This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
File:                     AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json)
Hash identifier:          fuCYlANGtcA0jKP1RR98U2GAQf75/JKvrci2ghF0Ess=
Subject key identifier:   E7:6F:8E:D6:36:27:AF:10:42:91:46:3B:9F:EB:77:BA:53:62:CD:DC
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Certificate issuer:       /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial:       1D38AE9F42C1B4F030423CC1998B58BF8D98A0A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
Manifest number:          032F
Signing time:             Sat 06 Dec 2025 22:40:03 +0000
Manifest this update:     Sat 06 Dec 2025 22:35:03 +0000
Manifest next update:     Mon 08 Dec 2025 01:44:03 +0000
Files and hashes:         1: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: JFbLChWWXC4TSMlfrtk0c1rSrYnsJ6kIFTil/JGXqYg=)
                          2: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=)
                          3: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=)
                          4: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=)
                          5: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
                          rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:38:ae:9f:42:c1:b4:f0:30:42:3c:c1:99:8b:58:bf:8d:98:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
        Validity
            Not Before: Dec  6 22:35:03 2025 GMT
            Not After : Dec  8 01:44:03 2025 GMT
        Subject: CN=E76F8ED63627AF104291463B9FEB77BA5362CDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:1a:93:8e:35:4a:74:42:84:f5:40:e8:ac:
                    dc:97:04:1a:69:90:7c:ef:d6:8b:02:42:e9:58:69:
                    ed:62:13:ff:2c:b4:b1:ca:2d:d6:57:af:8e:c8:9d:
                    86:41:b1:8b:42:be:25:b3:1d:fa:2e:e8:86:80:3e:
                    a3:8c:36:42:02:71:32:4d:4d:7d:f3:1d:c6:ac:c1:
                    fb:ff:c7:2c:c4:6e:68:7c:09:46:b4:e6:89:ac:15:
                    41:35:ec:09:cd:a3:3e:80:29:36:00:d4:6d:07:c8:
                    ba:f6:e6:16:dc:6f:96:5e:03:29:5d:95:92:5f:08:
                    e3:32:74:f6:3e:62:9d:bc:96:e5:1d:12:5c:79:f5:
                    6e:88:02:33:a1:f8:4f:a1:f3:64:69:e0:3b:01:81:
                    a5:c6:36:ce:2b:a4:34:93:42:5e:ab:3e:28:74:fd:
                    ac:35:2c:4e:19:3e:84:4c:08:88:4f:65:34:74:fb:
                    a1:75:f1:bb:ce:2d:93:b4:dd:1d:fc:14:24:d8:6f:
                    a5:66:1c:a4:43:70:95:81:4d:24:fd:9e:58:4d:b4:
                    87:d7:dc:0b:c5:68:22:2a:3d:ed:88:ab:4d:84:39:
                    ed:af:8f:72:60:63:c4:82:2d:de:ac:31:ba:1f:f0:
                    25:a9:35:0a:42:28:c4:ed:b7:74:f5:fb:bf:cb:95:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6F:8E:D6:36:27:AF:10:42:91:46:3B:9F:EB:77:BA:53:62:CD:DC
            X509v3 Authority Key Identifier:
                keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:92:57:cd:c4:7e:44:34:0f:3d:e1:fe:f6:4c:9b:d8:8a:8d:
         16:7c:95:b2:35:6f:f6:e6:f0:8e:d4:99:03:79:51:52:b9:04:
         63:68:7e:69:56:37:ea:6f:69:4b:d3:a0:5c:a9:3f:3a:23:08:
         a3:c3:7c:a5:45:fb:60:c4:61:bb:ab:1a:71:b6:0b:c6:89:0b:
         5a:14:cc:eb:36:ad:6f:43:0d:10:0b:ca:f7:0b:22:72:9e:85:
         49:42:eb:28:b2:7c:b3:00:6d:f3:bf:6c:4f:a9:1b:33:78:2f:
         ea:a2:cc:39:cc:7f:48:76:7e:f0:11:28:96:3f:01:fd:26:20:
         87:81:db:9e:cb:8e:07:d0:df:7c:98:01:df:b8:6f:ef:15:fc:
         0b:a2:1b:39:33:42:da:f4:66:9e:69:3d:cf:71:51:49:e3:16:
         86:b7:0a:06:69:48:87:05:72:93:d1:ba:a5:2d:c3:08:7b:ea:
         2e:3e:99:84:72:05:13:be:4c:76:5c:b4:db:48:27:5a:40:ea:
         e3:fb:4b:86:6b:98:16:b7:cb:77:62:8b:87:0e:c1:55:13:87:
         20:9c:08:3e:5a:e4:f9:62:74:db:b3:de:58:83:a5:91:5e:8e:
         58:25:4e:8b:b6:cf:1a:a6:07:e3:8a:99:0a:4b:dd:78:ab:d3:
         f8:aa:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:01 2025 by rpki-client