This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
File: 085A4379FC02066399A7BABE986F2B930711F0E0.mft (raw, json)
Hash identifier: qZ/pHwTaeeP8xw203fz1w1AC04hZFk17pwzj+gR/9Eg=
Subject key identifier: 88:EB:0F:55:F8:38:5A:E7:D3:AC:00:E0:19:F8:39:7D:00:41:65:9D
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial: 3FCF93549094C525226680B721AF6ED8A9111764
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
Manifest number: 019B
Signing time: Wed 24 Dec 2025 09:54:00 +0000
Manifest this update: Wed 24 Dec 2025 09:49:00 +0000
Manifest next update: Thu 25 Dec 2025 09:57:00 +0000
Files and hashes: 1: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: +xOfTPOyg3oZBW1SRivjN46hBESQU5WWrM4vrLYmFGA=)
2: 085A4379FC02066399A7BABE986F2B930711F0E0.crl (hash: cVUvuHjRM5jq7yRSb/9XfuNMiBnA2LvlLZdpKUDJwuQ=)
3: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: OyHPZjFM6nE6jESktIZHb4U9fXKswqrOu5Gkjq9t1u4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 09:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cf:93:54:90:94:c5:25:22:66:80:b7:21:af:6e:d8:a9:11:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
Validity
Not Before: Dec 24 09:49:00 2025 GMT
Not After : Dec 25 09:57:00 2025 GMT
Subject: CN=88EB0F55F8385AE7D3AC00E019F8397D0041659D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:f4:31:d0:22:38:f7:52:20:93:40:60:8c:
ff:e5:ae:41:f8:cd:b3:3c:51:4f:e8:d5:1b:c3:b8:
9c:b2:e2:76:ef:e2:ce:03:fa:57:7d:94:f1:ec:6a:
a2:40:85:a5:43:3b:f5:4d:0c:dd:ef:0f:5f:85:75:
c5:2d:45:ff:9a:39:90:ed:cc:04:89:3f:41:2e:56:
5d:b8:07:67:34:2b:e4:0f:02:13:d9:a4:63:c8:f6:
75:38:a5:01:2c:c6:4a:60:eb:8b:31:10:9a:4b:98:
d1:3f:e9:7a:18:19:83:b9:e0:c9:5e:0f:60:b3:33:
8f:f9:2c:99:88:01:b9:d1:13:c2:33:6e:43:a6:8a:
0b:52:38:62:fc:e6:91:a4:26:89:34:fe:98:e4:9e:
97:31:79:ae:39:22:ae:79:26:8a:1b:28:58:e1:16:
8a:e7:87:67:9d:7a:13:0c:23:ce:05:6b:6e:54:a0:
44:42:27:01:f5:f6:08:42:e5:f3:bf:be:53:c6:e0:
ed:42:9c:0d:a5:76:00:72:86:a5:62:70:34:29:42:
35:8d:52:41:df:a5:26:1f:f1:fa:a2:06:57:96:18:
35:e8:0b:c6:23:d4:c7:6a:d4:4f:95:9f:e3:ca:6d:
ae:62:aa:15:be:bb:83:f2:fd:e0:d0:f6:20:bb:c7:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:0F:55:F8:38:5A:E7:D3:AC:00:E0:19:F8:39:7D:00:41:65:9D
X509v3 Authority Key Identifier:
keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:33:26:3f:f8:a6:af:c4:ae:f1:1f:9b:0b:3a:04:7f:09:cd:
cc:bf:03:e7:70:c7:67:31:8f:d5:63:44:af:29:55:7f:0b:1a:
f0:d7:db:39:62:ca:3f:93:ae:66:17:fc:ed:b7:3f:c7:9b:18:
63:7a:0a:4a:51:61:45:5c:44:0e:aa:de:32:da:b7:b4:68:d1:
e5:13:bd:01:59:d0:1b:21:d3:89:c8:87:55:34:77:29:fd:b6:
dd:e1:f3:63:72:cf:2e:60:2e:73:48:05:ea:a8:82:dd:7d:b9:
3a:f8:9f:19:99:ad:a9:e2:38:49:98:6f:b4:44:80:d1:f4:a1:
06:79:d2:7f:bf:07:ce:6d:66:2e:27:c2:37:2e:ff:a4:fc:ab:
7c:e0:7f:47:9d:75:33:37:04:d2:3b:2d:be:94:6f:d8:46:63:
fa:75:74:54:4d:87:4d:bf:61:0c:24:1a:71:52:31:87:1c:dd:
43:85:ea:a2:b8:6e:89:c4:4b:72:93:91:66:cf:04:30:ef:0c:
ef:e3:3a:cb:8f:5c:9f:33:77:1b:10:81:fe:8c:4b:24:fa:e7:
a2:3f:63:42:13:f1:7c:fa:0d:72:09:6c:00:02:c3:20:bf:94:
88:b4:3a:fa:7d:7e:c1:e7:e9:03:f3:10:a2:cc:c0:66:a6:27:
c3:34:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:41 2025 by rpki-client