This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
File: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft (raw, json)
Hash identifier: ouy5xJerobO8v06a49NcV3+cGOXhiAy1s3M6xyJ1VkA=
Subject key identifier: 00:B7:D8:6A:0E:1C:F8:85:E0:E9:68:00:C8:F3:83:8C:A2:0D:66:17
Authority key identifier: CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
Certificate issuer: /CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Certificate serial: 7CC67F14AD00759559012960AA026A199A185BC3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
Manifest number: 0C
Signing time: Fri 19 Dec 2025 15:39:24 +0000
Manifest this update: Fri 19 Dec 2025 15:34:24 +0000
Manifest next update: Sat 20 Dec 2025 15:53:24 +0000
Files and hashes: 1: 323830343a373034303a3a2f33322d313238203d3e20323730373135.roa (hash: sNgEF06hBcueOscjyGonLqPiAr/nqxGOmW+2KVDrBsY=)
2: 3138392e3132372e3138302e302f32322d3234203d3e20323730373135.roa (hash: RhjZm2uSbdJQigxky7M1jCcFaL9XEEChqLcnVSTm+sM=)
3: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl (hash: JYpgH5Cs3Q0BnK1+szSp1rOyt+kpUvpjSD+/DCXTFZ4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 15:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c6:7f:14:ad:00:75:95:59:01:29:60:aa:02:6a:19:9a:18:5b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Validity
Not Before: Dec 19 15:34:24 2025 GMT
Not After : Dec 20 15:53:24 2025 GMT
Subject: CN=00B7D86A0E1CF885E0E96800C8F3838CA20D6617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:06:99:2f:2f:df:f1:df:9b:28:21:bb:1d:
26:5e:37:c6:94:9c:d2:97:18:87:da:81:7f:4d:45:
d7:14:4b:d4:7e:dc:d9:ec:dd:33:6c:ca:66:d1:9d:
a2:c0:c9:56:61:3b:5a:8f:c3:cf:5f:af:69:29:23:
e0:07:06:cc:7b:cb:ab:37:d9:07:3a:c5:d0:49:2c:
16:3f:0c:b9:9b:9e:c7:c8:23:bb:84:15:01:c4:aa:
b9:5e:72:94:b9:5a:ca:b5:61:a3:00:36:68:ea:66:
74:65:f5:c4:ed:32:14:73:ac:f9:f1:c7:11:91:31:
39:b3:dd:10:da:d6:66:a0:fb:45:7e:45:52:0c:1b:
aa:0d:ff:61:bb:83:4e:bc:24:29:01:ea:ee:37:9d:
1f:5b:cb:38:cd:16:27:27:7f:10:0e:d0:4c:95:27:
4d:21:bc:4d:8f:c9:0c:3b:31:34:4a:51:53:42:45:
0b:f5:ce:9f:7b:37:80:36:31:26:df:b3:7c:24:66:
fa:50:7c:97:2e:bb:6e:b5:23:a5:8e:8c:97:78:d3:
fe:05:44:3c:4b:71:7a:82:29:4a:30:d6:3a:22:75:
b6:8a:72:3c:8e:6c:56:5f:3f:f2:9e:ce:66:ee:26:
62:85:a5:6b:ca:7e:b9:9e:ce:ce:90:92:e4:f1:bb:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:D8:6A:0E:1C:F8:85:E0:E9:68:00:C8:F3:83:8C:A2:0D:66:17
X509v3 Authority Key Identifier:
keyid:CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a8:ef:25:a0:01:7d:95:71:11:2f:21:67:f5:d8:94:7b:90:
