This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
File:                     2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft (raw, json)
Hash identifier:          0b9RZMKuUWkrdhmSWuKye6TbkmyiKjfYUd6kX8163eU=
Subject key identifier:   94:F5:B1:0D:23:A5:76:5D:62:B0:A9:4A:FD:2B:DD:CD:C6:AB:5A:26
Authority key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
Certificate issuer:       /CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Certificate serial:       0A583EF58659CFD167437E9824F53F39CB3EE784
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
Manifest number:          0344
Signing time:             Mon 22 Dec 2025 22:37:14 +0000
Manifest this update:     Mon 22 Dec 2025 22:32:14 +0000
Manifest next update:     Wed 24 Dec 2025 02:08:14 +0000
Files and hashes:         1: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: mLr+uiC6lfZpqhMzaY1jB2Xz68LEez2gkuQCR+mbw+s=)
                          2: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl (hash: +A5xnYkTTgytDkzSz8LivCBQ+PBBG6f/Dg+fXxT61TA=)
                          3: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: 8HJEKPfJsJ9cUBPI5dVpHTR/hYHRd/Hg9OtQORwVD/Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl
                          rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 02:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:58:3e:f5:86:59:cf:d1:67:43:7e:98:24:f5:3f:39:cb:3e:e7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
        Validity
            Not Before: Dec 22 22:32:14 2025 GMT
            Not After : Dec 24 02:08:14 2025 GMT
        Subject: CN=94F5B10D23A5765D62B0A94AFD2BDDCDC6AB5A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:cf:90:a2:f1:e8:0e:57:dc:4f:b1:4f:94:
                    34:97:3d:19:69:cd:5e:d6:0f:ad:f0:c6:4e:35:39:
                    60:96:32:2e:d7:82:d1:3b:05:63:a6:37:a8:86:1e:
                    87:0e:f3:7b:87:6c:25:13:64:56:2f:4f:78:48:ff:
                    58:bc:27:78:1f:19:ea:42:99:b3:26:a9:31:9d:8c:
                    15:e3:bd:0e:05:09:b8:70:38:a0:46:a2:3c:68:22:
                    84:53:55:7b:60:24:59:93:2e:39:7b:29:79:8b:b0:
                    98:2c:dd:b1:67:67:25:72:e9:98:13:a7:e2:ce:c9:
                    41:d2:ed:9e:27:51:a1:56:92:b8:8f:41:e6:87:fc:
                    c8:a7:2b:56:a3:73:4e:b9:07:fd:23:39:03:2e:e1:
                    bf:0d:f9:b8:5d:85:46:60:95:c9:7d:38:c6:f6:11:
                    59:bf:f1:f4:44:fb:c8:2b:3b:72:9d:d3:68:a0:cb:
                    e6:53:4d:3c:59:af:ec:11:d0:a6:2b:93:17:1b:c4:
                    00:88:ca:56:f9:c0:db:ac:0b:91:84:bb:99:b4:f9:
                    e7:f8:8d:05:a1:c9:f2:6b:71:96:d4:d6:15:d3:fd:
                    86:18:02:2e:d8:fd:5f:00:5c:1c:75:1a:f4:a2:d8:
                    e2:9f:bb:22:12:af:21:78:59:23:9c:0d:db:2f:f6:
                    62:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:B1:0D:23:A5:76:5D:62:B0:A9:4A:FD:2B:DD:CD:C6:AB:5A:26
            X509v3 Authority Key Identifier:
                keyid:2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:c3:91:cc:19:d9:57:d2:9b:d4:30:c2:5c:34:22:e5:1a:
         eb:ac:b2:a1:c5:c5:68:5f:73:02:f6:15:71:4b:ae:2f:11:88:
         02:e0:5d:c0:b6:df:e6:31:03:76:5e:29:31:06:45:d5:83:ec:
         0c:06:72:01:7f:3f:fe:ac:ea:18:0d:d3:aa:ea:8c:43:c0:c7:
         4f:9f:0e:6d:d9:4d:6d:8f:9d:00:01:ff:2c:34:2a:f3:27:d5:
         6d:2b:a1:fe:c3:ca:90:3b:47:90:de:c8:a8:4e:9d:43:f9:da:
         e7:f5:38:2f:ed:ba:36:dc:c7:40:14:a2:0e:88:c6:79:2e:a1:
         1e:e3:73:47:fb:a1:99:19:79:21:71:d4:cd:10:c0:7c:3b:4c:
         3f:78:a4:80:c4:fd:59:24:6f:3d:77:00:1c:8c:f0:0e:00:53:
         c2:8e:4f:45:9b:b1:5b:e3:e7:4b:a8:2c:71:1a:b1:16:0a:f0:
         ea:7e:2a:4d:24:de:ed:cd:3e:04:b7:5a:11:29:85:95:b4:4e:
         64:1d:b1:88:38:6f:89:de:a0:89:bc:bf:a6:c5:3a:33:a3:50:
         3b:be:30:98:d2:7b:85:51:d8:9d:ba:b2:fc:32:cf:6b:24:2a:
         a5:5d:3a:7f:3e:11:9d:54:06:3f:56:95:2c:0d:0a:87:66:ba:
         7c:e7:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:21:30 2025 by rpki-client