203533303532.roa (hash: UClQSg5d2LzxtVMA205cUo5yxx7LvOnaqlInimQg1EE=)
                          3: 3138372e38342e33342e302f32342d3234203d3e203533303532.roa (hash: lmgeY7fAaR10ssIywHoCCyP8LGBH5UNBrGPC7eZ4zQc=)
                          4: 3138372e38342e33322e302f32332d3233203d3e203533303532.roa (hash: EjrCf60Rtu0VafIasVQW6Z1H0RWmHru/DLLXdifrZ5U=)
                          5: 3138372e38342e33352e302f32342d3234203d3e203533303532.roa (hash: bZVmKTe4oncs3dZRChOZ0UYNu+g+uqMW4C2vDaiETUQ=)
                          6: 3138372e38342e34352e302f32342d3234203d3e203533303532.roa (hash: 900GwKoLxuywtHi2SqZ8G9+u+NIBylaMovKRM4pBjzA=)
                          7: 323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (hash: Z8VMqKtS6c8oQSl/sZyuGYDCXY6Slrmo17tssEBJDrI=)
                          8: 3138372e38342e34372e302f32342d3234203d3e203533303532.roa (hash: ptMqnRj8LqtTtDG+YnpbMJF32fawipWNhijOzS4MOEU=)
                          9: 3138372e38342e33332e302f32342d3234203d3e203533303532.roa (hash: btC3yb2gw201qNYvn2GqTUoBvBbe/gJJzsej3Db9zs4=)
                          10: 3138372e38342e34342e302f32342d3234203d3e203533303532.roa (hash: 9Uw/JLq355+siGWWAMU/CgDbUsZIqm/MEzVaCAYKBtk=)
                          11: CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl (hash: EBItytOcgA3bAHutFdAaSNiWNxL0vFJxHBwVtX2oIBY=)
                          12: 3138372e38342e33322e302f32322d3232203d3e203533303532.roa (hash: vOhIqgDTIadDaon1gt7fCVy/mpXJQkIz6qG3ekLd3T0=)
                          13: 3138372e38342e34342e302f32332d3233203d3e203533303532.roa (hash: xD4wdwwwR+oV8RsTzFOurC+sut3yZ7juddhGug2RQrw=)
                          14: 3138372e38342e34362e302f32342d3234203d3e203533303532.roa (hash: nXz/KIfSPddgcWo+NtatqCl+xZjVvZgyj/lvyTHw/C4=)
                          15: 323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (hash: bJTlkydbXUGBFokn1m1/Z4uHnSRjk6Hkb7sXiET52kk=)
                          16: 3138372e38342e34332e302f32342d3234203d3e203533303532.roa (hash: 9wBAR6EySCOoaeFgP1A76cbE58LPawf6gcKLInE4pnU=)
                          17: 323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa (hash: p8Q9xfZr584df8txYSR0rLNpxjNicadK5aC0oskhtTk=)
                          18: 323830343a326634383a3a2f33352d3335203d3e203533303532.roa (hash: 6PLeUvtT+KVe+DrjTNHr6wre2GRXcTCr12nAkWKXpjw=)
                          19: 3138372e38342e33322e302f32342d3234203d3e203533303532.roa (hash: g5ktHwBrPb8+EV88G9qM6/0Gv9hItwrPCf8Q+6f8vzk=)
                          20: 3138372e38342e34342e302f32322d3232203d3e203533303532.roa (hash: 9TZ27uObGwwd8p5TrpjhMQuSRIxIL+nppt+AbR+BmNI=)
                          21: 323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (hash: i+HC1DDB2921eTVEjjqDNcq5RxoE+kOgojnIe172JKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 03:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:a2:36:63:8e:48:04:b2:55:f1:f2:46:e3:11:b4:c8:c2:45:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Dec 19 01:28:04 2025 GMT
            Not After : Dec 20 03:10:04 2025 GMT
        Subject: CN=C13A02D13190C157A9A50ACEA2885DED2894290A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:86:7c:5b:7b:ab:6d:a0:2a:8c:19:c7:c5:
                    70:cd:f0:b6:bf:ef:56:03:23:19:58:ee:b9:f2:50:
                    19:a5:02:63:eb:71:6c:11:7d:d5:3b:78:40:a8:71:
                    dd:0f:aa:1b:2d:0b:f2:23:a4:f5:18:d4:46:a2:e3:
                    0d:f1:53:dd:38:14:2f:6c:b1:f9:be:1c:45:c9:87:
                    bb:fc:32:25:10:f0:47:2b:40:85:cb:06:d5:56:91:
                    97:50:0d:0f:57:76:1e:75:dd:8b:bc:06:b6:64:5d:
                    2e:4c:9b:69:bb:05:72:fc:23:c0:8d:2e:28:2e:82:
                    a3:62:76:a3:88:23:2d:54:f1:ce:37:f4:95:97:c8:
                    f4:d1:4e:cf:68:86:b0:9e:37:43:db:01:7a:20:ff:
                    ad:31:24:4c:3e:a1:73:a3:58:0b:20:cb:80:f9:07:
                    e8:7c:1a:18:88:92:2e:d4:e6:f4:c5:0a:04:6b:a2:
                    31:76:ff:6f:ad:f9:ca:d4:3f:52:dc:5a:77:40:72:
                    a3:84:db:81:d2:7f:7b:39:69:e8:8b:2e:d2:06:34:
                    a8:63:aa:09:d5:ae:24:fb:ec:1c:ea:9b:62:d7:a9:
                    80:66:57:0d:7b:0a:19:94:4b:64:ae:c2:d1:f9:b0:
                    ad:42:ac:bb:da:80:ef:34:69:ab:82:94:3c:b7:24:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3A:02:D1:31:90:C1:57:A9:A5:0A:CE:A2:88:5D:ED:28:94:29:0A
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:17:39:6b:1f:53:17:11:3a:be:82:17:d4:60:7a:15:a4:
         12:f7:14:f8:02:e4:77:74:eb:28:49:94:0d:5b:70:95:13:58:
         00:a8:1a:9c:d5:ec:f7:1b:84:56:c4:10:cc:96:24:fd:b7:cd:
         51:e4:69:aa:3e:da:4b:4d:74:9d:a0:b8:0c:09:66:b4:e1:01:
         bc:7b:a9:aa:38:2a:b8:92:3a:9d:cc:2d:c6:b8:68:63:01:08:
         1d:86:02:99:f2:86:0e:19:57:3e:36:eb:73:70:ee:40:7c:f2:
         25:7a:39:02:e1:8b:1b:59:94:d0:f5:aa:b3:46:5d:2d:1a:e8:
         8c:c5:a9:9d:e9:bb:a4:11:8e:8a:40:50:9c:0c:a2:37:0f:5e:
         b9:a3:98:4a:c7:0f:43:e6:8c:b2:86:91:a3:ab:ca:ab:1f:d6:
         5a:79:ad:03:cb:e0:55:2d:cd:91:51:cd:47:66:5f:86:be:c1:
         f8:bb:19:8b:44:cf:19:11:5f:3b:df:f5:53:b5:58:dd:a1:28:
         74:b6:fb:91:4e:b4:c7:75:b5:3e:3a:75:e7:c8:d9:d0:fa:7a:
         33:8e:01:30:ea:7e:56:32:d2:e4:2d:be:05:71:db:d8:6e:69:
         19:b5:3a:5d:67:d8:d9:5f:73:a4:a8:ff:19:89:88:a5:0c:6f:
         12:04:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:26:42 2025 by rpki-client