This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
File: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft (raw, json)
Hash identifier: erA/Mtw+6cwfSoltzAG2lNfzN7aHVGA0IKk+GfSMVM8=
Subject key identifier: 47:16:27:D5:33:E1:72:42:58:36:6B:FE:DA:93:D6:95:8F:CD:11:CC
Authority key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
Certificate issuer: /CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Certificate serial: 3A43A9A123EF5874B84AD8DE9D45A2197C8C2CD1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject info access: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
Manifest number: 0340
Signing time: Fri 19 Dec 2025 23:16:58 +0000
Manifest this update: Fri 19 Dec 2025 23:11:58 +0000
Manifest next update: Sun 21 Dec 2025 00:59:58 +0000
Files and hashes: 1: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: 8HJEKPfJsJ9cUBPI5dVpHTR/hYHRd/Hg9OtQORwVD/Q=)
2: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: mLr+uiC6lfZpqhMzaY1jB2Xz68LEez2gkuQCR+mbw+s=)
3: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl (hash: zkjqYsEpevrqaoE/OJSRvOP4W8K0w7+QJ3wZr7ADzlI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl
rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 00:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:43:a9:a1:23:ef:58:74:b8:4a:d8:de:9d:45:a2:19:7c:8c:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Validity
Not Before: Dec 19 23:11:58 2025 GMT
Not After : Dec 21 00:59:58 2025 GMT
Subject: CN=471627D533E1724258366BFEDA93D6958FCD11CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:e3:1d:6e:40:c1:cf:a5:da:ef:2c:fe:31:
b8:e7:9c:44:8e:73:c9:fe:1b:82:f2:6c:e1:25:40:
ba:a3:88:2e:56:31:32:20:48:d3:05:66:38:4b:0c:
16:0d:2c:67:9c:5d:f1:1b:60:e7:86:76:d2:6f:7d:
e2:66:65:43:85:8b:75:78:03:76:88:9e:08:47:17:
89:1c:cb:bf:ad:72:88:f4:e7:55:c3:23:ba:56:01:
8a:e5:cd:5e:eb:8f:4c:bd:04:83:a2:9e:ef:09:0d:
b0:36:43:bc:37:7e:79:5e:69:ef:64:60:f7:7b:67:
74:19:48:ce:02:c1:05:c2:ae:19:86:ef:e0:8c:c2:
7b:e3:f5:80:da:1e:a3:1a:a9:4f:f0:7f:4f:f4:87:
32:f0:21:eb:0b:17:76:ec:68:36:5e:a9:76:0a:9a:
47:d8:33:89:9a:98:64:ab:2f:1b:37:d5:df:bf:3f:
6e:9e:e1:d0:cc:68:eb:19:fc:9d:a8:1e:43:06:f8:
98:65:43:37:1d:51:4d:58:2a:e2:f2:14:99:6c:b2:
a5:64:59:17:d7:e3:09:88:d8:90:04:6b:09:57:d0:
51:21:8c:ef:cb:b8:8f:84:06:9a:67:2d:9a:45:a7:
95:55:19:80:86:a8:4b:49:ab:57:00:6a:46:d3:37:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:27:D5:33:E1:72:42:58:36:6B:FE:DA:93:D6:95:8F:CD:11:CC
X509v3 Authority Key Identifier:
