This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
File:                     2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft (raw, json)
Hash identifier:          UMBb59ZDMfDgGCV8R+8Dqoqk3LBbjteEV4Dg4kA01Vw=
Subject key identifier:   13:F6:2A:72:6B:A6:55:06:3C:EE:43:6C:62:B0:E1:5B:CA:82:18:E5
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       577228418D6CC4E90A799CA2D53E18C5F9DA2444
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
Manifest number:          0346
Signing time:             Wed 24 Dec 2025 06:25:41 +0000
Manifest this update:     Wed 24 Dec 2025 06:20:41 +0000
Manifest next update:     Thu 25 Dec 2025 09:16:41 +0000
Files and hashes:         1: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: 3sxZs3Y6zVNNgLScctDhTTFNDQdOZLcuEzMOUREzMRw=)
                          2: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: tCfqS8UfvI979KF3Vff43TGrFJXiZp8XAjbb1Wo4ZPs=)
                          3: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl (hash: FmRI0RmrbrIdO19aCF3ILdT0LYuoUbz+UpZJlKh4hDA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:72:28:41:8d:6c:c4:e9:0a:79:9c:a2:d5:3e:18:c5:f9:da:24:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Dec 24 06:20:41 2025 GMT
            Not After : Dec 25 09:16:41 2025 GMT
        Subject: CN=13F62A726BA655063CEE436C62B0E15BCA8218E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:f5:64:b5:26:cf:41:52:da:7f:7a:da:69:
                    99:00:3c:48:6e:dd:d2:8e:7e:80:15:fd:18:f9:e4:
                    2d:f3:9d:3e:15:8c:ed:fe:26:5c:40:b7:f8:8a:83:
                    bb:ca:3d:98:1e:f2:65:77:5a:61:39:af:25:5d:a6:
                    f6:ee:a3:4c:5b:33:9e:37:4b:eb:83:be:4c:df:83:
                    a2:4b:42:29:7d:57:a0:82:4b:bb:c4:e5:0a:2f:b1:
                    92:54:2d:83:ba:3a:4d:3b:99:30:a4:e9:37:e6:7b:
                    51:55:f0:f5:36:ef:75:d9:60:b1:91:12:39:22:8e:
                    c0:93:38:03:ec:a1:a5:d3:7e:ab:24:90:6f:6f:95:
                    66:a8:57:4a:7d:34:92:5c:8b:37:8b:17:76:a2:3c:
                    ed:7b:f9:c5:2d:e4:96:7b:c8:ea:81:6e:99:f8:78:
                    71:0f:53:db:69:6f:0f:50:f1:da:ed:1c:1e:c0:23:
                    ee:4f:9f:b0:d6:11:22:c7:77:e7:a4:9c:eb:2b:6a:
                    4c:c6:47:45:81:d3:c0:a3:0d:5c:4c:13:9e:7b:d9:
                    06:59:3f:73:62:fa:06:e5:5c:4a:48:0b:49:2c:25:
                    26:40:81:a7:eb:49:04:b8:25:e4:13:f5:38:5c:32:
                    ee:c9:a7:c3:1d:a0:74:51:62:28:ec:ad:72:08:ba:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:2A:72:6B:A6:55:06:3C:EE:43:6C:62:B0:E1:5B:CA:82:18:E5
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:11:e6:08:fe:42:68:6a:60:4c:98:f1:e1:09:8c:94:91:49:
         b3:b8:31:88:55:8f:31:4c:6e:8f:1b:67:9d:79:48:55:eb:de:
         ba:51:49:58:79:bf:73:8b:44:ee:90:25:ba:b4:e5:97:6d:1e:
         98:2d:aa:70:5b:3c:2c:60:17:0d:bf:88:b5:a8:e6:98:55:cd:
         99:17:6b:62:56:9a:69:34:3c:fb:c0:f1:0c:99:bd:73:0d:4e:
         3e:41:33:77:e9:1f:34:f8:c5:a5:25:09:0c:6f:bd:98:1c:fa:
         3a:f2:e1:c2:6d:a7:1e:e5:12:32:e6:0a:69:e0:ec:ca:7a:bb:
         67:a7:53:ed:ff:c4:19:50:1d:f5:11:19:6c:34:ab:07:b2:af:
         33:0b:e6:e7:90:31:b2:94:db:e9:f9:93:22:87:d4:e3:53:44:
         a2:87:c7:f5:4d:c6:4c:5e:90:f8:50:a1:a9:d2:52:14:d3:fa:
         ba:e4:b9:4a:dc:7a:f2:61:cf:6a:2a:3d:53:8d:94:a9:e8:b7:
         94:6b:2e:06:50:f2:55:01:77:93:d9:2a:a2:3a:69:e8:48:fb:
         34:a7:58:eb:67:7a:ca:aa:e8:0f:56:a6:64:f4:f9:1e:a4:75:
         8a:c7:b7:ac:93:56:59:43:d0:f3:db:9f:2c:e3:78:05:14:e3:
         93:4f:09:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:55:08 2025 by rpki-client