This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/D11DC20288133E4E3723794E763C9CCA725FF4EF.mft
File:                     D11DC20288133E4E3723794E763C9CCA725FF4EF.mft (raw, json)
Hash identifier:          OxTBOPEJoXluhROBBErWqjQtQqYRAou33M0S6AbrUvM=
Subject key identifier:   AF:60:2C:12:01:64:79:45:B9:70:A5:FC:B4:48:A4:74:E1:EF:F2:73
Authority key identifier: D1:1D:C2:02:88:13:3E:4E:37:23:79:4E:76:3C:9C:CA:72:5F:F4:EF
Certificate issuer:       /CN=D11DC20288133E4E3723794E763C9CCA725FF4EF
Certificate serial:       4F394A82B148560756FAFA524374E77A038D02BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11DC20288133E4E3723794E763C9CCA725FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/D11DC20288133E4E3723794E763C9CCA725FF4EF.mft
Manifest number:          09
Signing time:             Mon 22 Dec 2025 16:37:47 +0000
Manifest this update:     Mon 22 Dec 2025 16:32:47 +0000
Manifest next update:     Tue 23 Dec 2025 18:14:47 +0000
Files and hashes:         1: 3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa (hash: 8EAme9wW3a0qCgk+J7WUZ5JcBbwTAdju9fa2xe/AkNc=)
                          2: 323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (hash: 8sd1GA0a2/+KyBAz26erKtVN+pyAtgIPQKlhReWECKg=)
                          3: D11DC20288133E4E3723794E763C9CCA725FF4EF.crl (hash: Ub6QZm1SrfkvDqApiyxCoZ26Ntir+7pvG0brPFL8FIU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/D11DC20288133E4E3723794E763C9CCA725FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/D11DC20288133E4E3723794E763C9CCA725FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11DC20288133E4E3723794E763C9CCA725FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:39:4a:82:b1:48:56:07:56:fa:fa:52:43:74:e7:7a:03:8d:02:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11DC20288133E4E3723794E763C9CCA725FF4EF
        Validity
            Not Before: Dec 22 16:32:47 2025 GMT
            Not After : Dec 23 18:14:47 2025 GMT
        Subject: CN=AF602C1201647945B970A5FCB448A474E1EFF273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f6:84:81:41:49:44:f8:fc:a8:7f:24:48:ed:
                    89:02:36:c5:7b:32:84:ed:9e:66:e0:1f:69:b3:b3:
                    54:7e:85:70:58:fa:d0:38:2d:29:2c:67:b5:0a:4b:
                    95:b2:03:df:b7:0d:bb:3c:8c:f0:ca:39:54:96:73:
                    f5:e2:3d:be:5b:c5:cb:dc:de:62:11:bd:3e:2d:4a:
                    a1:d8:02:ce:70:f0:7f:dd:fe:61:12:17:e8:45:99:
                    c1:38:5f:40:f2:9c:a7:b0:a4:83:6a:70:97:36:3a:
                    0a:58:e1:80:07:9f:43:ec:8f:25:b1:44:0a:e1:e5:
                    fe:d1:09:08:f3:ed:c1:2c:11:e2:43:b8:77:11:f9:
                    87:16:6d:7c:fb:c9:38:c9:99:1a:43:78:7e:5e:07:
                    7d:96:e3:49:9f:8f:c8:2a:d3:53:74:1a:76:e2:f5:
                    f6:13:ef:d2:f0:7f:ce:53:19:69:1d:53:d6:99:9a:
                    f0:83:41:78:f3:dd:4f:f3:49:5b:28:19:ac:99:2c:
                    af:43:70:4e:db:45:c9:3c:45:32:90:49:52:38:f0:
                    6b:59:a9:12:25:1e:80:2c:d5:35:b1:96:e4:90:3a:
                    38:f7:fb:8f:28:29:ad:8a:1e:0e:2f:35:35:bc:19:
                    e2:56:41:d9:77:a4:34:a8:22:7d:1b:b9:11:40:7f:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:2C:12:01:64:79:45:B9:70:A5:FC:B4:48:A4:74:E1:EF:F2:73
