This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
File: CBB8A038671DF77F8F9579424916B82CCF45F66A.mft (raw, json)
Hash identifier: 41jpCB4JcpY59SkavZKY9Qotm0TFolZMe94xIinXG5Q=
Subject key identifier: 1F:AF:73:AB:51:6A:20:94:A0:89:91:6D:99:F6:7D:8C:A8:62:D1:51
Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Certificate issuer: /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Certificate serial: 677609ECDF151D803B8A5D776C9A97B6AAE462BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
Manifest number: 02F7
Signing time: Sat 20 Dec 2025 14:44:47 +0000
Manifest this update: Sat 20 Dec 2025 14:39:47 +0000
Manifest next update: Sun 21 Dec 2025 18:07:47 +0000
Files and hashes: 1: CBB8A038671DF77F8F9579424916B82CCF45F66A.crl (hash: UUN2pGrC6XLuhyMzw12uLKzCEjPwRw/f2HUC+gPDW0k=)
2: 3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (hash: ylKLBA46nPd7SSwT5MJlkcpCfmZ5mt/KAcixPXGZuno=)
3: 323830343a323664633a3a2f33322d3438203d3e20323633383631.roa (hash: L76D7obGrGrGOSqjmP2LByNTd+coHbUwi6bz+t8bMZ8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl
rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 17:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:76:09:ec:df:15:1d:80:3b:8a:5d:77:6c:9a:97:b6:aa:e4:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Validity
Not Before: Dec 20 14:39:47 2025 GMT
Not After : Dec 21 18:07:47 2025 GMT
Subject: CN=1FAF73AB516A2094A089916D99F67D8CA862D151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:c8:33:90:ef:1a:a4:90:a7:92:fc:ba:e8:
2b:60:50:dd:5f:e1:75:04:1b:c1:1b:5c:cb:46:69:
6a:83:cc:3d:25:04:f2:0e:21:2d:04:a2:c1:0c:16:
cf:4a:83:7f:f3:3b:6d:28:05:4e:68:3c:cf:dd:af:
c6:c0:15:45:a9:ce:d8:33:f6:fb:b9:1c:6a:75:35:
46:5e:24:08:09:24:7f:88:bf:a8:32:7a:1d:a0:9d:
7d:3a:1c:3e:fe:ca:1a:b1:bd:a6:d3:81:da:4d:99:
2a:94:ef:30:ec:3f:32:df:48:21:5c:6c:5e:03:33:
aa:ba:d5:27:16:af:50:ad:33:11:e2:34:00:2c:e2:
1a:95:9d:11:6a:ca:26:df:65:50:df:7d:53:b8:67:
a9:4d:51:69:b4:65:d8:73:1a:90:02:33:3f:28:3f:
15:f0:d4:71:45:7b:b8:61:75:12:5e:c0:2d:e8:d9:
c2:8c:46:1f:e6:0d:f6:19:3d:f9:b7:f4:b5:b6:3e:
29:83:10:5c:b4:52:c8:fc:e4:8e:55:91:33:1f:52:
6c:39:69:41:49:1e:ca:93:5c:1d:d0:17:f2:21:34:
a2:17:a2:23:1b:3c:da:5a:ba:d1:9c:56:ac:aa:a2:
01:7c:68:c2:fe:a4:f9:6e:38:7d:c1:dc:22:b7:af:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:73:AB:51:6A:20:94:A0:89:91:6D:99:F6:7D:8C:A8:62:D1:51
X509v3 Authority Key Identifier:
keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f5:31:d1:86:56:6a:53:72:2f:38:89:94:85:fc:f6:a4:7b:
50:7b:99:93:a0:70:a6:e4:85:5a:ba:9b:ea:85:88:ae:9c:47:
8f:65:ad:28:53:19:46:55:3e:40:31:8a:3f:72:4a:ec:c5:11:
41:e3:99:6b:83:22:22:cc:e7:d6:95:7d:bf:44:53:0c:f0:87:
b2:85:e3:4c:7a:69:95:fa:26:fc:5d:30:16:1c:ff:b2:31:4c:
a9:c8:12:8d:7d:5f:02:c3:ef:20:19:bd:1a:34:ba:3f:78:d6:
b5:3e:eb:51:6b:5c:a7:28:e1:a0:ec:f7:bf:4d:5c:30:4c:fb:
eb:05:f9:30:b5:65:76:8d:8e:6a:ea:8a:45:2c:36:dc:6e:5c:
e3:15:bd:09:df:02:31:cb:59:ce:86:35:a0:6b:1b:75:e2:09:
e4:b4:be:16:9b:d8:1c:9b:4e:a3:a6:d5:34:5c:89:42:3d:83:
e9:0d:f8:42:c2:49:a3:d7:85:50:c9:84:2a:6b:03:08:2b:d4:
ea:51:de:39:31:d2:b9:a5:d0:c6:29:92:b5:aa:82:d7:b3:dc:
be:78:9e:73:d2:e2:2a:dd:97:e1:ec:54:3f:cc:cd:ae:5d:ca:
16:d6:87:a2:6a:08:4d:a3:04:fb:22:fc:c8:53:58:96:74:11:
06:0d:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:55:29 2025 by rpki-client