This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
File:                     020AFECF727CE88A459FCBC17D694507CE9ADE22.mft (raw, json)
Hash identifier:          MmFBThvIiJqvUXMwWDoLH8XDoQFiJK6Sfp3K9XXNvS8=
Subject key identifier:   8A:11:9B:7A:5F:75:29:74:38:8A:72:6F:2C:33:DB:2B:54:68:61:8D
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Certificate issuer:       /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial:       03FCC9551B8754A24D6F808EF6557E5597C0312B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
Manifest number:          01D9
Signing time:             Fri 05 Dec 2025 20:51:06 +0000
Manifest this update:     Fri 05 Dec 2025 20:46:06 +0000
Manifest next update:     Sat 06 Dec 2025 21:42:06 +0000
Files and hashes:         1: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: JSrN2QrOp4mvWs4tfdMlhACA5kJW39lUGtJvvCvm+W0=)
                          2: 020AFECF727CE88A459FCBC17D694507CE9ADE22.crl (hash: 4Q2cDLEyypebyntvia75D14rEKGIRs03xBP4XuqVIxc=)
                          3: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: VGZMBxywOT6eMn/obggfUBg48R1BMRQHc1qiRhOgaq4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:c9:55:1b:87:54:a2:4d:6f:80:8e:f6:55:7e:55:97:c0:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Validity
            Not Before: Dec  5 20:46:06 2025 GMT
            Not After : Dec  6 21:42:06 2025 GMT
        Subject: CN=8A119B7A5F752974388A726F2C33DB2B5468618D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:f6:4d:8f:30:20:7c:70:40:a4:6f:a5:87:
                    79:0b:07:cf:ac:32:94:93:b5:a8:01:15:fe:4b:70:
                    d1:72:c0:cf:69:af:e8:85:ef:07:12:cb:68:57:ca:
                    58:c2:2a:9f:ab:2c:26:de:07:6f:fe:3d:cb:21:97:
                    d0:6a:21:31:18:e4:a4:c9:87:6e:51:87:75:d3:fb:
                    1a:9d:96:4a:2d:2c:f4:3f:ca:bc:e5:d6:d2:8d:b5:
                    b0:c5:b3:fb:01:92:fa:ef:bc:80:36:16:45:aa:59:
                    9f:6e:27:ba:83:d5:f6:a7:07:3d:fb:86:4e:60:0c:
                    c6:da:21:c3:86:48:52:c3:9d:f6:ab:98:50:22:8e:
                    b5:df:96:40:e7:92:bb:98:97:c6:b4:68:12:c7:2a:
                    bd:81:99:e1:95:11:0d:8b:7e:64:b7:0e:34:ac:54:
                    bb:95:78:ad:38:05:69:00:ba:b6:b8:6a:a6:ad:31:
                    5a:41:bb:5f:26:5f:52:81:a3:ba:4e:46:a5:b4:1c:
                    e0:ef:08:d1:6a:a3:83:47:67:4a:28:3a:2f:94:39:
                    34:f8:42:e3:57:3a:1e:57:dd:89:d6:94:17:55:ee:
                    c1:85:58:44:3e:7e:8a:12:6e:ad:03:2c:99:3f:34:
                    eb:c8:62:41:f4:f4:db:dd:dc:5b:3c:69:00:99:57:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:9B:7A:5F:75:29:74:38:8A:72:6F:2C:33:DB:2B:54:68:61:8D
            X509v3 Authority Key Identifier:
                keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:11:17:17:f4:c6:02:ae:96:02:ed:b2:dd:0b:ae:ec:cb:
         82:a9:db:a0:a8:85:85:db:31:43:52:07:cf:7c:8d:2f:b3:8f:
         a8:04:cf:df:90:71:c7:79:f1:33:84:fe:6b:bd:2b:4d:d2:fc:
         62:ac:17:03:1a:fa:ba:5c:cb:d9:9e:28:19:48:97:d1:52:87:
         ad:c8:66:3f:39:0c:69:5e:68:8f:97:2b:01:31:6d:82:d6:fb:
         59:d0:e2:5e:37:ce:d3:26:b9:6b:af:44:47:2f:d3:e1:f2:56:
         8c:ed:8a:ff:b2:26:8e:9a:35:e2:65:10:e9:35:c9:46:64:44:
         43:59:13:35:df:e9:3c:bc:43:6c:34:ac:ad:cf:fe:e3:77:60:
         bc:0e:2b:ab:62:16:9c:95:d0:84:bd:f4:31:58:66:8c:79:46:
         ea:a8:61:1c:80:88:c3:5c:bd:3e:63:79:81:54:05:50:f9:7b:
         65:31:51:a5:f5:ee:f4:b7:20:a2:58:26:5e:fe:ff:e9:16:1f:
         4f:aa:a7:73:50:f3:e3:05:e3:0f:94:51:a0:c6:39:9a:82:43:
         31:95:58:36:1d:a3:57:22:92:95:bc:92:17:fb:18:39:1b:04:
         b1:e8:eb:60:a9:82:fc:9f:58:74:00:70:0f:9a:30:4e:b9:6c:
         ad:af:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:53 2025 by rpki-client