This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
File:                     AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft (raw, json)
Hash identifier:          o0BMMmWojSXbGPKFuxVV84GNy25xTO5tLDCbcdjeb1A=
Subject key identifier:   4A:07:01:ED:75:DB:EC:F2:CF:FC:85:B9:54:A1:3E:A8:6F:67:28:AB
Authority key identifier: AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7
Certificate issuer:       /CN=AF30B745AAAF3F76FC8935B2EB95380C4EE824E7
Certificate serial:       50BBB54F4DED4B4AC44E46B049483850DE2F7BF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
Manifest number:          5B
Signing time:             Sat 06 Dec 2025 06:16:56 +0000
Manifest this update:     Sat 06 Dec 2025 06:11:56 +0000
Manifest next update:     Sun 07 Dec 2025 07:39:56 +0000
Files and hashes:         1: 3137372e38372e3130382e302f32322d3332203d3e203532353934.roa (hash: nj4IPX8JmQX8AAyHZtVBFWdt978IUfWXnD9mmRO93/U=)
                          2: AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.crl (hash: bQ5WICTy6gMhQVDziZ5Kbmf0XFW2MH38ORo/mZXvQEg=)
                          3: 323830343a386130343a3a2f33322d313238203d3e203532353934.roa (hash: 8LXV6APBdpeKnYA2dAD6HWbDy2XW27U9dn9qZkLb0OA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.crl
                          rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bb:b5:4f:4d:ed:4b:4a:c4:4e:46:b0:49:48:38:50:de:2f:7b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF30B745AAAF3F76FC8935B2EB95380C4EE824E7
        Validity
            Not Before: Dec  6 06:11:56 2025 GMT
            Not After : Dec  7 07:39:56 2025 GMT
        Subject: CN=4A0701ED75DBECF2CFFC85B954A13EA86F6728AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:6c:4e:d9:05:c4:0f:25:1c:a5:c2:77:93:
                    02:71:91:81:84:99:ee:4b:c5:39:13:08:d3:5e:fd:
                    5d:9e:fd:28:69:1b:13:f3:d5:9d:9a:ce:71:73:94:
                    b1:30:e7:c7:0f:cb:5f:52:fb:c0:0f:e8:0a:40:be:
                    1d:0f:00:e8:5e:10:f3:b6:cb:79:42:d5:7e:c8:56:
                    9e:3d:10:1b:9b:61:9c:02:37:c7:73:dc:08:dd:a1:
                    52:39:75:fa:3e:77:19:e1:f2:d3:17:be:e2:d4:28:
                    68:25:ba:0e:f6:db:3e:b6:10:87:95:4c:2e:c5:f1:
                    de:d0:00:51:e3:19:0d:86:ba:dd:df:49:a9:d3:a8:
                    f0:fd:07:00:87:a8:eb:d5:6e:b8:4c:5b:cd:ef:12:
                    8d:69:f4:3d:1c:5e:18:48:f3:17:6a:82:45:32:22:
                    a8:c0:77:60:70:f8:9d:c5:25:cf:53:93:83:71:ad:
                    bf:b0:14:55:a6:82:69:d3:cf:bc:bc:3a:b8:34:2d:
                    a8:c6:7c:37:63:6f:0c:61:f2:ab:d4:9c:5f:eb:a0:
                    72:49:61:49:45:0f:4e:7d:d2:09:ae:fc:2e:5c:d4:
                    58:0f:dc:a6:e7:68:a9:20:dc:d4:8c:a9:38:a4:1a:
                    a7:36:92:93:9d:d0:6c:49:cf:da:55:b5:71:98:34:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:01:ED:75:DB:EC:F2:CF:FC:85:B9:54:A1:3E:A8:6F:67:28:AB
            X509v3 Authority Key Identifier:
                keyid:AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:53:43:23:b3:b6:a5:ce:cc:a4:2e:20:e7:73:3c:2d:e4:db:
         71:ed:23:5d:9e:07:48:30:a6:ec:2b:43:04:d3:42:39:26:29:
         d0:10:93:d0:14:c9:03:7d:64:e2:1c:23:a9:29:91:1a:f4:4a:
         11:03:99:8d:dc:2a:51:36:d6:67:d5:d5:43:34:c5:c7:e3:bd:
         c3:60:24:99:2e:7a:62:68:a7:96:4a:c4:98:39:4c:26:d3:8e:
         26:1f:bd:a0:0c:03:d1:3e:cd:17:d8:68:74:3f:b2:4a:aa:a2:
         0e:ac:8d:7f:5d:e4:14:cc:ae:38:5b:b9:cc:e3:33:70:83:b3:
         59:d0:51:79:78:7c:15:66:7b:bf:21:09:b3:40:cc:19:dd:4a:
         5b:5e:3e:a4:15:6f:71:ca:bc:59:3e:e6:fa:69:33:ae:71:ea:
         c2:43:08:e0:0f:eb:dc:d1:06:03:cf:a0:3d:d1:50:b6:ad:e7:
         25:02:64:0f:98:47:b8:bf:8e:a2:5d:b1:f2:4f:fb:38:9a:53:
         bc:69:e4:b4:8e:3d:01:28:a0:5d:7b:2b:e6:74:73:7d:f6:f0:
         48:7e:af:43:9c:19:c7:a1:5b:9b:63:45:0e:16:10:6d:01:76:
         0c:51:31:ab:52:fc:97:04:33:1d:d8:2c:4c:01:66:bd:f3:ee:
         28:a2:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----