This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
File:                     041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json)
Hash identifier:          d1W8S4neiE7CupzgzutCD/PEGN+v11+jAssaUnJhYpE=
Subject key identifier:   F7:D7:D2:7F:DF:9D:5D:24:31:8D:E7:BC:31:61:2B:D8:14:E2:01:F1
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Certificate issuer:       /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial:       09A4221981BB4CD0848C3127A80C7B1B080F1417
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
Manifest number:          75
Signing time:             Fri 19 Dec 2025 12:50:50 +0000
Manifest this update:     Fri 19 Dec 2025 12:45:50 +0000
Manifest next update:     Sat 20 Dec 2025 16:13:50 +0000
Files and hashes:         1: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=)
                          2: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: dm0S4tzRsFoSa5py3FE7col9keRXOtTHhLeuf2dyA3s=)
                          3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a4:22:19:81:bb:4c:d0:84:8c:31:27:a8:0c:7b:1b:08:0f:14:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
        Validity
            Not Before: Dec 19 12:45:50 2025 GMT
            Not After : Dec 20 16:13:50 2025 GMT
        Subject: CN=F7D7D27FDF9D5D24318DE7BC31612BD814E201F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:a4:94:3a:e9:44:94:9e:fd:a8:aa:f2:ad:
                    a2:95:b3:2a:f7:50:e2:33:f8:cb:4b:4f:16:02:49:
                    94:9d:91:6a:72:74:02:37:de:53:6d:f0:48:24:93:
                    60:d1:12:d6:f5:5d:27:9a:2e:22:63:e8:18:0a:6e:
                    62:3b:10:81:37:bf:c6:5b:36:88:3c:a8:39:7e:5f:
                    11:3f:37:ee:e8:25:5c:ef:39:a7:ed:7f:b9:bf:bf:
                    84:8b:4c:22:77:81:7a:e6:b4:60:06:05:a0:b3:1e:
                    75:05:03:72:0f:0e:88:f8:86:cf:dc:3d:62:c6:c4:
                    2f:a6:36:67:fd:a6:9f:67:ab:a6:8d:bf:2e:48:b5:
                    ac:35:26:73:87:59:0d:53:59:23:31:cb:c3:79:0c:
                    4a:1d:3f:ae:c1:d7:3a:49:5e:5e:42:6a:11:99:14:
                    9f:15:39:e5:73:6a:36:cb:0a:a2:18:a7:27:d6:44:
                    05:08:63:d8:27:9a:3e:8e:d2:09:59:25:65:77:55:
                    c6:1b:78:75:28:2f:d1:f4:ce:48:85:17:e4:99:97:
                    33:68:1d:1d:09:a5:86:75:e4:50:db:26:6e:26:4d:
                    38:f1:77:99:21:00:3f:d5:2b:3f:87:97:4b:0f:c5:
                    67:e5:2c:e9:4c:80:26:22:89:66:cd:61:87:b1:a4:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D7:D2:7F:DF:9D:5D:24:31:8D:E7:BC:31:61:2B:D8:14:E2:01:F1
            X509v3 Authority Key Identifier:
                keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:5a:69:75:d4:2f:c0:32:b7:0b:be:24:a1:3a:a9:b6:6a:
         8b:28:74:bc:10:d5:e9:c5:e3:a5:ae:6f:88:fe:5b:2f:21:14:
         6a:ab:92:a9:03:4a:9b:8c:7d:bd:59:03:26:e4:e4:79:76:2d:
         cd:c4:ca:3a:47:46:a7:e5:db:4d:57:e9:0e:b2:00:fc:aa:01:
         0f:32:61:d6:2b:89:33:1e:19:2a:63:37:df:c1:3b:d4:fe:04:
         a2:b8:e6:e3:d0:97:36:db:df:53:5e:05:57:4e:c1:e2:7e:96:
         45:6e:2e:c1:ee:f3:53:b7:a5:7e:c7:f8:d7:bf:f4:8b:dc:8d:
         b5:84:6f:3b:4c:fa:78:9a:4e:db:bf:0c:e1:a2:74:c1:b4:a7:
         a7:5d:50:ec:ac:49:85:e0:11:19:eb:df:fa:7a:35:73:2d:56:
         f9:c4:0f:e6:d4:ee:1c:eb:86:d5:0b:5e:6f:10:14:4f:37:45:
         a6:5d:02:39:49:e5:76:aa:24:bf:cb:bc:55:c7:95:9f:83:4c:
         8a:17:eb:7b:35:8c:69:24:a0:af:a9:72:44:3b:fb:6d:66:81:
         c9:1f:28:3d:8d:f1:30:13:7a:d5:c1:01:83:26:b4:37:c1:ff:
         f3:ad:ed:a9:a7:32:62:87:0e:91:9a:a6:45:95:4a:b0:f7:59:
         00:4c:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----