af:e7:59:38:91:b1:69:85:7a:08:91:c3:0b:42:88:3d:d7:67:
9a:c5:5d:ed:67:f7:71:98:ce:2e:f3:73:f8:73:b9:b7:d7:4a:
6b:2c:ba:92:3f:9f:85:ea:c5:dc:5e:f3:d3:97:d3:83:f1:22:
10:a5:29:6b:21:ac:34:79:a9:03:9e:e1:f8:5b:dd:d5:88:0f:
b9:03:fc:ac:3d:5e:63:6f:db:3c:6e:4a:00:d5:ab:52:3c:e7:
2d:c2:b3:65:e9:00:19:67:82:d4:c8:4a:fc:3a:80:1f:ae:d1:
73:d9:ce:e6:52:ff:28:da:08:50:3a:b6:1f:a9:c1:73:77:e9:
ae:c7:e8:d8:d6:91:ae:13:d4:26:5d:10:e3:c6:6d:ab:0c:8d:
71:04:af:4e:cc:1c:0d:aa:c3:45:d2:49:3d:e5:aa:08:0e:d1:
32:89:ec:bf:00:24:4e:26:ec:4b:a1:2f:f8:06:f1:76:d7:e0:
44:ff:dc:de:bc:6d:99:df:58:79:52:69:50:ee:27:fa:bd:67:
4c:83:35:06:be:01:37:b6:7e:5f:df:21:4c:cb:30:ce:d6:d9:
ea:99:4d:be:be:12:e0:0a:ba:58:a0:b4:37:f2:b0:f3:93:54:
27:1e:cf:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfMZ/FK0AdZVZASlgqgJqGZoYW8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QwMjBCQTVGNDA0QkNEOEQ5Qzk0ODlEMzM0NjVBMjUx
REU1RDcyQTAeFw0yNTEyMTkxNTM0MjRaFw0yNTEyMjAxNTUzMjRaMDMxMTAvBgNV
BAMTKDAwQjdEODZBMEUxQ0Y4ODVFMEU5NjgwMEM4RjM4MzhDQTIwRDY2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcAaZLy/f8d+bKCG7HSZeN8aU
nNKXGIfagX9NRdcUS9R+3Nns3TNsymbRnaLAyVZhO1qPw89fr2kpI+AHBsx7y6s3
2Qc6xdBJLBY/DLmbnsfII7uEFQHEqrlecpS5Wsq1YaMANmjqZnRl9cTtMhRzrPnx
xxGRMTmz3RDa1mag+0V+RVIMG6oN/2G7g068JCkB6u43nR9byzjNFicnfxAO0EyV
J00hvE2PyQw7MTRKUVNCRQv1zp97N4A2MSbfs3wkZvpQfJcuu261I6WOjJd40/4F
RDxLcXqCKUow1joidbaKcjyObFZfP/KezmbuJmKFpWvKfrmezs6QkuTxux8dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUALfYag4c+IXg6WgAyPODjKINZhcwHwYDVR0j
BBgwFoAUzQILpfQEvNjZyUidM0ZaJR3l1yowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXE4VjFacUZSaGFEYWVxRlFzSFE5RmpCTGpRczdqTEUxTWlTeWtiN1Br
S1QvMC9DRDAyMEJBNUY0MDRCQ0Q4RDlDOTQ4OUQzMzQ2NUEyNTFERTVENzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMDIwQkE1RjQwNEJDRDhE
OUM5NDg5RDMzNDY1QTI1MURFNUQ3MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXE4VjFacUZSaGFEYWVxRlFzSFE5RmpCTGpRczdqTEUxTWlTeWtiN1BrS1QvMC9D
RDAyMEJBNUY0MDRCQ0Q4RDlDOTQ4OUQzMzQ2NUEyNTFERTVENzJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeKjvJaABfZVxES8hZ/XYlHuQr+dZOJGxaYV6CJHDC0KIPddnmsVd7Wf3cZjO
LvNz+HO5t9dKayy6kj+fherF3F7z05fTg/EiEKUpayGsNHmpA57h+Fvd1YgPuQP8
rD1eY2/bPG5KANWrUjznLcKzZekAGWeC1MhK/DqAH67Rc9nO5lL/KNoIUDq2H6nB
c3fprsfo2NaRrhPUJl0Q48ZtqwyNcQSvTswcDarDRdJJPeWqCA7RMonsvwAkTibs
S6Ev+AbxdtfgRP/c3rxtmd9YeVJpUO4n+r1nTIM1Br4BN7Z+X98hTMswztbZ6plN
vr4S4Aq6WKC0N/Kw85NUJx7PQg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:41 2025 by rpki-client