This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
File:                     A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft (raw, json)
Hash identifier:          OvWRgt3jmnAL/jVoHzaO2NGqHgzRNLbOLMHSJJbwg/g=
Subject key identifier:   91:12:0C:38:BA:A3:B9:31:31:C2:31:DB:10:D9:DF:D5:2E:5F:48:BF
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       43F20F4BAAA94138E95B50FAE7F0B225A7DBD2CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
Manifest number:          0344
Signing time:             Mon 22 Dec 2025 07:30:00 +0000
Manifest this update:     Mon 22 Dec 2025 07:25:00 +0000
Manifest next update:     Tue 23 Dec 2025 08:52:00 +0000
Files and hashes:         1: A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl (hash: uVFdfputUD6GfBdnaEowYfEVI66ltlmGKLG0F5riRxA=)
                          2: 3138372e34352e3137362e302f32302d3234203d3e203533303535.roa (hash: JkiHbE3BZItaIw10nQLWb74Kb/u4MMxeOMNADESAQe8=)
                          3: 323830343a3963343a3a2f33322d3434203d3e203533303535.roa (hash: R+h1SZhvmZlajMbYbkj0W574H2050oovzLpxkipiBfI=)
                          4: 323830343a3963343a3a2f33322d3332203d3e203533303535.roa (hash: 84vFwXlHs1NWlKsXFWHAR6x59tC7eecmK8bk/bw09wI=)
                          5: 3138362e3232372e3139322e302f32302d3234203d3e203533303535.roa (hash: vhLURdknQes7v3MRpl8DY+LfPdPUfN99PMx9rHy58+E=)
                          6: 3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa (hash: sihaguZF9qXOXBYmWAQ2FXBEJyK6UP1+PoIj705cu7o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 08:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:0f:4b:aa:a9:41:38:e9:5b:50:fa:e7:f0:b2:25:a7:db:d2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Dec 22 07:25:00 2025 GMT
            Not After : Dec 23 08:52:00 2025 GMT
        Subject: CN=91120C38BAA3B93131C231DB10D9DFD52E5F48BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:0d:21:40:6f:e5:77:d3:05:95:c5:09:d2:
                    44:b6:35:0e:de:c6:6d:0d:69:ea:d7:32:ac:66:94:
                    c6:47:24:57:f9:5f:84:fe:52:fc:f0:50:cf:fd:63:
                    bb:34:48:4f:6c:dc:9f:45:92:3c:47:04:ca:37:7e:
                    23:7c:9a:97:96:cb:91:d0:b3:76:b7:cf:0e:48:cf:
                    d2:b0:8b:98:7f:e7:a3:1d:c3:0c:07:a3:91:48:af:
                    cd:f2:b0:66:2f:c3:49:13:5d:22:b3:3e:5d:3f:1e:
                    9e:91:d7:a4:cd:09:87:a7:2c:d8:be:c4:5a:bd:65:
                    5a:54:7f:8f:c3:a6:1e:8e:4c:a7:64:36:5e:f3:33:
                    bb:43:0d:3f:0a:24:c8:e1:4c:ca:ea:fb:e1:5d:3d:
                    39:8a:3f:6f:02:93:1e:d2:14:9c:90:1e:75:b8:16:
                    5e:24:70:da:ab:91:63:3c:07:3c:63:75:74:2a:e7:
                    fe:51:e6:0e:99:15:8a:55:9a:83:74:3c:8a:15:82:
                    59:40:cf:08:40:d9:8f:7d:d6:93:a4:2a:81:3c:aa:
                    ae:00:92:d9:cd:99:06:ef:1b:94:59:11:73:d7:b0:
                    84:36:17:71:05:87:f4:35:61:4a:78:c5:e7:8b:ae:
