This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
File:                     1A706BB72455093A32D1C60201116349B90D2EC7.mft (raw, json)
Hash identifier:          rNr+ZE+iGNTXS1raxu2j3cTaRGThPBF7abcTJT901ds=
Subject key identifier:   2A:F5:B6:1D:3B:2D:68:7A:71:8F:85:08:FF:D0:FA:61:E0:1B:18:92
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       35D793E4E8AA8D92BB0E1609C31F45D176B6BEA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
Manifest number:          012E
Signing time:             Sat 06 Dec 2025 01:26:39 +0000
Manifest this update:     Sat 06 Dec 2025 01:21:39 +0000
Manifest next update:     Sun 07 Dec 2025 01:48:39 +0000
Files and hashes:         1: 3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa (hash: D/9DWkPSs9OV/5NsQOgV12XhW3ZW1nrEQMQRd8u31Tg=)
                          2: 1A706BB72455093A32D1C60201116349B90D2EC7.crl (hash: JXiowx/+rBuy70P1RU7ZY1LqDqWP2Ro8/s8HQ2HjBC8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:93:e4:e8:aa:8d:92:bb:0e:16:09:c3:1f:45:d1:76:b6:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Dec  6 01:21:39 2025 GMT
            Not After : Dec  7 01:48:39 2025 GMT
        Subject: CN=2AF5B61D3B2D687A718F8508FFD0FA61E01B1892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:8d:1c:3c:67:d9:b0:51:3d:70:ca:1b:37:
                    10:67:a3:6e:49:3c:e1:ca:62:6f:b7:6b:73:27:af:
                    70:a6:24:b0:a4:ac:b4:5f:f1:98:9f:ac:ab:84:b7:
                    47:3b:f7:00:06:ba:3c:d7:46:c4:08:7d:3d:79:09:
                    08:47:ac:e5:ea:7a:8a:bf:4d:9a:3d:db:c1:5a:e0:
                    4d:fa:00:44:26:46:40:4f:5e:1a:d2:a3:be:20:36:
                    b1:18:07:c3:dc:3c:99:4f:2e:a2:4b:81:14:54:31:
                    79:39:74:1a:61:a0:02:bb:5d:ae:bb:27:da:32:0a:
                    58:24:74:8f:dc:35:f8:9d:7f:60:e8:db:0f:a1:37:
                    62:9e:2d:4d:ac:0e:56:01:1a:1a:c9:6e:b4:fe:ea:
                    2d:fb:f1:03:24:7a:b9:b1:be:26:ac:c2:b6:50:fb:
                    44:aa:6d:d7:85:c5:68:e9:2d:5a:cf:c1:78:b9:a3:
                    ef:0e:49:d8:c4:b7:e7:db:cd:04:9a:1c:84:bc:a8:
                    12:15:9d:c0:ed:61:08:4a:88:88:64:30:65:1f:65:
                    ce:70:7e:a4:22:c5:50:71:da:09:c0:9d:e7:4b:bb:
                    04:13:87:59:41:34:49:f0:65:2a:db:35:15:01:3a:
                    a7:38:65:44:ae:c6:17:74:b9:98:03:b3:7a:6d:ea:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F5:B6:1D:3B:2D:68:7A:71:8F:85:08:FF:D0:FA:61:E0:1B:18:92
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5d:79:da:3f:a1:3a:5d:9f:8b:04:c0:fc:44:19:62:b2:c1:
         2e:66:39:82:39:61:12:50:84:ee:76:d1:ac:c0:55:48:fb:3a:
         53:bf:ee:6c:60:91:e9:7c:7e:5b:96:69:07:e0:ac:2c:03:0c:
         33:a4:5d:b8:20:98:0e:e7:d0:89:32:db:e9:8f:50:d7:37:2f:
         f9:be:8b:a4:c8:09:c7:15:fa:d1:e7:6c:d4:84:14:34:4a:bd:
         47:50:76:85:be:a6:6c:4c:0d:b4:43:b7:be:01:c2:b2:70:a1:
         6c:68:cc:3a:06:77:42:2b:c9:69:a0:72:bb:f1:85:85:68:e3:
         e5:4d:41:60:e7:9e:d5:ea:a9:7f:27:40:b3:ee:39:d3:49:a8:
         97:b1:1f:de:ad:31:d9:7f:f6:91:c2:54:d8:66:2f:11:49:0e:
         b9:bc:b3:4b:a9:c5:6e:1d:36:1a:50:d5:81:57:11:93:e3:bb:
         89:95:4e:00:5a:1b:41:95:0e:49:a5:28:00:d0:c4:cd:9a:3c:
         65:44:2f:f0:91:e2:80:f1:e1:5f:a9:b6:5b:b2:b2:fc:b4:21:
         22:69:2d:e7:eb:22:b1:19:08:8e:f9:34:dd:ab:38:0a:d0:55:
         45:3a:8a:8d:d7:42:48:1f:19:28:b1:c7:47:d2:0f:c5:96:aa:
         53:b2:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:16:30 2025 by rpki-client