This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
File:                     AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json)
Hash identifier:          QUM9CEyyTrMmc2TredtKpc4b9aX8Y2YW4zBDJccxUu4=
Subject key identifier:   E6:07:58:BD:50:82:5E:A8:84:8C:0C:D2:D8:F8:06:7C:50:17:DC:7D
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Certificate issuer:       /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial:       5A1CA04C4EF46C24CDEA3356032126A999E7A960
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
Manifest number:          02B4
Signing time:             Sat 06 Dec 2025 22:27:03 +0000
Manifest this update:     Sat 06 Dec 2025 22:22:03 +0000
Manifest next update:     Mon 08 Dec 2025 01:58:03 +0000
Files and hashes:         1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=)
                          2: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: d8gu9ptBCMqS7eW9x/zK+JYDxuuJS0KDEGnCGJEMVwg=)
                          3: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: FhBav8nmdO6208HG6NT4ANHq8quFLxIxTTMsazbuGww=)
                          4: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: UvOi/ZT1aicBgWtPWrJpXA3ochSvMg4rQ0JcREvXNQU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 01:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1c:a0:4c:4e:f4:6c:24:cd:ea:33:56:03:21:26:a9:99:e7:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
        Validity
            Not Before: Dec  6 22:22:03 2025 GMT
            Not After : Dec  8 01:58:03 2025 GMT
        Subject: CN=E60758BD50825EA8848C0CD2D8F8067C5017DC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:92:49:28:f5:74:a8:fd:ce:7f:a5:ee:f6:
                    35:e5:cb:cc:b7:79:85:d3:21:0b:52:39:d9:6c:b5:
                    96:5f:26:e4:30:18:25:1b:e6:0f:70:4c:35:32:dc:
                    0a:1c:d5:7a:b6:9a:50:7a:b1:ca:56:eb:c1:18:a1:
                    bf:11:9f:09:b7:7b:73:d6:1f:ad:48:e4:48:df:66:
                    08:04:2e:6b:12:54:3c:25:a1:b8:fd:83:ed:5c:97:
                    8a:08:d4:5e:26:4f:78:c6:06:0a:5e:65:9f:9f:5b:
                    bd:02:b6:08:3b:1c:5d:9b:de:e0:37:db:b6:1e:a4:
                    df:60:00:a9:2a:56:8f:74:e5:16:d1:a7:89:60:ca:
                    27:0a:d4:82:d8:23:83:f6:dd:69:0a:5f:8d:61:63:
                    13:20:0e:d9:70:d1:44:79:33:33:55:c9:7e:19:1b:
                    60:00:ab:ec:8d:5a:32:32:c5:b7:7a:dd:3a:a1:fc:
                    6b:b8:e9:8f:c5:5b:59:89:1f:6d:11:40:20:b1:33:
                    38:f9:6b:a6:08:42:32:ff:94:d2:80:bd:94:2d:00:
                    17:f1:8c:e3:50:96:14:1d:39:be:03:1b:39:75:0b:
                    7d:9d:3c:56:be:4d:59:1f:c2:00:b6:b0:d1:05:d6:
                    40:77:62:3a:41:09:b3:9e:e3:e0:52:20:df:5a:3d:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:07:58:BD:50:82:5E:A8:84:8C:0C:D2:D8:F8:06:7C:50:17:DC:7D
            X509v3 Authority Key Identifier:
                keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ba:32:2b:c7:e3:6c:b2:51:d2:3c:f3:f4:27:81:a9:b6:b0:
         3f:ce:44:09:7b:91:8c:03:2f:cc:40:50:52:39:7d:cf:8c:f2:
         03:cd:47:a4:45:f6:62:8a:26:0e:d7:cb:01:c4:3a:5f:a9:8f:
         73:7d:35:ea:a2:14:df:9d:98:45:83:5e:9d:16:77:aa:34:cd:
         4b:db:c2:2f:75:9e:2d:c4:4e:65:2f:47:6e:e0:d3:34:1d:13:
         36:73:c2:d1:8f:54:0e:d0:13:6b:95:6f:00:09:cd:23:18:13:
         f6:0f:af:15:d9:47:d2:aa:2a:21:76:6e:c8:af:ce:71:4f:73:
         31:ea:b4:9b:64:1b:53:62:f3:98:ac:81:dc:e2:4d:5e:70:95:
         3f:8f:64:f6:0c:53:ef:29:b0:49:54:e2:62:af:8f:aa:06:0f:
         f4:53:4e:e4:c3:bc:38:e3:86:f1:35:19:a4:fe:53:ab:99:8b:
         3e:b6:e9:62:6c:86:ba:9a:27:67:c1:86:10:41:a6:a9:1e:c9:
         ba:b9:06:2e:c9:dc:80:48:f6:17:d5:d7:ef:3f:42:59:ba:96:
         08:96:c4:88:35:ae:a0:04:e5:f4:5e:91:01:8a:45:d0:93:f7:
         8f:bf:c0:f2:30:11:9c:9e:61:b0:78:32:c7:bb:98:b6:54:18:
         01:95:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:53 2025 by rpki-client