This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
File:                     652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft (raw, json)
Hash identifier:          EWaCF8VU7dUg8RfOc9G8OphCTxC7Ws3KjTpGpCIimuM=
Subject key identifier:   05:0F:7C:A0:10:03:7E:F7:48:AA:A9:D0:20:6F:3E:99:F1:63:B5:DF
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       62ECEC962328967FB27B59D8D60B29513CC0B579
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
Manifest number:          02AB
Signing time:             Fri 19 Dec 2025 00:37:50 +0000
Manifest this update:     Fri 19 Dec 2025 00:32:50 +0000
Manifest next update:     Sat 20 Dec 2025 01:55:50 +0000
Files and hashes:         1: 3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa (hash: bTWOO4wMvbqej9v9hS54DGbiTULpIB10RJoQ2OsKGbM=)
                          2: 323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa (hash: QdjN75dZquqcnEQ7VBJTA7QkqzKltp3LTnvJxCRZEh4=)
                          3: 323830343a336634633a3a2f33342d3334203d3e20323636363531.roa (hash: nvEWeG8lH5d2MsmX+xQFRD5MvYcNdcC9aJ1I/4SEwpY=)
                          4: 3132382e3230312e34312e302f32342d3234203d3e20323636363531.roa (hash: vP35esMPeBi/GI77WTFbqL1y1r9s92CCrUdvFKwFJh8=)
                          5: 323830343a336634633a633030303a3a2f33342d3334203d3e20323636363531.roa (hash: XkiA6Lokta3U5nObChKRL+1d6EQRWTeW8RsCbBfT3Bc=)
                          6: 3132382e3230312e34332e302f32342d3234203d3e20323636363531.roa (hash: EyaKfNszNHavsJyuqerPUX2W9LUCVQCYy8yCBUH6NwI=)
                          7: 3132382e3230312e34302e302f32342d3234203d3e20323636363531.roa (hash: xBspFIvvQcExKAo/nd4giRNDUHi8wecs3/3QxXS1Pyc=)
                          8: 323830343a336634633a3a2f33322d3332203d3e20323636363531.roa (hash: oQ5xUWz3d0i7eXbNQbXz6z5LBoGWqPWYIVvuQQjITYQ=)
                          9: 3132382e3230312e34302e302f32332d3233203d3e20323636363531.roa (hash: o4JnUJZiVwQrp/eMZmZKR+MwefjKuhiH1badgAUEMho=)
                          10: 3132382e3230312e34302e302f32322d3232203d3e20323636363531.roa (hash: TIk1Yg+16SrPF3R1cxmS78vrS4BO07CB0a31rcsSi7U=)
                          11: 3132382e3230312e34322e302f32342d3234203d3e20323636363531.roa (hash: BtvGiuIxRAaZDO9TFdhUngmhnUzBR9e4y2IA4O10w2A=)
                          12: 323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa (hash: ipvqzKz4k5VQOe+Bzj6rPE+R7Nc032T922rJ18S7voM=)
                          13: 652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl (hash: J5U7dEgCo6xqciR355OioBtiEPhcQNMZS3Cw94G5xI0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ec:ec:96:23:28:96:7f:b2:7b:59:d8:d6:0b:29:51:3c:c0:b5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Dec 19 00:32:50 2025 GMT
            Not After : Dec 20 01:55:50 2025 GMT
        Subject: CN=050F7CA010037EF748AAA9D0206F3E99F163B5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:9b:a2:9b:35:35:26:ea:2b:85:09:19:f0:
                    27:b2:73:bb:ac:3b:51:9f:d3:f5:ac:33:9e:6a:1e:
                    70:20:9a:74:21:fc:f7:16:f4:65:ec:d9:dc:69:d9:
                    73:63:bd:92:4e:14:21:d9:bf:c9:62:d7:2d:78:13:
                    95:3a:86:82:c5:3e:0f:fd:a2:6d:8a:9b:e5:90:cb:
                    04:98:4d:4b:8a:78:f6:24:7c:ce:b8:af:01:51:de:
                    22:4e:c3:55:1a:b0:3f:1b:ac:07:dc:38:7e:64:9b:
                    ba:34:da:8e:f2:8b:8e:c9:3e:8a:37:be:3b:7d:05:
                    af:81:9c:30:79:ea:0d:53:3d:9a:9a:c8:3a:28:9c:
                    55:11:1d:e9:74:fd:c2:b0:4a:c0:6d:2c:99:71:4c:
                    9f:2f:f9:b6:a7:79:b2:14:0c:d8:6f:81:de:b5:f3:
                    ab:a0:23:1a:fb:5f:66:7d:8a:85:c0:34:d5:5f:c2:
                    b2:ba:ab:2a:d6:7f:fc:3a:a5:3e:25:58:d1:59:67:
                    5f:d2:e4:f3:93:6a:c3:49:79:d9:e4:7a:0b:aa:9f:
                    fb:95:c4:99:2f:bf:8f:fb:a5:d3:69:71:d5:38:3c:
                    bc:cf:80:cb:7f:b0:98:9c:06:32:0f:3b:50:9c:63:
                    f3:76:66:03:14:3a:b1:e0:e2:27:68:df:08:a9:0a:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:7C:A0:10:03:7E:F7:48:AA:A9:D0:20:6F:3E:99:F1:63:B5:DF
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:40:80:dc:6b:4a:04:01:89:0f:14:e3:70:f2:e8:70:45:
         80:3d:3b:97:66:37:66:6e:bd:2d:21:0d:d1:19:c6:5c:70:a5:
         19:48:c9:23:ac:47:c3:b3:93:10:1f:a0:33:c3:27:22:ea:d5:
         27:3d:15:ce:28:57:b1:14:6f:e3:53:2c:f7:44:d4:c1:f0:53:
         59:07:f4:fa:5d:1f:a7:2c:e5:fa:f0:de:cc:ae:04:fb:55:d3:
         63:04:13:c7:d2:89:13:a6:0b:72:20:bd:7b:5b:bf:1e:d9:8b:
         74:e1:5f:a5:48:9f:84:76:18:ef:24:01:f6:04:f0:0b:c5:05:
         8f:5f:a5:70:98:73:d7:b9:71:16:4b:e6:cc:f5:ec:51:be:c0:
         fa:d4:a7:00:80:ad:12:e5:c1:3a:ff:4b:ff:50:09:4d:a2:de:
         79:1b:29:99:58:5b:51:b2:15:03:60:40:0b:8e:0c:db:f2:1b:
         6e:77:64:68:4e:2b:d7:8f:42:da:cf:7c:4c:76:a6:c9:a7:5a:
         5b:78:ac:30:38:cc:e4:c2:a5:06:da:9e:32:91:57:0b:2a:fb:
         9b:1e:51:1d:dc:8e:4d:dc:18:ef:c7:63:45:d6:42:ff:80:c0:
         33:31:05:72:d4:cf:33:fa:2a:4e:ef:fc:6f:79:19:f7:9b:fd:
         1c:14:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:26:40 2025 by rpki-client