This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft
File:                     EF854F36A2B85F7CA74543A1F5518487D375E292.mft (raw, json)
Hash identifier:          Q898CweS8I7bL+2GV2+/r2KWsdMfTM/2UnmcP8D8x1s=
Subject key identifier:   0B:60:46:E4:B9:97:3E:28:45:ED:92:05:5D:20:8F:1A:52:69:EA:3E
Authority key identifier: EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92
Certificate issuer:       /CN=EF854F36A2B85F7CA74543A1F5518487D375E292
Certificate serial:       6881BF04AF2D74CDB0E6CD26EB0117F8F1680E59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft
Manifest number:          65
Signing time:             Sat 20 Dec 2025 01:32:43 +0000
Manifest this update:     Sat 20 Dec 2025 01:27:43 +0000
Manifest next update:     Sun 21 Dec 2025 03:05:43 +0000
Files and hashes:         1: 3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa (hash: PQfr0TgTiBeE+dZU+ktmqLZKx8zZ/0d9UDDXZYVz2Zc=)
                          2: 323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa (hash: RzpDEKkPFYQQRFlwyimQgduZn6264wH+ner4U4m/vA0=)
                          3: 323830343a323666343a3a2f33322d3332203d3e20323633383636.roa (hash: PEqOm/ImcML6U7hmZ0W7IWzYDQH1LCGA/PhEoi4xoRY=)
                          4: EF854F36A2B85F7CA74543A1F5518487D375E292.crl (hash: UBmOTMUF1VJ/4tr2ygYv4c0Y/+WHHx/7WwKi4hxSpMY=)
                          5: 323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa (hash: pAGE+HJ6nUdmoHSgWEpy3UH1874HR8Xaii+/kb71KBE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:81:bf:04:af:2d:74:cd:b0:e6:cd:26:eb:01:17:f8:f1:68:0e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF854F36A2B85F7CA74543A1F5518487D375E292
        Validity
            Not Before: Dec 20 01:27:43 2025 GMT
            Not After : Dec 21 03:05:43 2025 GMT
        Subject: CN=0B6046E4B9973E2845ED92055D208F1A5269EA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:e2:5d:1d:4f:ac:ea:52:bb:ea:b9:e3:3b:
                    ed:63:65:53:0c:0e:49:3d:b1:af:3d:3c:5f:dc:24:
                    34:87:dc:47:b9:ac:d0:a8:3b:42:ed:ef:28:96:74:
                    9d:d7:c5:7f:61:c5:97:65:15:b8:db:a0:fc:10:da:
                    6d:41:f3:57:eb:92:e2:3c:0c:6e:cf:92:2b:52:21:
                    d5:00:96:62:31:4e:95:ec:eb:38:d3:dd:81:52:7e:
                    6a:47:44:e2:74:bd:03:a8:b4:ff:98:e9:43:21:66:
                    04:a2:9d:ca:54:a8:ed:14:f1:d7:98:f8:11:11:bc:
                    59:03:04:42:55:b6:fd:67:0e:ce:a5:08:1f:c5:88:
                    7e:f1:23:41:9a:64:6e:9d:e0:fc:a5:23:4f:20:d2:
                    62:db:c6:4e:55:fb:3c:67:e7:3f:90:f3:7e:e9:e2:
                    dd:3a:3f:13:09:32:af:fd:5c:30:bf:f2:da:e8:fa:
                    08:16:fa:2d:12:79:99:dd:14:24:be:01:48:3d:9b:
                    db:c0:09:5c:27:b0:c4:9f:3a:7b:9f:0b:55:f0:c6:
                    c5:c2:c8:0c:da:ab:a6:25:a0:59:d8:bc:c1:d5:f8:
                    3b:4d:17:6a:bc:90:cf:b3:d2:6e:dc:c7:ff:7f:8c:
                    21:38:79:10:db:5f:a0:23:37:6e:73:f7:74:10:38:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:60:46:E4:B9:97:3E:28:45:ED:92:05:5D:20:8F:1A:52:69:EA:3E
            X509v3 Authority Key Identifier:
                keyid:EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:43:ac:5e:4e:04:10:94:83:ef:dd:1f:65:3c:ea:9a:47:
         44:b4:f1:d8:20:5e:a9:34:9a:07:11:ee:63:9d:84:02:82:f6:
         f5:38:65:23:1b:f1:18:38:95:54:e6:d6:f7:f6:da:11:d1:de:
         5f:ad:6f:60:36:d2:08:af:a1:93:7e:b2:38:81:e1:7e:a3:e6:
         f2:5d:65:87:68:63:bd:a7:74:36:4e:e1:58:f5:4c:e0:8f:f6:
         aa:85:d5:7b:d0:2e:6c:d7:4d:97:4a:86:b3:7e:86:43:6d:69:
         b7:5c:0c:9a:b4:3d:5e:01:6d:40:7b:b8:a4:5a:14:a3:b4:5f:
         68:12:46:28:de:c5:13:5f:e9:65:29:37:ad:25:27:c6:94:5e:
         7c:f8:db:3b:9a:13:0c:c3:c4:10:fd:8b:ab:e4:d8:70:49:9b:
         9d:10:71:f6:65:7b:79:aa:01:50:98:14:9d:bf:2f:4b:c1:0f:
         3d:29:66:1b:d2:c4:41:b8:f2:14:f3:a3:a1:c8:fe:37:0b:56:
         60:c2:ca:ce:26:cd:03:c0:dc:b8:d4:c4:b0:ff:0b:9a:3b:c8:
         de:84:f1:29:96:68:2a:e4:b5:a8:e3:d0:13:43:e7:f9:03:d3:
         b7:1c:35:ae:b8:b8:e1:ed:32:de:f6:f5:68:ec:f4:d3:8d:ad:
         8a:d0:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:15:11 2025 by rpki-client