This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
File:                     2B701A0900880E50F13E6749C2889988811EC8C1.mft (raw, json)
Hash identifier:          7Zr9hhZKVOUs4vZkcFIqQs4ZoE+tbYOEoZukUenYl8E=
Subject key identifier:   1D:5B:22:78:7F:BD:1A:F7:61:CF:CF:B0:B7:D9:2B:1F:09:84:18:11
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       5B1C2B109D8544C43E21827F98F2154B0B1C568B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
Manifest number:          0361
Signing time:             Wed 31 Dec 2025 03:11:10 +0000
Manifest this update:     Wed 31 Dec 2025 03:06:10 +0000
Manifest next update:     Thu 01 Jan 2026 03:46:10 +0000
Files and hashes:         1: 3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa (hash: 8lKh18KB4S6jUzANinq8zCN+ugZEtbazJAad6BcPze4=)
                          2: 2B701A0900880E50F13E6749C2889988811EC8C1.crl (hash: rd1ZOPKo7L9V6aRB9hri+4HJqzzHg2yG0MO/BrE0m7M=)
                          3: 323830343a376264303a3a2f33322d3438203d3e20323731343536.roa (hash: WprU1QleJFMKsdl2kjBkCkm2DMM/h2D5HHWFsPPhvfE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 03:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1c:2b:10:9d:85:44:c4:3e:21:82:7f:98:f2:15:4b:0b:1c:56:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Dec 31 03:06:10 2025 GMT
            Not After : Jan  1 03:46:10 2026 GMT
        Subject: CN=1D5B22787FBD1AF761CFCFB0B7D92B1F09841811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:63:9a:26:d4:45:82:0b:be:b3:9b:cb:6d:
                    98:84:84:0a:67:41:98:95:24:42:12:a2:2c:57:c2:
                    57:e7:4f:d2:20:6c:31:cb:2a:76:53:a1:55:2a:75:
                    b0:96:85:ec:cb:1f:a5:d1:c8:ba:bd:2e:f6:c8:d8:
                    51:78:5d:a2:9b:83:09:34:ae:97:7b:9e:3f:32:af:
                    1c:df:27:90:b5:af:8b:ec:e0:08:77:a6:c1:89:30:
                    33:a5:3a:26:89:f2:0c:af:72:51:bc:2b:96:1d:33:
                    61:08:34:7c:d7:92:ca:ab:9f:c4:57:2b:18:6b:bd:
                    3c:69:4b:e4:df:23:95:72:48:26:d6:77:27:c1:b5:
                    75:f6:b3:46:3c:14:39:be:17:bd:ed:d5:87:97:f6:
                    58:9a:e5:05:bc:02:f4:a7:a1:ca:21:d7:97:62:d5:
                    ab:c9:9a:70:9e:2d:2f:5e:1a:20:20:be:79:2e:53:
                    c7:91:5d:c3:36:69:bd:18:aa:71:c5:3c:b3:17:44:
                    95:35:54:d9:38:74:c9:72:97:5e:23:f3:c4:1d:58:
                    ac:fb:6a:be:8c:83:24:c9:6c:6c:8b:8b:26:78:1f:
                    ae:24:ba:d5:17:fd:57:91:e4:07:ba:a5:df:e8:c7:
                    11:69:65:a8:f9:67:29:e6:5e:b8:a6:bd:db:97:0b:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5B:22:78:7F:BD:1A:F7:61:CF:CF:B0:B7:D9:2B:1F:09:84:18:11
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:57:2f:dc:2b:73:f5:8e:37:b9:eb:d3:6d:26:7e:c3:b4:e5:
         3e:19:2b:52:5a:2b:3c:1e:68:a6:1e:a4:00:83:38:38:ad:28:
         d8:5c:e8:4c:c0:8b:70:e8:6b:61:3e:1a:95:ed:8c:89:c7:bd:
         9f:8a:b0:5b:fd:28:26:aa:72:94:a8:41:7d:b0:03:2b:94:e9:
         fa:19:41:1a:ac:83:01:fb:a9:23:ce:2e:04:0a:6b:20:f9:ef:
         b0:f9:8c:ea:2a:a1:8e:e5:10:6f:c9:ce:c4:68:53:b7:1c:1f:
         36:e0:26:4b:5b:93:f7:82:e0:0b:e0:e5:90:9d:06:af:48:17:
         e0:8e:72:9d:4c:ac:29:60:12:01:f6:43:65:54:20:ed:e6:da:
         e6:92:1a:dc:6c:3d:8f:cf:94:6c:fb:49:68:21:5a:12:46:8f:
         e5:cf:aa:bc:72:5e:23:72:1d:5f:7a:ae:49:7b:c5:72:87:62:
         a3:ec:9a:43:31:ba:ba:56:15:b8:40:05:7d:4a:b7:a2:ff:d3:
         89:bc:8a:c8:5a:f7:d6:fa:7d:58:3a:45:9c:b1:55:b2:37:7a:
         86:79:fc:f7:ed:93:e2:a2:b1:08:b4:72:b6:df:02:6d:5a:b9:
         25:40:37:7e:20:46:7c:6c:9a:d7:7f:fc:45:95:7e:50:91:9d:
         c0:07:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:43:30 2025 by rpki-client