This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
File:                     AA5A260F505713B62C4766443558AE922FFFC6F7.mft (raw, json)
Hash identifier:          s19Tn7pzxPaZJIpjNh+JjrbB36Q8nO7YnXZEYADqTrM=
Subject key identifier:   78:88:5D:E9:5A:3E:FC:D5:F7:E8:41:41:7D:91:02:07:77:3D:C2:FC
Authority key identifier: AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7
Certificate issuer:       /CN=AA5A260F505713B62C4766443558AE922FFFC6F7
Certificate serial:       726E763979AFBD7F1CE7EABC0BF0BFF9C954159D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
Manifest number:          0323
Signing time:             Fri 05 Dec 2025 22:33:43 +0000
Manifest this update:     Fri 05 Dec 2025 22:28:43 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:43 +0000
Files and hashes:         1: AA5A260F505713B62C4766443558AE922FFFC6F7.crl (hash: wTB3qmoa/D0ouu6NfoiCp5xYn0tVIsc4q6gOHNWT5Fg=)
                          2: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: /L3cKYY3bx57Hs+7rGKNswPzUiNvZCVuU89AKxhtcvU=)
                          3: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: MzH6PVwz5KhHj85+pXqb64brGVMlx4QNSTnFw58yxpQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.crl
                          rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:76:39:79:af:bd:7f:1c:e7:ea:bc:0b:f0:bf:f9:c9:54:15:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5A260F505713B62C4766443558AE922FFFC6F7
        Validity
            Not Before: Dec  5 22:28:43 2025 GMT
            Not After : Dec  7 02:00:43 2025 GMT
        Subject: CN=78885DE95A3EFCD5F7E841417D910207773DC2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:95:d5:66:d8:5e:75:d5:45:71:0d:73:2c:
                    16:cb:03:1a:81:b9:b2:2a:53:e6:7a:dc:b0:3f:9d:
                    bc:66:02:93:c7:b2:ec:40:09:c5:22:b8:83:88:da:
                    5a:4d:41:0a:60:8b:89:f0:de:48:14:9a:2b:7e:7e:
                    83:2a:3a:7e:f9:a1:f7:df:08:63:dd:c8:e9:d7:9a:
                    66:2c:ad:39:94:6c:e3:f4:67:73:72:e6:a6:ad:55:
                    ea:c8:a6:bb:3c:56:ca:83:28:ed:30:15:70:92:a6:
                    0d:02:12:e0:48:fc:d5:90:45:e1:ae:be:72:5c:b1:
                    26:f1:2d:9b:55:37:2a:35:bb:6d:e9:72:36:9f:f2:
                    6f:4d:57:fc:b6:38:33:31:e3:ac:f8:f8:14:eb:5a:
                    14:4f:6a:f9:b6:c3:48:b9:5b:36:ca:12:ee:5d:c2:
                    c4:2f:c6:fe:32:6c:50:b3:a0:3f:3f:e5:af:f4:01:
                    92:6e:e6:62:95:d9:81:da:4f:50:f0:15:13:e1:28:
                    f0:02:e5:56:d0:89:fa:ef:4c:a7:23:6b:d4:15:47:
                    c6:91:73:e3:9b:3e:72:95:3d:ef:12:66:95:98:56:
                    34:6f:14:3b:62:e4:44:f7:c0:13:57:e3:d3:b4:a5:
                    b6:6b:02:17:9c:c2:ca:30:4b:19:10:b2:e6:79:41:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:5D:E9:5A:3E:FC:D5:F7:E8:41:41:7D:91:02:07:77:3D:C2:FC
            X509v3 Authority Key Identifier:
                keyid:AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:50:3c:26:16:a8:7b:29:d6:1f:15:3c:a5:d7:66:aa:37:
         96:6f:64:df:f8:5a:33:17:8e:04:93:bb:f0:fa:49:37:c1:d3:
         98:8f:95:0f:8a:91:a5:22:8a:7a:b6:5d:97:2f:a0:ad:b3:a8:
         2b:0b:be:96:5f:56:bd:a7:a8:7d:53:5c:1e:ca:4d:72:2f:95:
         22:0e:e8:b2:aa:9d:38:5e:ce:a9:7b:94:ce:61:a2:54:7a:b4:
         a9:41:eb:99:a0:ea:ff:92:08:00:59:d0:0a:f2:ff:40:78:5d:
         5b:85:6e:4c:45:d8:39:4c:ba:6f:04:6c:af:dd:ea:3c:74:69:
         6d:0e:59:3c:25:93:89:75:80:66:d0:5f:fa:a2:4c:93:a1:2f:
         16:03:18:10:04:49:75:56:a2:76:7f:f1:12:68:f8:9a:66:2d:
         1e:c3:84:1c:e3:17:ec:7d:ff:a9:46:37:97:b7:1b:4b:94:8c:
         35:b1:3d:13:68:e6:d4:0f:0a:b0:c0:21:03:5f:0f:e5:71:31:
         f7:9d:0a:f9:8b:c1:9c:eb:be:a1:1c:21:f8:33:23:b2:99:4c:
         7a:a5:6b:a8:d8:b5:e4:81:c0:23:5a:c2:bc:c8:ec:16:9e:77:
         9a:9d:b0:05:78:5e:98:bc:72:98:22:09:2c:b9:1c:78:22:55:
         5a:43:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:10 2025 by rpki-client