This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json)
Hash identifier: +iGOZS3tYg3xmNaQvp24ySXwjfk1BQ5FoSAndLS5IdM=
Subject key identifier: 7F:F9:BF:3C:8E:B9:E8:AA:31:04:8A:28:C0:0F:F8:71:DC:0E:9F:B6
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 3B760F6506708AAD7207088F6EBE4434D878C0A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
Manifest number: 0344
Signing time: Sat 20 Dec 2025 10:30:34 +0000
Manifest this update: Sat 20 Dec 2025 10:25:34 +0000
Manifest next update: Sun 21 Dec 2025 10:57:34 +0000
Files and hashes: 1: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: YRwpO+qV9F49NAjD4t6i+dZs654OmXK5qpgT8nKdEac=)
2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=)
3: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: RbMbCQODO8+WVoH0w93k1w1sbFVbfT1Px2R/kLWaLMI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 10:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:76:0f:65:06:70:8a:ad:72:07:08:8f:6e:be:44:34:d8:78:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Dec 20 10:25:34 2025 GMT
Not After : Dec 21 10:57:34 2025 GMT
Subject: CN=7FF9BF3C8EB9E8AA31048A28C00FF871DC0E9FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6b:df:4f:88:ea:04:b0:5f:21:e5:90:50:37:
11:05:6d:7f:6d:44:ff:e0:a2:6b:f5:dc:b1:2b:31:
54:9d:57:02:69:1e:49:8f:3e:80:f0:72:32:aa:6a:
71:21:2c:17:cf:6d:c7:a5:70:da:96:34:bc:32:58:
f7:52:2b:79:4d:04:39:99:25:12:75:bf:81:82:f1:
c8:6d:f0:0f:05:49:db:6f:92:7e:21:df:8d:74:e5:
a5:eb:41:8a:b0:2e:e0:76:ee:58:68:a5:69:e3:a8:
37:11:3f:d8:00:f2:47:e1:39:f8:e9:dd:b9:6b:04:
d9:bf:7a:b8:89:30:08:bd:ba:4a:72:c7:bb:32:b3:
4c:17:82:96:43:f4:8e:e5:40:77:cf:b7:02:33:23:
de:1d:a6:0a:d3:19:9b:9e:c4:cb:6a:b1:6d:fe:8a:
94:5f:14:7b:53:06:b2:8e:b2:f9:3b:dc:16:9a:3f:
b1:ab:bb:e3:33:22:e2:b4:43:55:e7:dd:3e:f0:45:
a6:51:78:6b:8b:8a:d9:ab:aa:22:67:89:70:a8:75:
71:34:73:c3:8a:46:b9:df:94:dc:dc:16:58:4b:d9:
3d:5c:bc:fe:c4:f7:9c:57:04:b1:f0:3c:f5:ab:10:
a7:9f:2c:ed:d0:72:3e:bd:83:36:b8:89:de:0b:c2:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:BF:3C:8E:B9:E8:AA:31:04:8A:28:C0:0F:F8:71:DC:0E:9F:B6
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2c:2b:b8:63:1c:e2:9c:20:c5:22:f5:35:d1:83:60:95:11:
aa:72:06:ca:b2:97:98:cc:5c:9d:44:bb:97:a1:60:9a:dd:ad:
49:be:36:1f:ed:29:0f:1f:6e:a6:e7:74:12:4b:16:c3:18:74:
5a:d9:11:23:9f:27:6e:e9:5f:4a:6a:45:8d:de:00:ab:62:42:
a8:53:58:17:53:6e:db:b3:dc:e8:e5:21:5f:bf:d5:9a:72:c4:
9d:5c:a3:9f:09:04:f0:c3:94:74:b3:0e:64:0e:c2:2c:ff:54:
e6:a2:83:38:97:a0:84:c9:58:d3:a0:ac:01:ea:86:aa:04:e5:
58:f9:b6:0a:0a:67:1f:9f:e2:7f:f1:0c:bb:e5:24:ef:f5:db:
84:ea:04:03:6f:e2:60:bb:75:d3:75:1b:5b:ac:22:8d:0e:f3:
fc:34:ec:b3:7d:af:46:51:e2:b8:22:b5:f6:7b:93:b2:67:60:
1b:05:97:28:f4:8e:77:16:a9:c4:ec:cc:fb:db:74:d8:f2:e8:
28:0e:a0:f5:66:ab:46:3f:3c:6a:50:97:b1:01:54:c0:b2:7f:
01:a5:36:9d:bf:26:59:bb:6e:91:4c:75:c7:97:4a:e8:4e:bf:
bb:df:14:8d:97:3d:60:85:cc:37:8c:77:90:c1:e3:6a:f6:d3:
68:30:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:01:10 2025 by rpki-client