This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
File:                     21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft (raw, json)
Hash identifier:          7NolyLKQB8skFzPsNYOzn91Lcpf/rUjp0St8xpQN+NI=
Subject key identifier:   87:55:56:E1:CA:4B:37:3F:FF:ED:3C:9A:15:3F:86:08:68:F8:43:10
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       08C30AA9CAA04EB60A6EC098857CE24C57E6A308
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
Manifest number:          0C
Signing time:             Fri 19 Dec 2025 00:19:44 +0000
Manifest this update:     Fri 19 Dec 2025 00:14:44 +0000
Manifest next update:     Sat 20 Dec 2025 01:01:44 +0000
Files and hashes:         1: 3137372e39312e3136322e302f32332d3233203d3e20323633343434.roa (hash: qfhSga2IMpoaAnUO25wNSoxFtOa32oTy1r7EZiIHqUA=)
                          2: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs=)
                          3: 3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (hash: RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=)
                          4: 3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (hash: lUN+QHTKJKyHBU3vjixy9YwVPc/E7x0KU1Uy3nCCZ9k=)
                          5: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg=)
                          6: 3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (hash: msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=)
                          7: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (hash: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=)
                          8: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: UTzGGjVGwAzOOUF7F0ZvNmPm5rv5LvLa1K3tF9sa8g4=)
                          9: 3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa (hash: YrSyty5bGR1uRDb8Pc1OIQ8F/gdjbsfNhN9xHOiu3FA=)
                          10: 323830343a313164633a653030303a3a2f33362d3336203d3e20323633343434.roa (hash: sdWDdEzXTllJ+b9NYdd0B6N/n2HV3FuMKb/yJx7dh8k=)
                          11: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (hash: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs=)
                          12: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (hash: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI=)
                          13: 323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (hash: 47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=)
                          14: 3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (hash: rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=)
                          15: 21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl (hash: VddEb/zsgUDV58JbkhMU28yY9vRV7oKvz8GACIIOT2I=)
                          16: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=)
                          17: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (hash: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo=)
                          18: 3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (hash: 8AGZo5c6QxM495LEDMYWHMa04vhnyj+L2PBY1psr7lo=)
                          19: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (hash: jIt7K6cMDluL2ivR2MlC/lVEKDeY8cBnN5Cq1s8X470=)
                          20: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (hash: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:0a:a9:ca:a0:4e:b6:0a:6e:c0:98:85:7c:e2:4c:57:e6:a3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Dec 19 00:14:44 2025 GMT
            Not After : Dec 20 01:01:44 2025 GMT
        Subject: CN=875556E1CA4B373FFFED3C9A153F860868F84310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:e4:32:c7:6e:aa:83:96:56:eb:21:70:7c:
                    34:42:20:70:3b:b2:6b:de:02:36:99:7d:2c:f7:aa:
                    17:37:81:ed:f7:55:e7:0d:e9:c4:f0:7b:8d:47:2d:
                    49:30:59:75:b9:4c:bb:2d:5e:72:08:ac:d2:67:f3:
                    d9:ee:7b:0d:51:ab:39:e7:20:57:f3:c6:af:92:7e:
                    ce:f4:6f:85:b8:09:b2:72:5b:0f:37:5d:47:70:d7:
                    de:e6:7b:26:22:b7:5b:90:7b:bc:38:3c:28:b7:a7:
                    67:b9:87:77:9c:b3:76:d6:8a:af:eb:12:6b:b7:6a:
                    7a:7c:5a:df:18:a4:84:26:3d:c0:06:f0:aa:a0:55:
                    d7:ac:bc:7e:12:b4:79:c0:d3:70:34:8d:bd:c7:94:
                    7e:51:09:ed:1f:86:b7:cb:5c:58:48:6f:03:8a:c3:
                    04:f3:04:96:9a:54:9e:12:c2:8f:fa:17:4e:1e:e0:
                    19:8c:f0:f2:9a:6e:04:85:89:8e:ed:3a:d4:36:d2:
                    f5:63:d3:47:61:a8:eb:7a:43:ac:df:b6:d7:cc:2a:
                    cc:b7:61:c7:0d:2a:78:26:b6:e8:6c:d1:dd:3b:d5:
                    93:2a:2a:ff:86:cf:ed:dd:7d:6a:e3:11:45:a6:b5:
                    9b:94:98:c7:1d:ec:6c:70:5d:0e:12:48:56:86:7b:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:55:56:E1:CA:4B:37:3F:FF:ED:3C:9A:15:3F:86:08:68:F8:43:10
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:d3:b8:81:86:fa:06:b8:7f:92:64:9f:0f:f6:e1:07:7a:
         d7:93:82:a9:ea:04:12:58:6b:3d:d7:14:2e:19:e0:e0:73:8b:
         19:64:bd:6d:e7:02:af:63:0b:cd:40:30:40:f7:6d:96:b5:07:
         8a:19:56:ce:b6:6e:5c:36:59:d6:d9:c9:09:fa:2f:35:0c:81:
         38:c9:f0:82:22:ed:73:1c:64:06:3f:b9:66:99:c3:cc:9a:00:
         64:44:4a:98:50:88:a5:c5:a9:12:41:fe:54:a2:e0:e9:b6:c3:
         0c:eb:eb:d1:1f:2e:3c:cd:83:60:11:20:63:2a:98:7a:5c:dc:
         03:57:87:c2:84:6e:5b:7f:86:c5:6b:35:09:3b:e2:d8:1c:7b:
         28:32:b6:6e:15:19:d2:ec:52:75:63:3c:8e:1a:01:50:ac:ff:
         dd:f9:f8:a7:b5:df:a1:38:ec:3e:de:b5:90:f2:bf:c3:f6:ed:
         5a:47:96:b5:90:85:e1:13:59:53:6c:6a:5e:16:bf:55:7d:71:
         f5:8b:19:b5:ef:63:f1:77:7b:b8:d8:7f:fd:55:b0:9d:23:69:
         00:36:77:00:fd:af:dc:96:43:8a:43:dc:fa:ad:1e:db:23:cf:
         f2:da:b2:c6:9d:e8:d7:a2:13:85:71:85:e4:87:ff:98:34:88:
         49:92:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:10:03 2025 by rpki-client