                    b9:03:bb:2b:7f:2c:58:31:c1:b8:8e:b6:b2:f6:47:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:12:0C:38:BA:A3:B9:31:31:C2:31:DB:10:D9:DF:D5:2E:5F:48:BF
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:79:5e:a8:0a:d7:e6:b6:34:6c:8a:11:25:34:bc:50:d4:e8:
         83:ba:c6:6c:fd:69:ea:77:af:1b:cb:f2:91:dd:0a:61:88:bd:
         d6:fc:1b:0b:a7:8e:a8:ce:65:92:f6:a8:67:fa:a7:06:b1:f9:
         10:ca:30:5b:4c:f3:18:0f:f9:aa:57:35:cd:61:14:9f:db:c1:
         cd:7a:9f:b2:9c:46:13:9d:0d:4e:40:d0:ec:b4:5e:4f:ba:bc:
         b4:d0:af:ab:ce:62:d3:67:23:27:cb:44:68:d2:d3:36:a9:08:
         44:c1:91:d9:a8:f0:4f:53:32:24:32:65:39:db:3d:4b:82:c1:
         6d:19:11:38:a3:0c:4d:38:92:72:81:5c:21:3b:c0:05:90:f0:
         04:ae:64:92:21:ee:17:5b:da:f9:30:6b:80:af:d7:ab:86:a5:
         c3:e1:16:83:2e:c5:2d:5c:ec:56:44:82:78:7a:78:32:58:33:
         d1:42:5e:04:23:be:5d:b4:f6:4e:43:31:a2:01:fe:1d:94:93:
         8b:00:05:23:d9:b9:58:f7:fe:c6:e8:eb:d3:8e:35:00:72:86:
         ab:83:16:cc:30:74:42:91:40:69:35:c5:5e:af:ea:40:7d:c8:
         f1:cd:f6:47:ef:95:ab:75:9d:84:f1:09:a7:e1:9e:ac:98:2d:
         9b:6d:ae:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ/IPS6qpQTjpW1D65/CyJafb0s8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdBQ0ZCNDUxNzYyM0IwRUEyOUNGRTIxQUVEOTlFMDIw
RUM0MzIzOTAeFw0yNTEyMjIwNzI1MDBaFw0yNTEyMjMwODUyMDBaMDMxMTAvBgNV
BAMTKDkxMTIwQzM4QkFBM0I5MzEzMUMyMzFEQjEwRDlERkQ1MkU1RjQ4QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0A0hQG/ld9MFlcUJ0kS2NQ7e
xm0NaerXMqxmlMZHJFf5X4T+UvzwUM/9Y7s0SE9s3J9FkjxHBMo3fiN8mpeWy5HQ
s3a3zw5Iz9Kwi5h/56MdwwwHo5FIr83ysGYvw0kTXSKzPl0/Hp6R16TNCYenLNi+
xFq9ZVpUf4/Dph6OTKdkNl7zM7tDDT8KJMjhTMrq++FdPTmKP28Ckx7SFJyQHnW4
Fl4kcNqrkWM8BzxjdXQq5/5R5g6ZFYpVmoN0PIoVgllAzwhA2Y991pOkKoE8qq4A
ktnNmQbvG5RZEXPXsIQ2F3EFh/Q1YUp4xeeLrrkDuyt/LFgxwbiOtrL2R9x1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkRIMOLqjuTExwjHbENnf1S5fSL8wHwYDVR0j
BBgwFoAUp6z7RRdiOw6inP4hrtmeAg7EMjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21WOGNDcWt6NDllQWhHaEVnUEJhYXZ4Q1cyWkRnRWlFWnpmWm11SlBD
V0wvMi9BN0FDRkI0NTE3NjIzQjBFQTI5Q0ZFMjFBRUQ5OUUwMjBFQzQzMjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QUNGQjQ1MTc2MjNCMEVB
MjlDRkUyMUFFRDk5RTAyMEVDNDMyMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R21WOGNDcWt6NDllQWhHaEVnUEJhYXZ4Q1cyWkRnRWlFWnpmWm11SlBDV0wvMi9B
N0FDRkI0NTE3NjIzQjBFQTI5Q0ZFMjFBRUQ5OUUwMjBFQzQzMjM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhXleqArX5rY0bIoRJTS8UNTog7rGbP1p6nevG8vykd0KYYi91vwbC6eOqM5l
kvaoZ/qnBrH5EMowW0zzGA/5qlc1zWEUn9vBzXqfspxGE50NTkDQ7LReT7q8tNCv
q85i02cjJ8tEaNLTNqkIRMGR2ajwT1MyJDJlOds9S4LBbRkROKMMTTiScoFcITvA
BZDwBK5kkiHuF1va+TBrgK/Xq4alw+EWgy7FLVzsVkSCeHp4Mlgz0UJeBCO+XbT2
TkMxogH+HZSTiwAFI9m5WPf+xujr0441AHKGq4MWzDB0QpFAaTXFXq/qQH3I8c32
R++Vq3WdhPEJp+GerJgtm22uWg==
-----END CERTIFICATE-----
Generated at Mon Dec 22 09:09:22 2025 by rpki-client