This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
File:                     DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft (raw, json)
Hash identifier:          PQvml4xsgga4PcRdJ95UFD8yS5D5DcuSaVYK4aUQjds=
Subject key identifier:   59:65:95:2A:B6:95:41:AB:D6:6C:1E:B9:F8:6D:97:AD:C6:C4:05:12
Authority key identifier: DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76
Certificate issuer:       /CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
Certificate serial:       0D626860732E5BCB914B5842DF8DDD5DFC56F574
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
Manifest number:          0241
Signing time:             Sun 21 Dec 2025 02:16:04 +0000
Manifest this update:     Sun 21 Dec 2025 02:11:04 +0000
Manifest next update:     Mon 22 Dec 2025 04:36:04 +0000
Files and hashes:         1: 3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (hash: XhQtGkmxlIoTQ7XqEuCKGZLcMg+a7EX+70TZqKNxv0w=)
                          2: DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl (hash: /vlMvmwpa8uHgSvD0Z2HUU6O8Tv1I5ACdiwW6h6icq4=)
                          3: 323830343a326633383a3a2f33322d3438203d3e20323634383738.roa (hash: 8qCs3rHqS1/6KOvaWm8UdvtlldzimJVDXGto/kxbPrI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl
                          rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 04:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:62:68:60:73:2e:5b:cb:91:4b:58:42:df:8d:dd:5d:fc:56:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
        Validity
            Not Before: Dec 21 02:11:04 2025 GMT
            Not After : Dec 22 04:36:04 2025 GMT
        Subject: CN=5965952AB69541ABD66C1EB9F86D97ADC6C40512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:09:31:e3:7b:55:fc:51:ee:b6:81:4e:e7:
                    47:9f:c5:a8:18:29:c1:5b:29:d9:b3:c1:a0:23:41:
                    a6:c6:8d:66:52:85:bf:41:30:33:b2:b7:dd:19:12:
                    67:63:43:7c:ba:4e:e0:2d:7f:38:6b:b2:4a:21:9f:
                    15:0e:46:ae:ea:c1:d1:ca:3e:b1:d1:7c:c9:3d:d0:
                    06:fa:98:dd:af:5c:31:8c:7f:1b:68:d9:d7:a9:0e:
                    17:ce:3e:ae:21:c0:43:80:78:02:64:24:df:51:07:
                    35:84:6d:25:33:36:cc:3a:f5:ea:91:20:5e:15:8f:
                    db:43:ad:c1:7c:0d:33:df:39:ce:5c:df:b8:4b:16:
                    d6:5b:41:40:ae:26:b4:5a:d6:93:b3:82:c5:7f:8f:
                    fa:c5:68:e0:44:f3:4b:98:9c:a5:67:00:32:c8:cd:
                    b0:62:cb:81:8c:dd:c2:d0:34:de:d5:d9:23:92:2c:
                    a2:0d:20:4c:48:6e:f6:3c:33:ab:de:e6:63:61:67:
                    87:97:54:95:93:85:16:1c:2b:ab:d5:8c:9f:90:b1:
                    85:dd:5c:a3:60:5a:f3:2b:ef:24:8b:9f:04:24:49:
                    9c:4d:95:95:bb:fb:9b:d9:93:21:9c:1f:bd:44:bc:
