This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
File:                     A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json)
Hash identifier:          rDPGWCb8uL0a8Ci7lOIzThma+PmuLJtBT9T37IQRX6A=
Subject key identifier:   AA:6A:8F:EB:E7:E3:3E:00:F0:21:29:61:B8:4F:8A:47:F5:18:54:F0
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       2BAA720AB940D2DFB4BFEB34E4C5D930F00D2A92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
Manifest number:          0308
Signing time:             Sat 06 Dec 2025 04:28:56 +0000
Manifest this update:     Sat 06 Dec 2025 04:23:56 +0000
Manifest next update:     Sun 07 Dec 2025 07:37:56 +0000
Files and hashes:         1: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: dsa49wXdBoE55QAv21ZCdgsjaLXdyeyEclI3cJnPSho=)
                          2: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=)
                          3: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=)
                          4: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:aa:72:0a:b9:40:d2:df:b4:bf:eb:34:e4:c5:d9:30:f0:0d:2a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Dec  6 04:23:56 2025 GMT
            Not After : Dec  7 07:37:56 2025 GMT
        Subject: CN=AA6A8FEBE7E33E00F0212961B84F8A47F51854F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:6d:51:44:be:b9:98:eb:a1:23:06:b9:c9:
                    d2:68:25:84:fd:8b:19:fe:dc:32:6c:8b:05:09:cd:
                    20:d7:c5:73:09:fc:c0:df:21:bc:88:5c:c6:7d:a4:
                    de:99:34:d6:20:95:dc:6a:e4:67:d5:e4:14:e0:34:
                    75:d3:9e:06:ff:0d:e0:c1:57:ee:4b:74:52:2f:05:
                    e8:d9:fb:4f:1e:c9:8b:a3:a4:9f:76:db:cf:4c:69:
                    92:ed:ac:db:d3:da:5f:d5:7f:62:e0:a0:80:56:3d:
                    4a:9a:1d:aa:90:c9:8f:8c:fc:46:7f:8a:99:46:1e:
                    ae:a5:47:10:44:cf:4e:9d:f9:15:d9:bf:42:3d:9e:
                    e9:36:0a:1f:09:c9:34:67:4f:5c:8a:4f:c2:52:96:
                    5b:8c:1e:06:97:1f:48:e8:61:a2:f3:6f:61:c7:07:
                    e1:ff:ea:a7:17:cd:7f:58:7e:55:fc:32:dd:1d:cb:
                    23:67:c7:08:2b:a3:68:e6:36:e0:82:97:a6:41:aa:
                    9f:7e:1e:68:23:23:b3:1a:39:8a:32:11:38:82:3d:
                    7b:b1:54:16:63:58:57:f0:dd:82:40:55:f7:f7:6f:
                    ac:d1:a9:03:0c:48:ef:5d:cb:30:cd:81:6a:5f:c0:
                    84:42:b9:7f:ec:a3:1e:8d:52:1c:52:52:b9:58:2d:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:8F:EB:E7:E3:3E:00:F0:21:29:61:B8:4F:8A:47:F5:18:54:F0
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:aa:09:a5:7a:ff:1d:3d:f1:82:67:5c:3d:65:34:c4:05:
         e4:b7:ce:1a:a9:f1:05:d2:e9:b3:6f:1c:f2:a5:5b:72:76:91:
         e5:de:9e:3e:ed:59:2c:ed:56:7e:10:ff:9e:d7:9a:ea:f8:69:
         03:00:6a:99:fc:80:d5:17:f5:ee:87:78:08:78:73:bb:50:7e:
         df:d2:1e:b9:8c:f6:1f:1c:2e:71:52:b2:5c:8e:f0:e4:83:c1:
         ba:6f:1b:06:12:0d:fa:c7:d4:b4:27:cc:d7:75:84:48:22:c9:
         2f:1a:67:73:4a:43:43:98:e1:d7:03:4a:1c:77:c6:95:33:40:
         70:b1:c2:07:3d:5c:bf:58:6b:e2:7e:bc:47:cd:b0:47:65:d2:
         38:79:29:16:92:7d:db:ab:e8:6c:7f:53:7d:c9:8f:19:37:c7:
         c9:7b:1d:5c:f1:bf:dc:d3:13:09:e5:0e:ac:69:c2:7e:8d:96:
         d4:96:dd:be:e7:f9:45:db:27:43:d1:88:c3:d0:40:7b:2b:49:
         1e:ed:9b:34:7f:4b:46:be:51:fd:e1:a9:27:fe:0e:89:b8:a0:
         0e:5d:d8:42:d0:e3:0e:df:db:69:46:4c:f5:b8:30:3e:46:25:
         80:43:d0:15:c0:24:98:aa:6d:4c:15:77:30:4d:48:96:d2:18:
         bd:0d:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:13:30 2025 by rpki-client