keyid:2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:d6:b4:90:9e:44:91:5e:6a:e5:6f:10:02:2e:ca:f3:2c:
4b:3c:ca:ad:41:db:bd:08:59:80:31:28:64:33:a8:32:02:22:
0d:a5:03:1d:ec:a0:e7:3f:a2:df:dd:11:da:37:70:70:e0:a2:
05:ee:a6:79:96:fa:22:81:5b:18:65:f4:d5:13:9d:89:78:65:
9e:3e:4f:6e:94:7e:26:8f:94:2f:23:1b:24:ed:e6:63:da:a4:
c9:1b:d9:45:3b:de:36:f9:21:9e:33:9d:30:b4:9d:c1:cb:d6:
16:0a:5a:0a:52:b0:dc:0d:6f:d1:78:7f:78:67:05:4c:0e:b6:
c4:31:5e:da:84:61:ba:a9:33:4a:97:f6:0d:0a:88:db:bd:10:
5f:49:c4:a3:3d:a6:da:a7:f8:f6:76:00:9d:80:13:cc:a2:f4:
13:c1:89:b3:55:8c:3f:1e:07:28:b3:16:22:35:bc:66:f0:81:
d1:4a:95:a6:30:e8:2f:fb:9f:0c:c3:03:b4:82:a1:dd:44:f7:
3e:2f:bf:9f:5b:ca:06:fa:7f:93:93:a8:36:cc:8b:3c:22:1e:
68:06:f8:21:9e:35:68:20:91:ed:b1:9c:54:1a:a3:a6:f4:6f:
23:0b:90:46:c9:21:c9:68:a5:39:5c:71:18:01:bb:67:2a:5c:
4e:d0:ce:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOkOpoSPvWHS4StjenUWiGXyMLNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwNUFGMkZBM0JBQkVFQUVEQkVFMjYzQzI0RjdGQzFE
QUMzNkMxOTAeFw0yNTEyMTkyMzExNThaFw0yNTEyMjEwMDU5NThaMDMxMTAvBgNV
BAMTKDQ3MTYyN0Q1MzNFMTcyNDI1ODM2NkJGRURBOTNENjk1OEZDRDExQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf7eMdbkDBz6Xa7yz+MbjnnESO
c8n+G4LybOElQLqjiC5WMTIgSNMFZjhLDBYNLGecXfEbYOeGdtJvfeJmZUOFi3V4
A3aInghHF4kcy7+tcoj051XDI7pWAYrlzV7rj0y9BIOinu8JDbA2Q7w3fnleae9k
YPd7Z3QZSM4CwQXCrhmG7+CMwnvj9YDaHqMaqU/wf0/0hzLwIesLF3bsaDZeqXYK
mkfYM4mamGSrLxs31d+/P26e4dDMaOsZ/J2oHkMG+JhlQzcdUU1YKuLyFJlssqVk
WRfX4wmI2JAEawlX0FEhjO/LuI+EBppnLZpFp5VVGYCGqEtJq1cAakbTN+e5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURxYn1TPhckJYNmv+2pPWlY/NEcwwHwYDVR0j
BBgwFoAUKgWvL6O6vurtvuJjwk9/wdrDbBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNzRlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNx
MW0vMS8yQTA1QUYyRkEzQkFCRUVBRURCRUUyNjNDMjRGN0ZDMURBQzM2QzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDVBRjJGQTNCQUJFRUFF
REJFRTI2M0MyNEY3RkMxREFDMzZDMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzNzRlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNxMW0vMS8y
QTA1QUYyRkEzQkFCRUVBRURCRUUyNjNDMjRGN0ZDMURBQzM2QzE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANt7WtJCeRJFeauVvEAIuyvMsSzzKrUHbvQhZgDEoZDOoMgIiDaUDHeyg5z+i
390R2jdwcOCiBe6meZb6IoFbGGX01ROdiXhlnj5PbpR+Jo+ULyMbJO3mY9qkyRvZ
RTveNvkhnjOdMLSdwcvWFgpaClKw3A1v0Xh/eGcFTA62xDFe2oRhuqkzSpf2DQqI
270QX0nEoz2m2qf49nYAnYATzKL0E8GJs1WMPx4HKLMWIjW8ZvCB0UqVpjDoL/uf
DMMDtIKh3UT3Pi+/n1vKBvp/k5OoNsyLPCIeaAb4IZ41aCCR7bGcVBqjpvRvIwuQ
RskhyWilOVxxGAG7ZypcTtDOrA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:08:44 2025 by rpki-client