This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
File:                     2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft (raw, json)
Hash identifier:          Bd1IMvW5gENi4nnKXEJdCtFbC+jhSNfjU0CDgZVq7BY=
Subject key identifier:   30:DF:32:43:62:B2:E5:E7:1A:D4:BD:C5:5F:AD:2C:C0:4C:0A:31:71
Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85
Certificate issuer:       /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
Certificate serial:       6C1AB9C026170AFC68DCC0A322A2E68E07370E6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
Manifest number:          02F9
Signing time:             Mon 27 Oct 2025 09:15:10 +0000
Manifest this update:     Mon 27 Oct 2025 09:10:10 +0000
Manifest next update:     Tue 28 Oct 2025 13:13:10 +0000
Files and hashes:         1: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl (hash: S94rG48iHFEz3Fnh7mD7SElaVEbCA1dPbtXowVthxw4=)
                          2: 3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (hash: 0TP0X4N5B/kB0sXJtzuafX2ea3uKpmvm4dgyq0U0O6A=)
                          3: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (hash: TFXsRnDBKiVgFfiHrP4nBxeZLl85ER7J0/zeEqj5uFw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1a:b9:c0:26:17:0a:fc:68:dc:c0:a3:22:a2:e6:8e:07:37:0e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
        Validity
            Not Before: Oct 27 09:10:10 2025 GMT
            Not After : Oct 28 13:13:10 2025 GMT
        Subject: CN=30DF324362B2E5E71AD4BDC55FAD2CC04C0A3171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:7b:a6:7d:77:fe:3d:1d:88:ea:b1:b0:a1:
                    01:81:9b:3f:a3:9c:f2:8d:94:ed:17:8b:33:91:1a:
                    67:34:2c:05:db:2d:1a:80:5f:fe:cb:c0:43:4f:cd:
                    ad:25:5d:3b:07:90:a5:c3:41:05:73:f7:49:bd:fd:
                    14:22:21:2a:65:61:98:a0:bc:c0:c1:14:8a:74:6f:
                    99:04:bc:e0:eb:ff:56:69:e0:2e:fa:34:e9:db:ce:
                    c5:22:40:66:24:79:f7:2e:f9:b0:4b:68:0a:53:8e:
                    4b:5c:1e:0e:df:ef:49:c7:04:14:0b:25:40:ba:92:
                    53:1e:64:f0:6c:4f:08:df:42:a3:98:0a:f9:6b:cf:
                    97:30:7d:a7:94:98:ca:b6:85:be:bf:97:b2:5b:f7:
                    13:08:f0:1f:ae:e7:36:37:ed:2d:09:8f:96:0a:ee:
                    e4:40:0b:16:a4:29:e1:a7:fd:bc:d9:d7:10:e3:44:
                    57:b8:de:08:dd:7f:96:99:af:15:52:ad:74:f3:d9:
                    f4:94:66:bf:36:82:b6:5c:ca:5d:ed:0a:18:dc:16:
                    70:f6:e0:3b:b3:a9:00:6e:8c:26:a6:65:d4:5d:b4:
                    4e:7a:af:96:7f:db:c2:9c:15:71:88:d6:f0:e1:33:
                    a2:80:b0:1e:a7:f0:55:87:14:92:6c:97:ed:da:8d:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:32:43:62:B2:E5:E7:1A:D4:BD:C5:5F:AD:2C:C0:4C:0A:31:71
            X509v3 Authority Key Identifier:
                keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:8e:87:91:59:b2:d8:2c:32:c9:24:13:08:bf:83:41:46:
         28:41:46:68:60:b3:4a:ea:01:d6:da:fc:9d:5e:27:d7:2f:0d:
         08:d3:45:13:3e:64:fc:5a:9c:19:1a:b2:4c:1d:b6:d2:8d:d2:
         16:26:d6:85:0b:9e:9a:cc:21:ce:64:b4:bc:58:07:7b:0d:ae:
         44:99:23:eb:ad:64:24:ff:8c:1c:5b:0b:cc:b7:07:e0:fa:cf:
         7b:a7:58:e1:69:ca:ac:db:d2:b1:da:a0:10:f9:48:b1:ff:fe:
         9a:2a:e2:25:e3:ef:15:2b:9b:df:ed:2d:6e:41:11:56:c2:0f:
         73:cd:eb:98:fb:7c:8a:92:ec:3f:de:17:7b:93:a3:3c:a6:12:
         16:e5:a2:0c:de:9e:39:37:a0:65:ec:00:87:09:f6:14:c7:85:
         cf:25:f8:6d:8f:df:6e:4d:ea:51:c8:3e:77:7d:a0:5c:85:7c:
         1b:ff:ac:80:18:b2:51:84:bd:60:ff:06:b4:36:36:5d:b4:7b:
         36:5f:e4:8e:04:60:6d:08:c8:46:5a:f2:ce:ee:7f:fe:64:54:
         3b:af:5e:04:2e:07:53:5f:7b:d9:6e:7f:eb:d4:d8:32:48:f1:
         a8:20:84:69:af:26:1d:1f:13:f9:f4:33:0d:aa:bd:fe:a8:0c:
         4c:2f:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----