This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier: 2GVitEJDKcQAimBj8RlXjBgJ/l6T6PrgWNCbVIu8qrM=
Subject key identifier: CB:80:C9:19:F3:00:3D:36:34:A5:E2:DD:B7:A3:F1:67:DE:09:AB:C7
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 33AA4DC7F4153490811F4902AFB6916C386E2C91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number: 0347
Signing time: Wed 24 Dec 2025 05:20:15 +0000
Manifest this update: Wed 24 Dec 2025 05:15:15 +0000
Manifest next update: Thu 25 Dec 2025 06:00:15 +0000
Files and hashes: 1: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=)
2: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: 8eAkq4HT64a5baT56OgFx1DH72F9mwfih602zhR2CH0=)
3: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: AUCeXyQhrwCL9Mck0iajZvwwmc1FflQdcxcCpdUoQqg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:aa:4d:c7:f4:15:34:90:81:1f:49:02:af:b6:91:6c:38:6e:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Dec 24 05:15:15 2025 GMT
Not After : Dec 25 06:00:15 2025 GMT
Subject: CN=CB80C919F3003D3634A5E2DDB7A3F167DE09ABC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:f5:5b:2c:f4:f3:8e:8d:8c:43:6d:f8:be:
1f:34:1b:a8:cd:8a:be:47:90:2d:9c:79:6a:46:10:
d7:a0:7d:c8:d9:8b:25:81:5d:62:cf:19:f6:15:26:
a6:65:bf:e7:7b:22:f4:a5:ba:35:5a:48:74:71:c1:
a6:75:97:b2:c6:62:a8:4a:76:f1:5d:30:73:a6:48:
34:39:01:19:98:b4:d9:d0:51:60:53:6a:ae:3b:fe:
73:0c:81:50:31:55:85:7c:cb:f9:2a:d8:c1:fd:ae:
08:4e:f5:17:23:0c:b6:63:d9:7c:94:f9:7d:92:75:
8e:02:f5:e8:f0:78:71:96:0e:90:6c:b9:b9:26:40:
03:c8:c8:85:b3:ef:04:98:13:e7:b3:92:d0:71:46:
c1:06:46:88:3b:46:6c:2d:d9:ac:ce:34:b5:67:cb:
0d:9c:a8:90:a1:0a:ad:fe:fe:e7:7c:7e:03:19:12:
a0:2f:14:9b:7c:a4:32:a6:85:61:fc:93:62:ef:9c:
dd:62:c2:96:10:4d:5a:42:5c:b6:26:d9:f1:84:ed:
3b:36:55:48:90:42:c2:70:50:de:e4:6c:c2:dd:72:
bb:2b:43:63:a1:97:28:3b:a7:12:62:c8:08:40:3c:
a7:21:06:a1:52:1d:da:2c:f1:cc:d7:7e:0b:7d:4b:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:C9:19:F3:00:3D:36:34:A5:E2:DD:B7:A3:F1:67:DE:09:AB:C7
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:be:ab:6f:ee:9d:24:18:ad:9b:99:81:0f:2e:37:f9:5d:
d6:41:90:cc:c3:80:82:d9:29:b7:45:0a:ef:55:9d:97:c8:5d:
ff:2a:36:eb:19:ce:81:71:a7:90:79:9c:cd:9c:70:9f:6a:d6:
d9:31:f6:eb:4d:6c:5b:47:99:d0:8e:ff:8b:82:dc:da:5d:da:
b7:e3:5e:a5:5b:f5:3a:3d:8d:90:d9:24:c6:3b:46:d4:ab:0a:
64:83:14:3d:f9:eb:f4:d4:e8:9a:28:89:46:a7:a6:93:63:bc:
89:af:c6:ba:9b:79:81:1d:cb:21:8d:93:87:dd:e2:61:86:8e:
8c:da:57:63:ad:a3:f1:cc:a6:1a:c4:a9:9e:f9:fa:13:4e:ef:
85:c8:c2:7d:da:f0:e4:aa:0e:f8:b2:be:5a:28:19:33:2a:9c:
1e:f4:2a:84:b6:61:83:70:c2:67:eb:ca:af:0d:2d:1e:c6:e6:
69:43:8d:ea:80:33:49:0c:bb:36:1c:3e:98:51:11:ef:f3:d6:
14:37:51:c5:f2:3c:30:4e:26:93:1d:25:cb:88:d7:a8:42:a1:
ff:a1:b7:e2:32:57:77:82:1e:28:79:d9:38:3e:e3:c4:17:92:
06:04:9b:af:47:2e:71:a4:2b:45:f6:25:a7:68:d0:07:8a:42:
88:11:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:59:07 2025 by rpki-client