This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
File: 2C9FA99864590E029577FEA8F4939F2B71325AE2.mft (raw, json)
Hash identifier: 2J/Vc69zT5j+7Myv5x7FE9FNHnFNDYI8tiUr03cH0vE=
Subject key identifier: 96:BB:73:9D:19:C0:04:A1:61:39:50:FD:0E:B6:89:E6:1C:D3:25:00
Authority key identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
Certificate issuer: /CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
Certificate serial: 0CC022D4E4AEE9933660596287D1678CE7358E4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
Manifest number: DD
Signing time: Sat 20 Dec 2025 02:50:12 +0000
Manifest this update: Sat 20 Dec 2025 02:45:12 +0000
Manifest next update: Sun 21 Dec 2025 03:03:12 +0000
Files and hashes: 1: 2C9FA99864590E029577FEA8F4939F2B71325AE2.crl (hash: NvBBZXAiHTjuOFwZucbxbvCwg/KEfXGyGRgL2QOq7F0=)
2: 323830343a316465303a3a2f33322d313238203d3e20323634343030.roa (hash: oX/RKylP4Nd8+kRf1CuAlqfjhQMDsNU+KfOIwew2RRA=)
3: 3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa (hash: Z+33HVjqzXyw6GWg6a+7Vv2QcTqWiKp5v0VHm16gQXs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl
rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 03:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c0:22:d4:e4:ae:e9:93:36:60:59:62:87:d1:67:8c:e7:35:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2
Validity
Not Before: Dec 20 02:45:12 2025 GMT
Not After : Dec 21 03:03:12 2025 GMT
Subject: CN=96BB739D19C004A1613950FD0EB689E61CD32500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:bd:1b:82:6f:e5:69:c6:1d:03:ad:23:3d:
70:6b:85:57:c5:be:9c:91:37:e0:ed:cb:d7:ac:a4:
77:e8:53:aa:fb:f7:40:67:ae:b6:f9:7d:e2:c6:62:
47:94:af:d6:80:c6:ca:41:4a:be:9c:00:bc:07:08:
98:7c:14:3f:58:c7:db:fe:a0:ba:59:fe:69:5b:6e:
ac:88:86:7e:96:9f:b9:09:12:48:26:38:62:0b:d0:
4d:49:23:fa:cc:36:6e:52:40:00:cb:21:80:92:26:
cb:6f:27:7c:55:4e:67:1f:4f:96:15:65:3f:09:d1:
5c:9a:82:c3:25:c0:7c:8a:3c:3a:56:72:7d:5f:f4:
68:7a:85:f9:bc:10:27:71:76:fa:b6:2f:01:15:f5:
5a:2f:96:a5:5f:17:e1:b1:d4:71:06:42:c7:bd:1f:
8f:65:23:e3:bf:7a:80:47:00:5f:3b:a6:dc:1d:d7:
e0:dc:b9:25:27:e1:41:12:b6:1e:48:62:29:f1:b8:
62:c6:d0:3a:a8:58:3e:ab:db:35:6d:ed:b0:bb:b4:
db:16:49:7b:b7:a9:09:ce:f5:15:80:0a:a0:a6:fb:
f9:e3:1c:a3:09:0e:33:52:2a:9f:da:a8:a7:ca:32:
ef:09:21:7a:2a:01:2b:7b:50:15:db:b3:b2:9d:dc:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:73:9D:19:C0:04:A1:61:39:50:FD:0E:B6:89:E6:1C:D3:25:00
X509v3 Authority Key Identifier:
keyid:2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:32:e0:1c:3d:52:76:3e:cb:33:5b:c6:4f:aa:f0:35:bf:
42:7a:3f:f1:68:92:19:f3:d6:07:46:21:07:ea:f7:b1:f4:98:
0b:34:5a:bc:56:59:57:1d:7e:ba:31:9d:1b:8b:a4:4c:87:6e:
c6:63:a7:d2:7d:c0:58:66:91:32:6c:4c:c0:bd:14:1c:2d:aa:
26:20:d7:1c:29:7a:72:2d:e5:f8:15:f5:f2:76:cc:ee:96:35:
11:bd:5a:50:a8:80:b7:3d:12:1f:04:15:e8:90:0c:5c:78:21:
c0:89:07:4b:0f:79:fa:93:47:79:df:d7:4a:a1:23:0c:82:66:
64:bf:fa:fa:b6:f8:37:57:66:a3:bc:75:67:4b:f7:45:d0:98:
e2:4c:6e:2c:ec:2e:98:33:d1:55:bd:b7:84:fc:af:3c:b7:aa:
ae:8b:e8:ec:72:e3:76:63:86:8d:45:d8:1c:0c:29:8e:6c:eb:
0f:a1:c6:60:ab:e4:34:c0:0f:2c:42:84:68:3b:83:31:24:44:
5a:fb:2a:bd:a9:85:53:af:75:56:92:a0:4b:3d:f7:cf:a6:0d:
f9:b4:c7:a0:22:0c:c1:ec:86:f9:36:a5:4a:a5:93:9c:99:78:
28:54:26:ce:64:e5:91:49:76:16:ac:91:9e:d6:5e:3d:f6:de:
12:e0:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:16:24 2025 by rpki-client