This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
File:                     CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json)
Hash identifier:          wur57EtaB5BrinCyHmMbXkf1oujXuIZXzjXsYePJVqY=
Subject key identifier:   44:AD:CB:79:CA:FA:CF:18:02:C9:77:1A:63:E8:DE:64:AB:34:82:72
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       49EEDEEDAFE06F8DC4C4D4CD4810E7C92416F8D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
Manifest number:          0345
Signing time:             Sun 21 Dec 2025 05:20:01 +0000
Manifest this update:     Sun 21 Dec 2025 05:15:01 +0000
Manifest next update:     Mon 22 Dec 2025 08:51:01 +0000
Files and hashes:         1: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=)
                          2: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=)
                          3: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=)
                          4: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=)
                          5: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: ilNs2NYlKhOnVrXS1SE5BiZMHchx3bOwA4EItExikLc=)
                          6: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=)
                          7: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=)
                          8: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=)
                          9: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:de:ed:af:e0:6f:8d:c4:c4:d4:cd:48:10:e7:c9:24:16:f8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Dec 21 05:15:01 2025 GMT
            Not After : Dec 22 08:51:01 2025 GMT
        Subject: CN=44ADCB79CAFACF1802C9771A63E8DE64AB348272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:55:09:da:6b:03:c4:af:17:ef:12:51:83:
                    3e:9d:4a:a1:a5:e3:42:93:35:07:cd:23:b4:df:5a:
                    37:6c:61:26:70:1e:02:ed:16:db:b9:e5:5e:86:8c:
                    1d:d2:6e:fa:c0:91:f0:e2:46:b4:d2:3f:f2:4e:94:
                    52:c2:9e:2a:0f:f6:e2:34:f3:92:42:25:62:e6:5a:
                    a8:22:e3:c4:63:19:5e:d8:93:86:39:b0:98:11:01:
                    2a:fe:7a:50:6d:a9:f7:3a:59:40:ff:45:ac:78:3e:
                    6d:37:3e:b0:a5:e8:7e:8e:19:98:75:e7:7c:7b:05:
                    04:1a:c1:aa:b9:10:f9:3a:50:27:68:9f:c3:f2:8a:
                    2c:c1:66:ad:8e:b9:1d:ee:77:96:c8:12:10:cf:4a:
                    9e:a0:51:45:af:96:b4:cd:07:f9:0b:40:12:7a:33:
                    6e:e0:1f:ec:29:4e:81:b6:bc:55:78:4d:12:39:31:
                    75:a7:2d:d7:b1:97:22:e6:b5:f4:ba:46:49:e8:bc:
                    b9:50:fb:8b:73:31:1b:42:77:0a:4b:2a:d0:44:70:
                    6f:e1:31:ad:05:33:f9:f5:6a:fb:f1:6c:d0:6b:c7:
                    32:42:b5:ac:3d:d6:b0:be:89:12:24:35:83:23:31:
                    31:b4:f3:ee:a4:83:45:a0:d0:11:2f:6a:7e:bc:a2:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AD:CB:79:CA:FA:CF:18:02:C9:77:1A:63:E8:DE:64:AB:34:82:72
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:72:a7:28:25:9f:f3:88:34:98:6c:9d:63:e0:09:a9:28:ce:
         c2:d9:09:52:78:29:ef:7f:f0:15:d6:11:8a:a6:d9:e0:3a:61:
         12:06:11:14:ea:58:ad:bf:62:11:48:e2:05:53:65:e2:bd:f2:
         be:7d:23:e2:41:03:db:44:c5:38:5d:14:e0:dd:a6:6d:c6:ab:
         86:9e:cd:d7:67:be:3f:b7:33:27:8d:77:d0:a4:de:e7:54:e6:
         d9:02:b8:4b:9a:09:92:32:af:c6:dc:ca:c2:82:05:d1:e4:8d:
         a9:34:70:1f:7d:c6:9a:45:4f:d2:97:da:83:24:b7:b8:bd:9c:
         f5:3d:df:1e:b3:3b:5b:3f:ce:e0:28:e3:1b:aa:99:62:79:23:
         e2:64:7b:ad:d0:6f:db:76:f1:84:b5:a5:56:2d:80:0c:e0:ed:
         99:d5:2b:9e:72:6c:46:26:80:33:82:f6:42:de:d2:74:0e:6f:
         ba:d1:d8:40:3d:d0:4f:5f:56:b5:ba:d5:54:d2:d6:53:ba:8a:
         72:af:f8:3b:c8:ee:23:97:a4:76:d7:7b:12:e8:84:fa:71:b5:
         57:11:48:b6:d1:d9:aa:85:8d:6a:1b:91:2c:5d:a4:58:88:0d:
         5a:e2:0f:4e:62:c3:e8:1b:b1:3d:d1:76:0b:06:e7:db:66:fd:
         dd:4f:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:46:17 2025 by rpki-client