                    94:a9:2d:b4:30:fd:3a:bd:8e:89:dc:f4:26:08:57:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:65:95:2A:B6:95:41:AB:D6:6C:1E:B9:F8:6D:97:AD:C6:C4:05:12
            X509v3 Authority Key Identifier:
                keyid:DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:24:2c:87:a7:bd:69:70:f7:5c:de:2c:ed:0c:07:c2:60:a7:
         77:eb:a5:1f:7a:46:b7:f2:da:f1:6e:f3:55:f5:52:e4:be:0a:
         b0:5e:38:e5:fe:05:54:dd:49:86:44:1c:4b:7b:44:63:ee:ae:
         fb:3d:44:34:27:33:ac:e1:38:fe:8d:ad:64:ba:8c:30:aa:94:
         93:b1:6c:90:8c:c5:69:10:38:dc:fa:30:ad:c6:17:1c:02:28:
         46:d6:49:37:3a:6b:d6:b0:92:a1:05:90:d8:5e:bb:fc:f1:c3:
         fc:4f:87:cd:12:ef:61:89:95:a6:bb:49:6f:7c:12:71:13:96:
         e5:af:d7:05:e9:47:a9:ef:19:f0:99:eb:0f:12:9d:82:9d:c5:
         a6:3a:8a:ff:b3:08:79:ef:8c:66:22:4d:4f:1c:d4:e7:b3:a6:
         1c:7c:fc:78:b9:8e:e3:01:1e:c0:a3:17:ca:71:9e:24:ea:52:
         e5:07:f0:20:67:c0:67:90:0e:bd:42:d2:02:0c:90:d9:0c:f4:
         98:03:0e:04:aa:53:2d:b1:82:22:9c:c7:e2:6b:de:ba:d0:b4:
         47:92:80:30:62:29:62:8f:b4:cc:4a:0d:c5:5e:ab:65:41:c6:
         fe:e1:3f:8d:f6:01:c1:03:6b:6c:b6:20:4a:2e:e6:14:f0:4a:
         2a:09:1a:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDWJoYHMuW8uRS1hC343dXfxW9XQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFDMEE2MjYwQjkwRUU2RjJGNjZCRkI5OThGNkQ2Mzcw
QjIxOUM3NjAeFw0yNTEyMjEwMjExMDRaFw0yNTEyMjIwNDM2MDRaMDMxMTAvBgNV
BAMTKDU5NjU5NTJBQjY5NTQxQUJENjZDMUVCOUY4NkQ5N0FEQzZDNDA1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ewkx43tV/FHutoFO50efxagY
KcFbKdmzwaAjQabGjWZShb9BMDOyt90ZEmdjQ3y6TuAtfzhrskohnxUORq7qwdHK
PrHRfMk90Ab6mN2vXDGMfxto2depDhfOPq4hwEOAeAJkJN9RBzWEbSUzNsw69eqR
IF4Vj9tDrcF8DTPfOc5c37hLFtZbQUCuJrRa1pOzgsV/j/rFaOBE80uYnKVnADLI
zbBiy4GM3cLQNN7V2SOSLKINIExIbvY8M6ve5mNhZ4eXVJWThRYcK6vVjJ+QsYXd
XKNgWvMr7ySLnwQkSZxNlZW7+5vZkyGcH71EvJSpLbQw/Tq9jonc9CYIVwV9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWWWVKraVQavWbB65+G2XrcbEBRIwHwYDVR0j
BBgwFoAU2sCmJguQ7m8vZr+5mPbWNwshnHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWU0TlRtTHJBamd4QlpLY3RZVXpBbVFCVEUyanpqVkVqb0dtOHg1cnhX
akQvMC9EQUMwQTYyNjBCOTBFRTZGMkY2NkJGQjk5OEY2RDYzNzBCMjE5Qzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQzBBNjI2MEI5MEVFNkYy
RjY2QkZCOTk4RjZENjM3MEIyMTlDNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWU0TlRtTHJBamd4QlpLY3RZVXpBbVFCVEUyanpqVkVqb0dtOHg1cnhXakQvMC9E
QUMwQTYyNjBCOTBFRTZGMkY2NkJGQjk5OEY2RDYzNzBCMjE5Qzc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkSQsh6e9aXD3XN4s7QwHwmCnd+ulH3pGt/La8W7zVfVS5L4KsF445f4FVN1J
hkQcS3tEY+6u+z1ENCczrOE4/o2tZLqMMKqUk7FskIzFaRA43PowrcYXHAIoRtZJ
Nzpr1rCSoQWQ2F67/PHD/E+HzRLvYYmVprtJb3wScROW5a/XBelHqe8Z8JnrDxKd
gp3FpjqK/7MIee+MZiJNTxzU57OmHHz8eLmO4wEewKMXynGeJOpS5QfwIGfAZ5AO
vULSAgyQ2Qz0mAMOBKpTLbGCIpzH4mveutC0R5KAMGIpYo+0zEoNxV6rZUHG/uE/
jfYBwQNrbLYgSi7mFPBKKgka0w==
-----END CERTIFICATE-----
Generated at Sun Dec 21 12:48:14 2025 by rpki-client