This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
File: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json)
Hash identifier: fs1q9MI6jBkyyAK4nIPRWq2m2rk++2r973jn5CZvucs=
Subject key identifier: 1B:DB:37:A7:A5:94:1A:18:DC:36:9C:96:0F:E4:12:B8:00:E6:B4:8B
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Certificate issuer: /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial: 248E7879F5BF38F013D3FC565E07AEA400B48ACC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
Manifest number: 0346
Signing time: Thu 25 Dec 2025 19:01:31 +0000
Manifest this update: Thu 25 Dec 2025 18:56:31 +0000
Manifest next update: Fri 26 Dec 2025 19:30:31 +0000
Files and hashes: 1: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: Lr/clp/E+0bgy4FDZEfVVZj1hl0XXS9yXJMSho3HEH0=)
2: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=)
3: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 19:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8e:78:79:f5:bf:38:f0:13:d3:fc:56:5e:07:ae:a4:00:b4:8a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Validity
Not Before: Dec 25 18:56:31 2025 GMT
Not After : Dec 26 19:30:31 2025 GMT
Subject: CN=1BDB37A7A5941A18DC369C960FE412B800E6B48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:7d:07:88:ce:0b:78:e8:f6:3a:26:2a:b2:
23:62:5b:02:cb:59:27:d6:dd:cc:34:c1:b3:40:7a:
f1:cc:e9:59:91:7d:82:a4:c2:39:ee:50:9e:36:e4:
29:a3:92:eb:87:34:d6:6c:0f:56:aa:a4:3c:99:64:
f2:6a:fc:09:fb:4a:85:21:53:e8:69:87:95:ad:2a:
d1:70:af:de:2f:41:77:4f:20:a3:96:08:4f:26:c7:
d6:ed:94:bb:2d:ed:23:5f:90:c2:4b:58:c3:4e:0c:
06:d1:a7:22:0b:ea:bf:c3:90:a4:6d:fa:fd:7b:55:
d2:d9:2e:c8:45:44:47:6d:7c:07:0e:21:c5:20:91:
38:99:aa:3e:63:ad:34:ea:59:b8:20:ef:16:0f:72:
d2:27:f9:ea:44:4d:a9:64:8c:d6:4f:33:96:0b:ad:
47:62:43:67:71:d5:95:75:2f:3e:59:ef:5c:70:16:
f7:cb:b0:db:34:33:d0:ef:0d:5a:73:6a:d0:17:6b:
1a:5f:47:14:d1:67:d4:d3:be:e4:d4:a7:2e:9a:da:
71:b4:e7:d2:89:10:6b:1e:f7:2c:21:65:f1:b7:a2:
bb:46:ce:33:12:a8:93:b3:44:a9:de:1f:44:40:c3:
36:85:3f:9b:94:73:0a:ab:00:42:b0:8b:89:c9:ae:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DB:37:A7:A5:94:1A:18:DC:36:9C:96:0F:E4:12:B8:00:E6:B4:8B
X509v3 Authority Key Identifier:
keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e5:8d:eb:84:8b:6e:d7:6e:ed:b4:0f:dc:2e:35:20:8d:26:
43:06:fa:f7:a0:30:df:9b:57:52:20:fd:fe:ab:f2:f0:9b:1c:
5e:b7:d6:8f:de:57:48:c2:da:49:7d:c3:7e:63:90:14:b7:dd:
12:d1:e5:78:a1:1b:29:28:10:1e:a1:df:1e:e1:18:7d:3d:54:
da:6b:b6:c2:06:65:71:b0:a2:4c:aa:4f:f6:5d:ff:66:a8:f1:
4c:bf:02:97:ca:6e:37:85:26:33:73:c1:5b:08:1b:d5:66:75:
64:ce:0b:df:6d:d2:64:5a:8d:99:50:1a:ef:07:24:b4:dd:3d:
dc:aa:8c:3d:8e:6a:c0:c0:9d:7f:b8:2d:ee:14:86:e3:08:d5:
23:44:9b:df:d5:32:78:e7:e0:0e:6e:f7:f8:87:4d:62:49:f7:
ff:1b:aa:83:88:b5:91:d2:fb:8c:f6:5b:5f:d1:31:4d:76:5b:
9b:38:3a:7f:1e:ac:76:34:04:48:fa:20:86:a8:71:04:66:88:
f2:31:d5:43:ac:ce:8d:1e:d5:91:22:cd:36:f5:73:f3:ec:e2:
57:b0:e6:f7:cf:20:bb:32:a7:52:33:04:5b:c5:6b:95:42:6f:
16:87:83:87:4e:6f:19:bd:39:0f:58:ef:96:53:54:93:d9:f3:
36:0d:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:19:52 2025 by rpki-client