This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
File:                     2C425257AE7B63529EB88108AC7DEA60648B43E5.mft (raw, json)
Hash identifier:          nt/2gMHqNVVJsfZlptFTMTJU5bwAmI9HLhfizd9Mghc=
Subject key identifier:   BB:27:65:47:CD:2C:8F:44:3C:C1:04:0C:20:F0:81:5C:F2:3A:D6:E2
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       48A59A948A19B03CDB0A84528A1245335B047438
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
Manifest number:          03A2
Signing time:             Sat 06 Dec 2025 06:30:00 +0000
Manifest this update:     Sat 06 Dec 2025 06:25:00 +0000
Manifest next update:     Sun 07 Dec 2025 06:30:00 +0000
Files and hashes:         1: 323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (hash: E99zoi2NY/K4TXY6d6YryWjCWjyBxydG2Mg6fKnJJ7Q=)
                          2: 323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (hash: fQMLDKNtYQ2TopGPimFS4OOXFrsmUpOC4jnXswrVWuE=)
                          3: 3138312e3233322e3233302e302f32332d3233203d3e20323732353439.roa (hash: 8OHMiHE5dcOgAsMhbBCcvNrL//3RCMee5hTRkbJhvvI=)
                          4: 2C425257AE7B63529EB88108AC7DEA60648B43E5.crl (hash: X8zOMrAUMKkbZ85AJPGBPPh7iD/IS5+NJCPsY7TbP3s=)
                          5: 3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (hash: 88Oyt4SvBIiJaIaQSNPFg5v321OQ5Fgtzv8WaDmJVwo=)
                          6: 323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (hash: C1IawEC+o6OAP2IOtB/Ag3dA3sk7hTscFzrf4BAUjlQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:9a:94:8a:19:b0:3c:db:0a:84:52:8a:12:45:33:5b:04:74:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Dec  6 06:25:00 2025 GMT
            Not After : Dec  7 06:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:7b:be:70:67:66:22:c8:70:d2:e5:f5:b3:
                    28:15:26:4c:cf:16:9b:67:c7:0e:96:c3:47:5f:a4:
                    5f:b4:91:6f:a6:dd:9f:b7:1e:c6:3d:87:cf:c6:92:
                    5b:a8:c6:4c:f1:6e:70:9d:5d:c7:ac:1a:38:4c:ac:
                    f7:83:92:aa:12:b1:3f:ce:b4:e4:fb:e0:e5:a5:ba:
                    bb:da:09:b1:6f:0e:55:86:d2:1d:f1:49:fc:69:e7:
                    8e:04:9b:b7:f8:8a:47:d7:d3:9d:72:fe:bd:63:dd:
                    53:68:be:69:60:3e:9c:2b:b7:9f:15:34:41:c8:e2:
                    3e:21:a8:f8:7a:0b:2a:ff:b3:6d:e4:e1:5f:2c:bb:
                    a8:a1:71:49:8c:42:e8:31:b6:e2:84:3f:8a:3c:4d:
                    0b:52:5b:6f:a7:7f:36:3d:45:55:28:e4:e9:cc:b7:
                    8c:60:b8:58:71:1a:de:f2:7e:0b:c9:36:60:88:9f:
                    05:6c:1e:4c:35:53:6b:75:49:f7:be:a4:a9:b1:f8:
                    9b:8b:f6:1a:9a:f5:e9:72:2b:c6:58:c4:61:b2:9e:
                    14:de:f1:42:ac:62:f5:37:01:98:b7:5f:52:7b:cd:
                    7f:34:71:32:bb:8a:21:bf:1f:2b:c6:14:57:37:83:
                    01:a5:53:49:c9:92:3e:e2:87:e6:7a:bf:98:fd:8c:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:65:47:CD:2C:8F:44:3C:C1:04:0C:20:F0:81:5C:F2:3A:D6:E2
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:73:5d:6a:32:4c:22:17:a9:31:dd:0a:89:45:62:dd:59:
         a7:af:31:8f:5c:68:28:d4:17:c8:f6:16:7b:00:2f:9d:ef:44:
         71:24:be:ae:17:84:a8:8c:d5:5d:08:f9:05:84:4f:00:0d:da:
         29:bb:b3:1f:34:ae:b1:da:3c:24:d4:be:3a:25:6d:0d:d7:e4:
         c0:57:3d:17:28:64:96:91:39:b2:ef:f1:79:41:96:a1:53:81:
         10:f2:cb:00:f9:80:aa:ba:11:35:16:0c:cf:7c:74:76:39:9e:
         bd:a6:d5:07:4e:72:c8:37:c1:d5:f4:32:76:d3:1d:e1:61:30:
         a3:6c:00:77:16:a3:16:15:34:f2:f4:88:8c:ab:65:76:e0:2b:
         24:d1:36:81:99:72:b7:64:43:4d:85:7d:bc:4b:18:89:9a:60:
         2c:c6:7d:1d:74:3e:c3:95:88:81:01:b9:1e:59:7f:f6:9f:51:
         d2:37:64:2c:85:6f:c8:0d:97:11:76:48:71:67:18:7c:52:25:
         8e:ab:4f:65:71:17:b1:61:7c:fb:b4:8c:51:72:ae:a6:1b:7a:
         6e:33:b5:0b:6a:6e:15:64:46:c2:2f:d3:6b:3e:99:25:8d:ae:
         2d:db:81:1a:b8:66:4e:75:ca:dc:63:b8:2b:63:8b:af:a0:54:
         62:ae:6e:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:47:37 2025 by rpki-client