This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft
File:                     2AFA735BD922B81B8D49B7C0193B661015358B07.mft (raw, json)
Hash identifier:          D/eUhnjxGrviOHSpyFwhK6Oqft/LMH7UPtUr5d1qzhA=
Subject key identifier:   1A:A2:83:79:AD:61:B2:94:8C:18:74:D6:12:34:EB:0A:EC:11:7D:56
Authority key identifier: 2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07
Certificate issuer:       /CN=2AFA735BD922B81B8D49B7C0193B661015358B07
Certificate serial:       1D003A599414A0CA35A2A86149307D52F57AD208
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft
Manifest number:          76
Signing time:             Sat 20 Dec 2025 05:41:17 +0000
Manifest this update:     Sat 20 Dec 2025 05:36:17 +0000
Manifest next update:     Sun 21 Dec 2025 07:56:17 +0000
Files and hashes:         1: 34352e3136372e3131302e302f32342d3234203d3e20323637393939.roa (hash: WaFQPRdEr1s1cPabk3fRShZFzRQn+NDhBvGA56NvuPQ=)
                          2: 34352e3136372e3130382e302f32332d3234203d3e20323637393939.roa (hash: 6orLroAee4vZGrjN6H/zYXLHJqDKFbzn5WyrqkDkzzM=)
                          3: 2AFA735BD922B81B8D49B7C0193B661015358B07.crl (hash: clg+4lB/0nqpFZ14GF9frQ21TlVfiV6vDGeqobu1Ww4=)
                          4: 323830343a353637343a3a2f33322d3438203d3e20323637393939.roa (hash: OMp0VOHQJmlx0pDjyH8nrjLj4t1+kkoAi1gxjq3Qngc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.crl
                          rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:00:3a:59:94:14:a0:ca:35:a2:a8:61:49:30:7d:52:f5:7a:d2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFA735BD922B81B8D49B7C0193B661015358B07
        Validity
            Not Before: Dec 20 05:36:17 2025 GMT
            Not After : Dec 21 07:56:17 2025 GMT
        Subject: CN=1AA28379AD61B2948C1874D61234EB0AEC117D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:b2:1f:27:04:f9:f4:48:02:46:1b:7d:d2:
                    88:5e:77:86:f9:25:39:a2:aa:aa:a2:4a:47:e1:59:
                    9c:09:ae:6f:04:95:11:78:ba:61:70:77:08:94:f5:
                    06:ec:3f:37:17:f9:0f:7b:db:89:c0:c4:25:6d:cf:
                    c5:69:83:28:17:78:84:be:13:33:70:ed:69:10:58:
                    6d:65:41:fc:36:7f:1b:03:60:23:ca:a6:92:16:0f:
                    16:6b:94:4e:4b:82:1b:3d:03:74:39:58:b0:70:8f:
                    81:5d:7e:14:13:49:f8:24:f8:b8:4c:b3:2e:91:40:
                    ad:99:b3:02:5f:a1:b2:99:a6:14:5f:ec:32:59:31:
                    bb:db:93:98:66:0f:19:e2:11:9f:32:e9:6f:d0:98:
                    71:66:ba:ee:45:1c:35:47:e3:58:13:14:0d:cc:ce:
                    8a:28:0d:38:b0:2d:de:74:06:9c:2d:33:d8:c9:45:
                    6f:86:62:f9:33:49:06:e4:a3:b4:a9:e3:cd:bb:78:
                    f8:cd:b3:d4:82:04:55:80:63:b6:de:fc:78:ff:31:
                    aa:6e:fa:fe:68:a1:53:6d:d5:cd:fa:1b:46:8b:de:
                    d8:a6:f0:6f:4a:bc:00:ea:b1:af:16:0f:84:aa:e1:
                    fd:f2:bf:a8:5d:89:ea:15:bc:5c:c6:1a:04:9e:97:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A2:83:79:AD:61:B2:94:8C:18:74:D6:12:34:EB:0A:EC:11:7D:56
            X509v3 Authority Key Identifier:
                keyid:2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:af:e1:81:6e:1b:e7:fc:aa:8b:8b:ed:bb:2d:9c:42:a4:
         bb:2b:8a:94:d5:b8:a1:09:00:c1:de:cb:70:99:82:0c:09:12:
         95:d5:40:de:cd:6e:4d:01:c1:ff:31:8c:0a:38:f9:78:7c:f9:
         16:87:f9:6e:a5:a5:22:c1:f7:ba:59:2d:23:cd:25:62:82:7e:
         f5:c4:57:1a:a6:cd:3e:09:55:a8:2e:2a:6c:32:0c:11:4c:00:
         78:cd:26:78:b9:84:d9:5f:4f:b7:ea:1a:e2:3e:bf:95:14:1c:
         a9:74:8e:f8:68:5e:c6:7e:01:a3:73:eb:19:44:8f:a5:1f:ce:
         13:70:d7:e6:18:e8:0f:c8:1f:dc:65:2b:58:aa:6a:1a:d7:22:
         90:b3:76:7a:73:e0:14:3a:4d:ba:cf:38:43:00:c6:5f:bb:c0:
         fc:cc:c4:73:78:36:d7:d8:75:ee:e9:98:94:73:40:e5:f3:56:
         2d:54:f4:c9:99:8e:38:c6:a6:be:9a:03:c6:5a:33:3c:42:3a:
         c4:45:c2:a9:a4:97:0d:3f:0c:8f:9e:85:ca:96:c2:91:25:65:
         83:0a:5e:1a:23:2e:31:f8:c1:96:f1:58:e1:be:f5:bf:42:7d:
         73:16:39:9d:1b:67:8b:1b:72:a2:ad:11:0a:09:e2:d8:91:f5:
         eb:ae:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:03 2025 by rpki-client