This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
File: 0667C1E975614C995A6FB737132548928E943717.mft (raw, json)
Hash identifier: PXrZ8YHkShWn5/vZdDGY7lV/T07O8QA87zqE+dh1liw=
Subject key identifier: 1B:17:D3:7D:BE:23:D0:6A:52:47:90:8C:2D:2E:DD:80:0F:28:6D:52
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Certificate issuer: /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial: 682B89A6ACDC8A23705AF62EEA9DDE8E9165F5CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
Manifest number: 0352
Signing time: Fri 26 Dec 2025 10:42:24 +0000
Manifest this update: Fri 26 Dec 2025 10:37:24 +0000
Manifest next update: Sat 27 Dec 2025 14:28:24 +0000
Files and hashes: 1: 0667C1E975614C995A6FB737132548928E943717.crl (hash: gQ/jq+aWuvQo8nT8ZOOrwZJlzFBTfXLILwDO+GwPKPg=)
2: 3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa (hash: nrOdqZOfY5Nbn0thVXtoyCD/xS8FjidLJDZuWGGR5DE=)
3: 3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (hash: JVu8beyHKjU9ufH+KvindaEB+yOIp4s8pyXSuRmYUGk=)
4: 3138372e3131312e3131352e302f32342d3234203d3e20323731363830.roa (hash: oIInCdgaGC3oZ63SvbkLHxdHc1iFO02Y1xvdWzEcFSI=)
5: 323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (hash: 8mwojufcPep+splbZMuv38KNaQbe2kXCGWx7hQgtXxA=)
6: 3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa (hash: jOaa9Y6B1wldYTqunC0ifArH1I/MagZETYt4EwF5yq0=)
7: 3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (hash: UDc2a11lMXoutrxkVXHv9/P2ZCVJhAIP/APUwqyFI+Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Dec 2025 14:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2b:89:a6:ac:dc:8a:23:70:5a:f6:2e:ea:9d:de:8e:91:65:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0667C1E975614C995A6FB737132548928E943717
Validity
Not Before: Dec 26 10:37:24 2025 GMT
Not After : Dec 27 14:28:24 2025 GMT
Subject: CN=1B17D37DBE23D06A5247908C2D2EDD800F286D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:49:46:28:4e:9c:00:f0:05:d4:e2:4a:b1:
40:9d:8e:68:3e:88:a1:30:b9:8c:39:20:ef:ed:89:
4c:a7:55:17:65:4a:05:09:34:51:b2:be:c3:58:58:
aa:b2:77:e7:f7:7b:bd:ee:ef:f7:91:62:e8:b7:87:
e8:9e:22:82:01:03:ee:f5:28:e3:f0:a6:31:f0:1b:
e2:ab:a6:b7:a8:a7:e1:34:ca:83:03:20:ce:24:b7:
89:32:9e:78:27:02:98:89:80:09:59:79:bc:fc:08:
14:70:73:40:5e:cb:2e:bf:8f:d7:23:cb:29:76:af:
28:86:24:14:a3:9f:d4:05:18:df:66:43:4b:f4:31:
27:20:c0:00:e2:b4:71:d0:13:e8:8f:a5:0b:c3:50:
b1:7e:ed:8a:c1:eb:f1:27:a0:f2:38:ef:ec:dc:1c:
2b:ed:c9:bc:c8:cc:e1:58:39:f1:c5:83:de:86:61:
9d:90:5a:4d:ca:35:d5:df:23:b4:9a:b0:6f:d5:75:
0b:dc:af:6a:0d:7b:45:0e:df:fa:3d:5b:37:b7:d2:
f5:66:18:04:3d:ca:9c:3f:34:73:3c:b7:2a:77:e4:
e8:a2:c6:51:b7:59:9a:6c:d3:40:ac:65:7d:ec:be:
d2:67:28:71:47:be:fe:8a:5c:68:2d:07:85:48:cf:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:D3:7D:BE:23:D0:6A:52:47:90:8C:2D:2E:DD:80:0F:28:6D:52
X509v3 Authority Key Identifier:
keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ce:a1:01:18:47:51:3f:ec:c5:59:78:54:fd:3d:9a:30:b0:
74:63:7a:f0:95:c0:aa:ce:6c:c3:c4:bf:0b:17:75:71:98:13:
bd:89:15:31:8d:5b:13:b8:d6:2a:75:ce:20:c3:c9:e6:94:bf:
85:8d:b8:b3:b3:ee:a4:cb:ca:1a:c9:58:05:9e:f3:e7:01:e0:
fc:2a:ca:10:eb:1c:6b:21:70:c4:bd:ed:e2:16:59:f3:9d:f0:
5e:c7:c4:97:a4:e5:da:15:a5:b2:6c:7f:c4:d6:19:4e:db:2b:
72:26:c8:df:a3:e8:35:f0:5a:1d:5a:75:0f:7d:db:e3:1b:1e:
f8:15:c1:55:7d:9f:5b:8f:a7:fc:c8:fe:89:6d:8b:f5:55:29:
f2:99:ab:92:c8:22:f3:6b:f8:87:a5:06:1e:4f:61:bd:96:f6:
b5:b7:30:71:02:31:7c:39:79:61:6d:92:b1:2a:ea:b7:84:76:
4e:54:33:31:07:12:65:f4:77:92:b4:15:34:e1:25:a9:1b:b1:
93:e3:c8:77:1b:ae:3c:24:d4:3c:8b:de:94:9e:fc:9c:93:d1:
70:d2:c4:51:ee:9c:37:c7:ac:3a:ea:70:6d:9d:80:ac:f7:29:
08:21:bd:36:b8:59:9c:8b:cf:6a:c7:7b:75:9f:e2:bb:5f:04:
8b:3e:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:40:06 2025 by rpki-client