This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft
File:                     AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft (raw, json)
Hash identifier:          vbcKPqp2Dds5FtH9RS1mgK1IaunF5ZK0XGvfr6UJOtI=
Subject key identifier:   1A:5A:96:B7:9C:15:71:A2:9D:B6:75:92:8A:89:3E:EF:F0:2C:40:46
Authority key identifier: AA:DF:2B:4E:B4:DA:1D:ED:92:09:01:1C:2A:3B:BA:C3:32:76:83:CF
Certificate issuer:       /CN=AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF
Certificate serial:       1BEE8CEC7E3C505E00A6C80CFC0352AB2054455B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft
Manifest number:          1B
Signing time:             Fri 19 Dec 2025 02:31:13 +0000
Manifest this update:     Fri 19 Dec 2025 02:26:13 +0000
Manifest next update:     Sat 20 Dec 2025 02:32:13 +0000
Files and hashes:         1: 34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa (hash: DbHV5aNkSuftS00+nOpeYItU6/riOPpLJszqkNXh2xU=)
                          2: AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl (hash: OUf1YVw554HVpBH67D8qqNFkt5paIaRKjXqPYgxUcGg=)
                          3: 323830343a353735383a3a2f33322d313238203d3e20323638363035.roa (hash: hRk6zTTmwtTl6q/rX2tOO4A3QRG3X/2oeJTUyvgovpg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl
                          rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ee:8c:ec:7e:3c:50:5e:00:a6:c8:0c:fc:03:52:ab:20:54:45:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF
        Validity
            Not Before: Dec 19 02:26:13 2025 GMT
            Not After : Dec 20 02:32:13 2025 GMT
        Subject: CN=1A5A96B79C1571A29DB675928A893EEFF02C4046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ab:37:7a:1b:af:78:47:5f:d5:0c:5d:85:56:
                    e8:a6:af:43:24:d8:29:e4:2e:3b:0a:9c:52:9b:24:
                    03:47:9e:12:ad:c0:ee:e8:7a:8e:de:c7:7a:0f:0a:
                    97:55:95:43:2b:fd:69:f9:94:95:00:6e:b9:f0:b4:
                    8a:c5:59:de:d1:2a:4e:ea:6f:89:7b:94:ed:b7:2d:
                    44:71:6e:24:8f:25:a8:24:e6:e7:c0:aa:4e:f8:50:
                    87:0b:8d:73:66:45:e0:ed:7c:57:75:ac:5e:4c:f4:
                    0c:62:e7:32:ac:57:df:c7:48:d3:f6:88:26:7d:68:
                    a1:47:f4:e7:15:72:47:92:8f:73:be:1e:ab:4c:87:
                    00:d2:9c:86:81:6c:70:c2:42:6a:8f:f2:71:23:fa:
                    8d:73:ba:11:34:6f:7e:af:ec:d5:ac:eb:1e:a2:80:
                    3d:92:de:4a:42:51:0e:fb:7a:1b:31:0a:32:17:e6:
                    0e:1e:15:dd:0e:85:58:87:6a:8a:41:bc:b7:5e:41:
                    37:08:97:27:83:96:af:71:ff:03:0f:60:0b:a7:cb:
                    e0:8a:c6:47:c7:a8:9f:11:6f:08:25:bf:73:6c:d8:
                    92:03:30:d6:2d:03:c9:49:e0:bb:33:d0:7c:4b:63:
                    56:0e:7f:19:3d:53:63:59:b3:80:bd:ef:ce:92:92:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:96:B7:9C:15:71:A2:9D:B6:75:92:8A:89:3E:EF:F0:2C:40:46
            X509v3 Authority Key Identifier:
                keyid:AA:DF:2B:4E:B4:DA:1D:ED:92:09:01:1C:2A:3B:BA:C3:32:76:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:81:31:dc:d0:e8:e4:5d:c5:fe:00:ef:29:4f:2b:45:64:0a:
         5d:89:b5:a4:77:d9:95:b2:fa:9b:b9:31:d5:6e:f8:b1:4c:0a:
         5c:6c:5d:d1:f8:3c:e6:ff:99:97:bc:56:92:8a:db:47:a9:d0:
         95:78:0e:67:e9:ca:28:1d:16:00:99:f3:97:61:a7:7c:2a:d2:
         4e:25:7a:f1:f3:a7:ca:92:5d:e8:3e:11:44:e8:33:72:61:92:
         76:fb:12:64:d3:36:b9:83:5c:d6:14:9c:f4:58:aa:2e:73:ba:
         ec:1b:67:c3:1f:4e:3a:77:84:4e:db:91:d7:8f:c7:48:7d:b7:
         81:05:2b:76:6a:48:af:28:37:e6:5b:c4:24:4f:8e:65:b3:e5:
         16:10:56:b8:4b:90:4f:27:c8:c5:65:34:b4:9f:2a:3e:3d:30:
         69:b7:52:a7:a4:ac:1e:10:22:98:dc:20:7c:99:35:e4:cf:dc:
         72:79:c0:a0:d8:49:30:7a:66:ff:d3:1c:f0:d5:da:f5:05:19:
         20:12:cf:f9:6e:5c:34:fb:0d:82:2a:27:72:bc:ca:7b:69:30:
         e2:e5:d7:0a:59:de:9a:0a:bc:3e:ee:7f:a5:53:f8:80:5e:61:
         dc:2f:ee:bf:0a:ba:1c:e0:2d:66:58:50:a0:66:14:af:a3:1c:
         a4:a9:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:17:46 2025 by rpki-client