This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft
File: D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft (raw, json)
Hash identifier: LlwVEeMdhfVzw3VPONBXzzUa6slu7tULQrLX3Rp7Vv4=
Subject key identifier: 14:C0:24:44:70:D6:82:73:AC:8A:6E:D9:23:91:E6:E8:B9:6E:D7:DA
Authority key identifier: D8:1F:02:E2:B6:85:54:1F:B8:BD:2F:B5:B6:52:E0:C2:BF:DB:02:0F
Certificate issuer: /CN=D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F
Certificate serial: 143C20B1333033CAB1BC92E094AD6C5B02936BE0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft
Manifest number: 09
Signing time: Sat 20 Dec 2025 03:27:48 +0000
Manifest this update: Sat 20 Dec 2025 03:22:48 +0000
Manifest next update: Sun 21 Dec 2025 06:32:48 +0000
Files and hashes: 1: 3133312e3232312e3139322e302f32322d3234203d3e20323634343432.roa (hash: 0RG5eiUjfUxVLETFSggQekCXyT+fcEtZJLCsA8stW70=)
2: 323830343a316561383a3a2f33322d3438203d3e20323634343432.roa (hash: z2qms52zuyfQPu19OeufE5QSvcoZ8pGx3X0LBRap/24=)
3: D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl (hash: SwmJ0ZIV0p398bjeoNjQeDcZPfzj+yyxRX2nGDg1hVk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl
rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 06:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3c:20:b1:33:30:33:ca:b1:bc:92:e0:94:ad:6c:5b:02:93:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F
Validity
Not Before: Dec 20 03:22:48 2025 GMT
Not After : Dec 21 06:32:48 2025 GMT
Subject: CN=14C0244470D68273AC8A6ED92391E6E8B96ED7DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:24:95:9f:7d:63:7f:c0:27:ee:07:5e:bf:
1a:06:f5:7d:04:da:d0:d4:cf:ef:79:5c:67:41:99:
be:87:28:76:f5:35:15:c4:7b:b9:77:77:4e:d4:a0:
2f:60:dc:3b:c8:af:f1:dc:02:e3:de:08:44:6c:9e:
16:0e:81:cd:6f:ef:53:1b:12:b1:fb:16:8f:99:bc:
d9:b0:a6:63:02:b6:ff:85:4b:09:c2:b6:c7:11:a6:
76:13:9a:a5:21:f8:43:6d:23:54:b7:3e:e3:d7:8c:
b0:d4:0c:8a:18:a0:08:f9:29:08:93:61:35:82:35:
13:0d:60:c3:e8:c7:8a:e2:7d:69:ce:89:d3:95:cd:
a0:f1:92:17:2b:70:16:38:34:7b:92:70:21:75:59:
6e:fb:2e:c6:c5:1c:00:e6:1b:48:1c:d6:0c:ab:93:
08:70:d8:15:03:90:3c:44:06:f0:45:a2:3b:d8:0b:
36:fc:03:ea:8a:cd:32:4e:4f:a8:d7:a9:16:c3:d8:
9a:eb:62:63:bc:7a:be:26:58:62:64:0c:1b:ab:2e:
86:7e:f8:23:12:38:80:a3:67:33:65:36:3d:e0:52:
5e:69:3e:99:29:2c:e9:ca:8e:76:1e:3b:35:a8:0d:
e8:c1:2c:53:f3:87:ed:8e:f4:88:d6:62:34:f9:a0:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:24:44:70:D6:82:73:AC:8A:6E:D9:23:91:E6:E8:B9:6E:D7:DA
X509v3 Authority Key Identifier:
keyid:D8:1F:02:E2:B6:85:54:1F:B8:BD:2F:B5:B6:52:E0:C2:BF:DB:02:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4f:cb:08:47:68:5c:28:59:34:4e:f0:d4:8b:80:da:f7:31:
75:2d:bf:ee:42:0e:aa:9b:fe:ff:54:f6:07:47:0f:f6:7f:3e:
12:a5:d7:04:34:a5:a0:4a:33:ef:04:ac:5a:25:a5:3d:e9:c4:
b4:99:84:2a:a4:9e:ff:2e:f2:ce:b1:60:f9:04:e4:6c:20:85:
19:dc:74:0b:a7:4c:f3:86:ac:fe:eb:48:a6:85:de:12:8a:b1:
48:91:1c:a1:fa:1a:03:95:ae:9f:3c:4e:95:73:07:58:ea:31:
ac:f2:90:c3:03:e5:b8:8b:37:13:1c:b3:a6:c9:37:88:c4:17:
5f:6f:8c:44:a3:d5:84:be:30:51:d4:8d:ae:a3:fb:48:a6:98:
94:0e:f5:44:92:a9:c0:2d:0f:f7:52:66:e5:52:fd:c8:0c:d4:
42:2f:06:f6:fb:f9:c9:a4:5c:60:2a:13:6a:e7:fb:b2:76:49:
2d:0c:39:41:66:d3:bb:c0:30:af:62:69:2c:fa:64:b0:e7:8b:
d2:66:da:e1:60:62:aa:1d:fa:b2:7c:12:7d:f8:43:9e:6a:24:
b5:9d:1f:1b:da:9d:64:f4:6c:d9:f6:b7:6b:70:48:90:27:09:
c0:d0:c0:90:79:ab:41:c5:bf:19:ae:c2:b9:30:8e:c2:63:44:
d0:ff:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:43:31 2025 by rpki-client