This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
File:                     A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft (raw, json)
Hash identifier:          k+JY/3qEQEBCNP14LeJedJ4d2tJGcLiMZ/pYUvjJGoQ=
Subject key identifier:   A2:AD:67:7C:B2:FF:24:56:3A:64:7E:39:32:D9:5F:52:73:63:DE:D8
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       469682337F1B0F3E5186105727BEFD0CA0322604
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
Manifest number:          034F
Signing time:             Tue 30 Dec 2025 17:30:00 +0000
Manifest this update:     Tue 30 Dec 2025 17:25:00 +0000
Manifest next update:     Wed 31 Dec 2025 20:03:00 +0000
Files and hashes:         1: A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl (hash: OdAF7TFTvg7mg8H13PQW9biUCSUzxOiDhK3VSLG3/NU=)
                          2: 3138362e3232372e3139322e302f32302d3234203d3e203533303535.roa (hash: vhLURdknQes7v3MRpl8DY+LfPdPUfN99PMx9rHy58+E=)
                          3: 3138372e34352e3137362e302f32302d3234203d3e203533303535.roa (hash: JkiHbE3BZItaIw10nQLWb74Kb/u4MMxeOMNADESAQe8=)
                          4: 3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa (hash: sihaguZF9qXOXBYmWAQ2FXBEJyK6UP1+PoIj705cu7o=)
                          5: 323830343a3963343a3a2f33322d3434203d3e203533303535.roa (hash: R+h1SZhvmZlajMbYbkj0W574H2050oovzLpxkipiBfI=)
                          6: 323830343a3963343a3a2f33322d3332203d3e203533303535.roa (hash: 84vFwXlHs1NWlKsXFWHAR6x59tC7eecmK8bk/bw09wI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 20:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:96:82:33:7f:1b:0f:3e:51:86:10:57:27:be:fd:0c:a0:32:26:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Dec 30 17:25:00 2025 GMT
            Not After : Dec 31 20:03:00 2025 GMT
        Subject: CN=A2AD677CB2FF24563A647E3932D95F527363DED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:78:f3:67:85:a0:bd:da:6d:72:70:20:fd:
                    a2:4e:e3:c0:bc:8d:d1:f8:2b:6a:1f:80:48:e6:3c:
                    e8:e2:4f:46:00:a2:93:64:71:1a:f3:59:93:5f:d7:
                    d3:47:61:bb:ba:99:b5:23:6f:29:60:f0:0d:ca:2f:
                    99:c8:ab:ce:b3:5e:3f:8e:5f:9a:2e:39:2f:44:b3:
                    51:06:65:a2:12:a1:e4:c2:4d:98:7c:fa:2f:a0:12:
                    7b:e7:3d:1c:21:a7:68:98:d6:fd:47:95:93:4c:f8:
                    ca:6d:ad:06:a2:b2:65:3e:b8:74:59:96:9d:3e:d0:
                    aa:c0:ac:f7:e7:05:27:3c:72:b4:5e:66:e2:77:98:
                    b2:e1:52:49:97:97:91:87:a5:ee:5b:27:29:5c:0f:
                    f2:ac:6c:bb:fd:5c:05:f6:07:37:d6:89:63:a6:79:
                    dc:f0:4f:4a:7f:8f:90:60:8e:0b:1e:9f:92:b4:9c:
                    64:88:08:08:bd:9b:d8:db:23:b8:ab:2d:a0:47:fd:
                    da:0e:b9:83:70:d2:52:53:99:39:51:5a:c8:70:71:
                    c8:8b:41:e8:bd:21:fa:4c:b1:97:b7:fd:9a:61:dd:
                    b9:a9:ca:3e:02:9c:17:26:d8:50:59:f0:88:f0:13:
                    ca:9f:28:83:a2:6f:21:2f:54:f1:8c:3f:32:59:3c:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AD:67:7C:B2:FF:24:56:3A:64:7E:39:32:D9:5F:52:73:63:DE:D8
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:32:6f:ed:c7:9d:56:1d:d5:a1:a2:7b:f3:f1:8c:8e:5b:d2:
         e8:4b:98:de:69:25:27:05:b4:06:ed:87:aa:5c:73:91:c6:af:
         21:1e:c3:14:50:3b:5d:17:27:9b:6c:ed:34:a0:09:28:b3:a7:
         7a:5a:1d:07:ff:99:f1:05:45:91:6d:5c:29:db:be:56:f4:d1:
         e7:ec:67:3e:7b:f4:a5:80:f2:2d:f0:fc:05:05:06:a9:7e:9b:
         ac:9a:8d:ee:01:a6:ba:c3:79:b6:bb:b7:0f:6f:0e:58:93:ed:
         01:25:14:07:d7:15:22:35:8f:95:b7:a6:e6:47:58:df:31:e0:
         a8:cd:a3:6f:de:e5:e6:16:97:8a:2e:a9:d6:47:95:41:fc:f1:
         70:fe:9f:8c:f3:8c:0b:6d:09:fb:0a:a1:6c:fa:08:66:58:97:
         41:41:fd:ac:19:fd:4f:fe:c4:04:85:27:20:21:44:99:0c:f5:
         ab:53:2a:59:4b:30:b7:14:aa:c6:57:75:f8:f7:65:36:38:ed:
         55:a7:ac:47:a0:98:e9:1d:ed:ed:08:50:21:71:12:b3:ec:6f:
         32:9e:9d:f7:52:bf:7d:1b:3c:35:a8:0a:85:4e:d7:dc:90:b6:
         f7:33:08:87:a1:fc:e1:52:7f:48:e0:46:53:e0:ff:5b:4f:3b:
         0c:b6:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:41:14 2025 by rpki-client