This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
File:                     23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json)
Hash identifier:          lhrEMJOCrJ6jXZXfLvS/1l0UbyEDuGAhokKC8NsO/K4=
Subject key identifier:   DC:21:FE:49:A2:40:AF:DC:BC:46:BF:74:31:2B:99:D7:A5:86:4B:3F
Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
Certificate issuer:       /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Certificate serial:       4BA486441644657E6B4A5056B686CC79B91E1F34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
Manifest number:          AF
Signing time:             Sun 28 Dec 2025 08:18:19 +0000
Manifest this update:     Sun 28 Dec 2025 08:13:19 +0000
Manifest next update:     Mon 29 Dec 2025 11:50:19 +0000
Files and hashes:         1: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: TG8HUG8LEWaIfjBkGn/X3PwsaqAD6PCg82vevDcW7Sg=)
                          2: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=)
                          3: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
                          rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 11:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a4:86:44:16:44:65:7e:6b:4a:50:56:b6:86:cc:79:b9:1e:1f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
        Validity
            Not Before: Dec 28 08:13:19 2025 GMT
            Not After : Dec 29 11:50:19 2025 GMT
        Subject: CN=DC21FE49A240AFDCBC46BF74312B99D7A5864B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:20:4e:2b:89:f2:e1:41:a2:4b:cd:57:67:
                    20:2f:72:70:06:8e:03:05:5f:5e:68:c3:ae:53:1b:
                    fd:e5:cd:ac:ae:5f:d4:da:3c:b8:54:9a:f0:ce:a6:
                    f9:9c:4a:2a:de:80:a2:59:ff:04:75:99:2e:a1:bd:
                    40:d2:22:bd:f7:6c:d2:97:c8:23:60:54:89:0c:33:
                    14:15:da:9e:a7:6a:25:07:d0:91:ce:80:86:04:8c:
                    59:06:47:8e:2a:df:a2:2e:6c:8c:79:8b:60:02:76:
                    6d:d5:10:ee:d0:dd:2f:2f:fc:5f:fa:6a:a5:b5:4d:
                    72:19:25:72:04:0a:26:4a:52:27:43:11:be:f8:5a:
                    b5:e8:2d:1a:7f:49:86:8a:98:80:1c:d6:4b:89:a6:
                    b3:88:81:80:80:ae:ec:70:83:d9:2a:47:0a:24:1e:
                    ad:a1:18:e2:78:00:a6:c0:5e:ae:ab:7a:10:f0:fd:
                    ae:c5:f2:1b:de:60:58:ee:34:1b:eb:4a:65:e4:df:
                    8b:14:52:2e:e5:58:07:54:74:14:b5:95:da:a0:ea:
                    85:70:49:72:e7:9d:71:45:79:44:10:66:23:9c:2f:
                    4f:2f:12:d4:dc:a9:8a:78:c8:cb:61:81:17:3a:e6:
                    6a:24:7f:d7:ad:9c:f5:b3:ec:98:85:d6:f3:ec:7f:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:FE:49:A2:40:AF:DC:BC:46:BF:74:31:2B:99:D7:A5:86:4B:3F
            X509v3 Authority Key Identifier:
                keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:3d:58:c0:d1:f6:92:a6:4c:b0:26:c9:d9:5a:dc:21:4d:
         67:24:37:c8:1f:8a:08:bf:89:3d:88:8e:0d:8d:b4:c6:7c:c0:
         b4:76:6e:0e:8e:46:a2:c3:67:b2:7b:be:a1:7b:64:a1:32:27:
         16:a3:34:61:32:2b:5e:0c:09:98:57:6e:ed:81:4c:40:1c:3e:
         a6:ea:66:f8:0e:08:8a:e3:5a:73:5e:e4:cd:e2:78:10:78:96:
         d3:5b:b4:d7:72:fa:42:a5:ed:b9:dd:46:8a:93:89:e1:5e:e4:
         e8:d9:78:77:f4:3c:fa:f0:ce:6f:b9:b4:d9:0d:a0:30:5a:f9:
         a0:f1:4c:f7:9f:c2:5d:29:b9:b2:ba:52:06:1d:77:cd:b9:68:
         95:ec:fb:36:bf:9c:e1:63:69:a1:43:bf:3f:44:83:e6:db:ed:
         f4:69:98:1c:f7:e5:73:e1:74:66:ee:d4:30:cc:60:0d:c5:8c:
         9c:c8:bc:62:d6:07:87:7e:d5:43:43:d8:d6:c1:83:69:89:3a:
         75:9a:6d:cc:a5:7f:c6:5e:29:3c:fc:3d:83:81:40:28:0a:f2:
         0a:a5:84:c1:76:03:44:b3:b1:a3:77:22:75:7e:a0:61:f8:e0:
         73:bc:4d:33:ac:0d:c0:70:de:58:7e:be:9f:f8:64:dd:68:ee:
         8a:fa:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 04:30:46 2025 by rpki-client