            X509v3 Authority Key Identifier:
                keyid:D1:1D:C2:02:88:13:3E:4E:37:23:79:4E:76:3C:9C:CA:72:5F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/D11DC20288133E4E3723794E763C9CCA725FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11DC20288133E4E3723794E763C9CCA725FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/D11DC20288133E4E3723794E763C9CCA725FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:75:11:04:22:bc:d4:29:f8:e3:db:3c:94:3f:f0:be:90:15:
         9e:74:cd:f7:3c:aa:a4:fd:ca:a3:8c:b7:6e:f7:cf:7b:2f:fe:
         42:3d:78:21:39:3b:59:d6:fe:d7:57:cf:e7:2b:7f:6d:ec:84:
         7a:e1:6d:7c:06:a3:49:36:81:38:7d:cb:ba:ab:7c:4c:6e:3e:
         4c:bc:a5:3a:b4:d0:61:b0:e5:6e:5b:ba:34:32:31:82:f9:e3:
         05:93:a8:ea:1b:94:60:37:32:a2:01:3d:40:fc:92:6f:70:52:
         ad:31:fe:cc:b6:00:29:18:85:3b:54:d4:22:fc:e0:cc:21:1f:
         e9:6f:06:f6:c4:89:d7:da:29:96:3e:1a:62:4e:61:fe:1f:61:
         b9:18:45:e2:f8:53:80:0a:94:a5:82:f7:2c:27:da:97:3a:39:
         9e:2a:de:0a:90:07:cf:92:03:b7:12:c9:1a:e4:74:f3:f3:3c:
         22:12:a1:24:5d:08:60:82:99:2e:48:c4:04:f0:9f:ca:e2:34:
         53:ee:30:19:a1:52:28:2c:8b:21:66:4a:af:8d:22:d6:60:be:
         b9:11:96:f5:dd:37:3a:45:79:91:a3:6d:ab:4d:40:3a:2a:6e:
         42:d7:8d:47:9f:e1:e8:8f:72:26:ce:04:9e:f2:aa:d3:ca:0e:
         fb:5e:b2:2d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTzlKgrFIVgdW+vpSQ3TnegONArowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExREMyMDI4ODEzM0U0RTM3MjM3OTRFNzYzQzlDQ0E3
MjVGRjRFRjAeFw0yNTEyMjIxNjMyNDdaFw0yNTEyMjMxODE0NDdaMDMxMTAvBgNV
BAMTKEFGNjAyQzEyMDE2NDc5NDVCOTcwQTVGQ0I0NDhBNDc0RTFFRkYyNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz9oSBQUlE+PyofyRI7YkCNsV7
MoTtnmbgH2mzs1R+hXBY+tA4LSksZ7UKS5WyA9+3Dbs8jPDKOVSWc/XiPb5bxcvc
3mIRvT4tSqHYAs5w8H/d/mESF+hFmcE4X0DynKewpINqcJc2OgpY4YAHn0PsjyWx
RArh5f7RCQjz7cEsEeJDuHcR+YcWbXz7yTjJmRpDeH5eB32W40mfj8gq01N0Gnbi
9fYT79Lwf85TGWkdU9aZmvCDQXjz3U/zSVsoGayZLK9DcE7bRck8RTKQSVI48GtZ
qRIlHoAs1TWxluSQOjj3+48oKa2KHg4vNTW8GeJWQdl3pDSoIn0buRFAf+SJAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUr2AsEgFkeUW5cKX8tEikdOHv8nMwHwYDVR0j
BBgwFoAU0R3CAogTPk43I3lOdjycynJf9O8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KWlZicFl1WTRmeXZvejhCQWNKdFpuNmJObWRtOXRYZU5hWWhYSjhmMlZn
LzAvRDExREMyMDI4ODEzM0U0RTM3MjM3OTRFNzYzQzlDQ0E3MjVGRjRFRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMTFEQzIwMjg4MTMzRTRFMzcy
Mzc5NEU3NjNDOUNDQTcyNUZGNEVGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pa
VmJwWXVZNGZ5dm96OEJBY0p0Wm42Yk5tZG05dFhlTmFZaFhKOGYyVmcvMC9EMTFE
QzIwMjg4MTMzRTRFMzcyMzc5NEU3NjNDOUNDQTcyNUZGNEVGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
CXURBCK81Cn449s8lD/wvpAVnnTN9zyqpP3Ko4y3bvfPey/+Qj14ITk7Wdb+11fP
5yt/beyEeuFtfAajSTaBOH3Luqt8TG4+TLylOrTQYbDlblu6NDIxgvnjBZOo6huU
YDcyogE9QPySb3BSrTH+zLYAKRiFO1TUIvzgzCEf6W8G9sSJ19oplj4aYk5h/h9h
uRhF4vhTgAqUpYL3LCfalzo5nireCpAHz5IDtxLJGuR08/M8IhKhJF0IYIKZLkjE
BPCfyuI0U+4wGaFSKCyLIWZKr40i1mC+uRGW9d03OkV5kaNtq01AOipuQteNR5/h
6I9yJs4EnvKq08oO+16yLQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:01:05 2025 by rpki-client