This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
File: D8683D560654AD562BAFEB400C4C97282B65EB8D.mft (raw, json)
Hash identifier: YecLMD80NvCafbjl4BoJIcjhKR8qhhza611ILT7bihY=
Subject key identifier: DB:08:D8:E3:28:6C:30:DB:58:13:DB:5C:2C:4E:72:9F:02:D6:80:A1
Authority key identifier: D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D
Certificate issuer: /CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
Certificate serial: 03A9AA23E3CF4C3C16D492C165C03EE853CA633A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
Manifest number: 034D
Signing time: Fri 26 Dec 2025 15:34:15 +0000
Manifest this update: Fri 26 Dec 2025 15:29:15 +0000
Manifest next update: Sat 27 Dec 2025 18:25:15 +0000
Files and hashes: 1: 323830343a376262383a3a2f33322d3438203d3e20323731343530.roa (hash: y4KnppT1mGj4RW0OtPChkXMD7Bd2MZRk12SVx2UDn+E=)
2: 3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa (hash: vbLfRY8132503Kg5fgBxwlCePnPcCsL+EQe8oJSr1vY=)
3: D8683D560654AD562BAFEB400C4C97282B65EB8D.crl (hash: MGRr50k8qQzp/hLke+p7pQsA6C3y0wNxi7f3ZPP/R1I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl
rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Dec 2025 18:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a9:aa:23:e3:cf:4c:3c:16:d4:92:c1:65:c0:3e:e8:53:ca:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
Validity
Not Before: Dec 26 15:29:15 2025 GMT
Not After : Dec 27 18:25:15 2025 GMT
Subject: CN=DB08D8E3286C30DB5813DB5C2C4E729F02D680A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:a4:76:2b:a5:87:11:26:8f:87:6c:e5:35:
bd:e6:e7:fd:30:7d:ae:7d:1d:0a:f0:e5:ff:cc:6f:
fb:d8:d4:db:08:b6:7c:72:bc:4d:07:41:b4:0d:1e:
1f:1e:f0:ba:b3:b2:d9:4a:43:1e:43:81:00:a9:e0:
f7:c9:ae:64:bf:bb:37:a4:36:f5:4c:09:5f:b9:a1:
33:9c:11:2e:af:f2:41:b9:4d:a4:70:2d:0b:75:02:
10:21:c4:d0:cd:91:eb:77:d4:83:7e:45:69:c8:89:
6a:76:e8:2b:e1:3e:60:bf:3f:cd:ea:a8:5f:7d:76:
58:ec:52:6e:be:31:e2:c4:18:74:d0:84:c5:4c:d2:
23:6c:69:16:30:8e:49:9f:00:7c:16:9e:86:2f:1c:
e8:39:6e:50:67:19:09:af:3d:3b:2e:aa:a0:38:33:
07:99:c9:6a:22:a1:8e:96:06:60:34:61:1d:49:09:
eb:2e:48:4c:62:0e:ae:0c:fb:3e:99:81:f3:9a:1c:
46:ef:fc:8f:f4:8b:f8:ff:96:26:7c:36:19:9a:43:
3b:93:24:44:6f:06:96:d7:16:d4:22:a5:0f:d8:03:
ef:69:86:d2:f6:0e:6f:44:4f:ac:31:d6:18:ae:3f:
ec:dc:8e:6a:93:4a:85:1c:ef:27:31:84:45:52:06:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:D8:E3:28:6C:30:DB:58:13:DB:5C:2C:4E:72:9F:02:D6:80:A1
X509v3 Authority Key Identifier:
keyid:D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e4:b5:6e:9d:39:01:e0:ea:9c:b0:cb:59:70:01:a7:51:81:
b2:bd:ee:6f:3c:4d:02:4e:0e:cc:6d:9b:e3:f9:6f:c9:0f:21:
c5:19:92:60:df:54:bc:f9:8e:f9:d7:af:68:19:fc:bf:01:7d:
d8:fb:19:d6:9a:9c:37:11:08:53:49:0f:66:cd:bc:fc:8f:2a:
86:49:56:92:53:f5:09:ad:fc:c5:7b:b8:a2:77:6e:e1:7e:6d:
3f:85:15:d0:4e:3f:b7:8d:81:b2:51:6d:f8:f9:b8:e0:6b:75:
69:04:c8:48:67:97:5d:18:5a:fc:81:a8:6e:96:bd:39:0b:48:
9a:7b:98:5b:1f:53:e3:b0:24:d0:1f:82:f9:cf:26:5d:4b:84:
42:4f:dd:39:77:99:90:7c:39:d7:8c:36:99:13:8a:31:f3:92:
19:19:e8:5b:b7:3d:f8:66:0f:9e:26:3c:10:68:13:20:f3:40:
ed:50:43:93:72:d6:14:f1:8e:53:78:3a:d3:d7:ad:45:51:2a:
9d:bf:c3:bb:c6:53:7a:6a:29:b0:da:23:e5:fc:8a:53:14:33:
44:13:68:d6:9a:f0:e2:c3:6b:27:d7:9b:9c:64:fb:d2:4f:60:
d3:da:c6:06:30:0b:2c:ca:98:54:c9:94:68:c2:54:fe:96:44:
48:f8:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:45:17 2025 by rpki-client