This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
File: B20E3C8281FB009A48EDFE56131C930D739F11C4.mft (raw, json)
Hash identifier: UQeRsb3TSKaRz9nCyTefW+5rusQjYz20Q8Z9eE7EkXE=
Subject key identifier: B7:DD:6B:CB:41:6F:68:14:A8:B2:A7:EF:DE:3B:2E:A3:A3:92:19:1D
Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Certificate issuer: /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Certificate serial: 3C4AB9AEB4A16C5454A8C26C62203FCFA3A0E06A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
Manifest number: 030F
Signing time: Wed 24 Dec 2025 08:55:50 +0000
Manifest this update: Wed 24 Dec 2025 08:50:50 +0000
Manifest next update: Thu 25 Dec 2025 12:51:50 +0000
Files and hashes: 1: 323830343a323861343a3a2f33322d3334203d3e20323633393732.roa (hash: ahxK+WMTsV39KQhAViLFQ4numR+SobUNh2vqNKZYm0M=)
2: 3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (hash: gdg4CkiWZlxLCSS9uiJZl16iA1AfnTQyxIxntLHmqDo=)
3: B20E3C8281FB009A48EDFE56131C930D739F11C4.crl (hash: 3ldX4KjEpp4FUzDYjbbVocn2A5wY1TymE3OZJChMVF4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 12:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4a:b9:ae:b4:a1:6c:54:54:a8:c2:6c:62:20:3f:cf:a3:a0:e0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Validity
Not Before: Dec 24 08:50:50 2025 GMT
Not After : Dec 25 12:51:50 2025 GMT
Subject: CN=B7DD6BCB416F6814A8B2A7EFDE3B2EA3A392191D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:b4:4f:61:38:b4:cd:28:e4:40:f1:d2:26:
65:95:80:45:f8:3c:42:fb:e2:14:5a:42:b7:e7:2e:
00:25:24:27:2a:90:3a:88:41:47:32:de:66:24:af:
35:ad:cd:f5:37:ec:3a:8d:93:37:e2:3b:a6:ce:a3:
f8:2e:33:ad:00:13:ac:28:d4:d0:d6:14:35:c4:e2:
d8:31:76:f9:a8:f5:f9:21:e7:c8:f1:76:8a:d9:63:
d6:66:23:46:85:ba:98:95:f8:4d:45:24:8d:9d:a6:
8b:8e:c7:e8:7e:08:f3:6e:b5:10:26:b3:2e:9a:76:
c6:de:ed:a6:5d:38:76:ed:4c:c4:4e:f7:e4:c7:d4:
73:06:73:63:0f:75:fb:01:0e:4e:60:2b:c9:1c:0e:
ca:67:71:33:0e:28:4c:45:4e:db:a8:70:8e:37:4a:
46:a8:0b:43:b7:38:83:db:ad:d8:d6:62:5d:3c:90:
c4:2e:1e:8a:3d:02:d7:d2:7a:85:74:2c:a5:a9:7a:
4b:83:ef:01:b5:d4:d5:9a:99:a2:ac:dc:7c:11:7f:
79:10:69:7a:77:d2:39:d0:d4:d7:a3:49:60:31:e2:
c9:f6:59:18:fe:6f:6e:d3:55:9f:2c:05:9b:af:7b:
22:12:f3:d9:72:dd:66:8d:32:51:1d:4b:e3:92:6f:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:6B:CB:41:6F:68:14:A8:B2:A7:EF:DE:3B:2E:A3:A3:92:19:1D
X509v3 Authority Key Identifier:
keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:30:26:15:db:ac:3e:a8:29:e4:df:ad:c9:73:90:9f:38:
49:1b:bd:f6:9b:18:cd:e7:56:32:53:6f:7c:55:5d:81:a3:4d:
4f:14:6b:bb:90:52:ce:54:e3:38:8d:b2:f4:58:18:8b:4e:6c:
85:3b:9a:93:de:b5:1e:b6:1f:6f:21:ea:13:d4:a7:7a:78:de:
34:e2:32:76:a2:a8:ef:ba:1b:6b:fe:ca:25:68:e4:5f:4a:33:
15:57:c6:f9:b4:65:4f:50:ce:fc:a7:55:90:44:a0:f6:17:8b:
53:c0:8f:70:e7:67:cc:9a:72:a2:39:ce:fd:cc:35:cd:4b:8a:
fb:aa:9c:6a:4c:92:40:fb:bf:9f:3b:96:9e:b7:30:8e:cf:52:
88:6b:27:25:43:77:38:b7:be:6d:04:4a:30:da:df:6e:a5:21:
3f:d8:82:42:5b:c0:26:68:7b:f3:2e:b9:ee:05:fc:1e:17:f4:
38:69:1b:ce:9a:f7:68:f2:a0:31:ee:44:c5:a7:34:9e:20:68:
87:c2:7b:ca:5c:91:11:17:2c:08:b0:66:32:bf:01:8d:18:e1:
8d:3a:b7:09:99:a5:14:2e:44:2e:56:a4:fe:71:16:d1:a1:f3:
1f:4f:27:7c:20:ee:ff:35:8c:88:43:d5:cd:c1:44:db:ed:6c:
13:b7:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:14:42 2025 by rpki-client