This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/696A70DCA9ED858A8EF7595C00FA3B68150E406C.mft
File:                     696A70DCA9ED858A8EF7595C00FA3B68150E406C.mft (raw, json)
Hash identifier:          BEDAlvPCAMOmFki7TIuw29kFqMNOSAevqznp9TK+rs0=
Subject key identifier:   0E:90:30:47:8F:22:33:3B:F2:3F:0B:EF:F1:B8:A0:A7:31:33:3F:CC
Authority key identifier: 69:6A:70:DC:A9:ED:85:8A:8E:F7:59:5C:00:FA:3B:68:15:0E:40:6C
Certificate issuer:       /CN=696A70DCA9ED858A8EF7595C00FA3B68150E406C
Certificate serial:       49BE5CF800E7F0E5F684347261CF716E14D0E2A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696A70DCA9ED858A8EF7595C00FA3B68150E406C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/696A70DCA9ED858A8EF7595C00FA3B68150E406C.mft
Manifest number:          09
Signing time:             Tue 23 Dec 2025 20:47:49 +0000
Manifest this update:     Tue 23 Dec 2025 20:42:49 +0000
Manifest next update:     Wed 24 Dec 2025 21:57:49 +0000
Files and hashes:         1: 323830343a386330383a3a2f33322d3438203d3e20323733373735.roa (hash: hedSFyfEQ6Y0h+QuuAt4Hb1uZPb1xy5JvGqvX43+2yQ=)
                          2: 696A70DCA9ED858A8EF7595C00FA3B68150E406C.crl (hash: lBjZhwvSr+jf3v0CRMoVfKgFl6uWRWZlXKUzvgqenlA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/696A70DCA9ED858A8EF7595C00FA3B68150E406C.crl
                          rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/696A70DCA9ED858A8EF7595C00FA3B68150E406C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696A70DCA9ED858A8EF7595C00FA3B68150E406C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 21:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:5c:f8:00:e7:f0:e5:f6:84:34:72:61:cf:71:6e:14:d0:e2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696A70DCA9ED858A8EF7595C00FA3B68150E406C
        Validity
            Not Before: Dec 23 20:42:49 2025 GMT
            Not After : Dec 24 21:57:49 2025 GMT
        Subject: CN=0E9030478F22333BF23F0BEFF1B8A0A731333FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:75:3f:48:39:e9:59:8c:fa:4c:05:c2:69:
                    bd:ae:bf:01:3c:79:43:f1:1b:75:7e:71:a4:90:fc:
                    2b:be:54:c8:f4:ec:83:62:10:36:a2:da:61:88:21:
                    49:bb:04:c6:f2:75:f0:36:f8:e9:ac:50:9c:e8:e9:
                    91:7e:05:7c:14:fb:6f:f2:e6:72:b7:8f:07:95:ea:
                    81:fe:22:75:54:1c:17:0a:c5:e4:f2:31:a8:27:68:
                    d7:2d:06:ff:b6:e6:9e:de:57:d8:91:50:18:9e:63:
                    bc:6a:e3:8b:a0:fa:60:4f:b0:a5:94:c8:d7:22:f4:
                    79:65:13:10:0b:9a:76:9e:8f:28:94:73:8e:1c:0f:
                    2b:9a:4c:f9:2c:74:74:5e:57:ab:a3:14:11:bd:bf:
                    b2:20:ec:a5:43:06:74:be:31:21:b2:13:e9:51:ee:
                    d9:49:b9:33:ca:c7:54:7d:40:0f:9c:c1:21:e7:af:
                    be:97:5b:9f:20:64:dd:9c:a9:8d:9d:f4:d6:28:fd:
                    a6:32:e6:41:c8:75:7d:c1:be:02:5d:83:4e:f2:a0:
                    45:f1:6a:5e:b6:2d:b6:91:f1:cd:e9:08:ce:a4:20:
                    52:bc:1f:ac:5c:82:dc:7b:8d:ce:bc:84:bc:7a:e4:
                    24:b6:58:43:65:09:0b:ef:a6:82:9b:df:29:a8:ed:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:90:30:47:8F:22:33:3B:F2:3F:0B:EF:F1:B8:A0:A7:31:33:3F:CC
            X509v3 Authority Key Identifier:
                keyid:69:6A:70:DC:A9:ED:85:8A:8E:F7:59:5C:00:FA:3B:68:15:0E:40:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/696A70DCA9ED858A8EF7595C00FA3B68150E406C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/696A70DCA9ED858A8EF7595C00FA3B68150E406C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbkySwzj61GCg4BJzkguhAfwQR4RLLKkT4bsUuA8wkYY/0/696A70DCA9ED858A8EF7595C00FA3B68150E406C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:37:31:a7:81:7b:46:18:b4:1a:e3:fc:8c:fe:30:5d:a9:
         e7:c7:64:3b:2a:c5:26:80:e7:eb:a8:ce:1d:8e:0a:2c:6a:fd:
         55:b2:c1:81:68:8a:cc:f1:81:49:94:68:28:36:28:65:bf:02:
         49:a0:49:79:6c:d5:78:2e:a0:89:26:be:f7:4a:26:f5:fd:d4:
         be:47:54:f1:16:ee:30:0a:84:07:35:64:95:5e:3f:fe:f9:bd:
         6d:8b:85:28:c6:1e:17:e0:0e:97:45:02:b8:19:95:b6:8f:15:
         04:b4:a8:28:9d:bc:4d:3f:cf:0a:e7:67:6d:fd:76:c2:2f:5e:
         cd:11:7f:4d:33:a8:b2:80:b5:44:e7:e1:4c:0d:ca:b5:f8:8c:
         29:c5:88:12:41:60:89:ad:64:8d:30:85:ff:f6:1f:f2:03:df:
         3d:c7:ab:28:5c:f2:cb:c4:f4:46:02:58:4d:f8:42:fb:fb:9a:
         b0:e1:fa:f3:65:5e:44:e3:3d:f5:c4:f8:17:e7:20:41:ac:88:
         e5:4a:fb:74:98:23:9f:72:0c:ee:f0:40:47:02:70:ee:dc:69:
         d7:2a:20:a1:a8:95:9e:32:72:3e:be:0a:0a:2b:76:83:a0:18:
         be:1a:ee:ae:f7:91:d1:1a:16:ff:f3:a8:ba:47:a3:69:8c:09:
         3d:5f:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:12 2025 by rpki-client