This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
File: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft (raw, json)
Hash identifier: wRFeQraW3mKrJx+mGA+1LY91f7La81wLDzlTG7NhAF8=
Subject key identifier: 91:A8:61:67:3C:97:65:D8:2B:12:2D:55:9B:25:3D:D0:C3:D5:6F:9E
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Certificate issuer: /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial: 565C145A33CE099DB7B479D854266BC3A1637D30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
Manifest number: 01D1
Signing time: Sat 27 Dec 2025 19:29:08 +0000
Manifest this update: Sat 27 Dec 2025 19:24:08 +0000
Manifest next update: Sun 28 Dec 2025 19:30:08 +0000
Files and hashes: 1: 323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (hash: lRzCpaJbvrSqda05BuCn2FdV6TjUSCPjhiYyCKKBL7U=)
2: 34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (hash: LDA7BPnO0INBAOLpeunyqV46kLoPxb6h3HNziLGvD4M=)
3: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl (hash: KX1T/YEsSXUKX9uBT61fV5N2uaP8RRYmGHt6Mr3ItSI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Dec 2025 19:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5c:14:5a:33:ce:09:9d:b7:b4:79:d8:54:26:6b:c3:a1:63:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Validity
Not Before: Dec 27 19:24:08 2025 GMT
Not After : Dec 28 19:30:08 2025 GMT
Subject: CN=91A861673C9765D82B122D559B253DD0C3D56F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:50:ba:d5:47:81:b6:32:d2:46:70:0d:11:
93:5a:23:4f:d3:f7:85:79:da:a1:61:75:bb:78:2d:
40:85:66:2b:f1:a4:49:93:3c:15:d5:05:62:92:25:
6b:c9:f1:fe:97:dd:4d:05:da:be:7f:59:0a:05:c6:
16:f6:49:3a:16:c1:4e:59:3f:4d:9c:c5:af:3a:33:
7d:04:31:78:ba:90:27:98:8c:cf:1a:81:e8:9e:32:
7e:00:d1:e8:b6:36:64:0e:7e:03:b3:6c:d3:a5:6c:
52:3b:11:90:2c:33:ec:e7:d0:60:c5:f6:1e:05:36:
58:8f:94:aa:67:0c:d2:98:d8:26:bd:43:74:d0:10:
5b:c0:16:48:2c:c3:35:aa:57:89:b9:58:f6:0d:6f:
47:a4:e7:1c:24:d4:d9:8c:0b:55:f8:95:6e:2f:9a:
05:7f:5a:63:c1:ec:72:7f:01:d2:64:99:a4:0a:a0:
a8:7a:08:65:d7:da:4a:be:90:64:27:e9:2d:10:51:
1f:87:80:8f:8f:55:c1:4e:73:02:75:e8:b7:d5:f6:
bc:2d:36:19:9a:88:ba:30:cc:46:35:8e:f9:ee:d8:
4c:a2:b3:71:9e:83:6a:e7:27:ca:cc:a6:84:da:03:
5a:7b:b9:a9:17:a8:fe:e2:31:b5:e4:c8:4a:5d:dd:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:61:67:3C:97:65:D8:2B:12:2D:55:9B:25:3D:D0:C3:D5:6F:9E
X509v3 Authority Key Identifier:
keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:fb:80:99:1a:ac:2a:d5:fe:6c:bd:53:a9:64:13:73:b8:
0f:6d:73:e0:8b:5f:50:d6:3f:0a:92:65:4c:92:ee:d8:d1:7d:
21:ab:81:92:36:64:f7:35:b2:51:c1:17:f7:08:17:91:d8:53:
e7:ee:52:80:38:96:96:49:c9:24:ed:6f:6a:e5:e0:d0:6e:7d:
6c:bf:f9:44:2e:0d:99:f6:73:78:33:ff:fe:f0:2a:f8:a5:55:
53:87:2b:40:b7:d8:2f:9a:71:d0:e6:db:d2:c8:6c:06:29:a2:
21:e9:ca:30:96:56:d9:d4:75:65:55:d0:b9:f1:14:58:89:c7:
d5:0b:57:87:dc:a5:60:1d:5e:cf:70:58:be:3b:b9:24:98:34:
bf:bc:a4:b4:dd:34:0a:83:1b:af:83:c1:de:e9:bc:9a:17:da:
b4:07:e9:c5:26:2d:dc:4e:7d:2d:65:b4:5e:ae:24:db:68:f5:
6c:dd:6f:64:f4:af:a3:a8:5b:b5:88:1c:e9:2b:80:c2:61:32:
f6:41:71:e1:23:40:44:21:fb:20:88:ed:1c:4d:6b:c0:b0:51:
c5:10:96:4c:8b:28:de:4a:15:8e:d2:b9:1c:08:d5:9f:d8:5e:
ec:aa:f5:b5:18:74:91:9d:58:22:a8:a3:98:6b:ca:3c:f8:14:
d3:d6:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 03:14:42 2025 by rpki-client