This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
File: CF357620357B25129A68E7D55D716CED7E4E1516.mft (raw, json)
Hash identifier: vlvkg7ucjo8a9phk/7AyzOGNPko8eTi3h3iPm58k1Ss=
Subject key identifier: DB:65:E2:98:C9:32:9F:F4:5F:C9:72:9B:E2:F5:3A:E0:10:73:62:C0
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Certificate issuer: /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial: 474B8783D2B2E4953261431A00B254947523CB4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
Manifest number: 022A
Signing time: Thu 25 Dec 2025 11:08:16 +0000
Manifest this update: Thu 25 Dec 2025 11:03:16 +0000
Manifest next update: Fri 26 Dec 2025 12:51:16 +0000
Files and hashes: 1: CF357620357B25129A68E7D55D716CED7E4E1516.crl (hash: prhNA3PjevJbyMNO0EQEapBmjnLRKtzL4TZUabZstxc=)
2: 323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (hash: lU6VrvpBYvmFhj9XMV8wCL1iuM4M5kJ+oQfWSvxRzlc=)
3: 3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (hash: FrtYQgGX76cnE7uQafuRYboGA917Ay3diGxJLT0XKGM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 12:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4b:87:83:d2:b2:e4:95:32:61:43:1a:00:b2:54:94:75:23:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
Validity
Not Before: Dec 25 11:03:16 2025 GMT
Not After : Dec 26 12:51:16 2025 GMT
Subject: CN=DB65E298C9329FF45FC9729BE2F53AE0107362C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:01:16:53:11:6e:be:3e:6d:ee:af:1a:9c:
72:cc:51:d4:31:18:e7:2e:95:b4:d4:38:a7:e7:f8:
75:b5:e9:19:df:2f:de:9f:41:df:c3:80:c5:dd:3b:
51:ab:91:18:6b:38:00:fd:01:f7:bb:b5:64:11:fe:
13:b4:93:9a:87:5b:95:ae:59:f2:15:9d:fc:ee:ba:
2f:47:a6:7c:95:3f:1f:cb:c0:39:08:bc:75:cb:02:
4a:06:7b:ab:98:1c:5e:d4:03:e4:5e:ab:03:8b:2f:
c3:63:8d:77:b4:48:5b:2e:fe:a6:0e:98:2a:05:55:
14:bb:45:ff:ba:fe:12:7e:01:90:39:0e:5f:45:71:
6a:69:97:c1:d4:6d:9e:9b:a7:a3:81:9f:f6:c2:26:
e2:c7:22:6d:dc:51:97:c1:19:be:78:1f:10:b2:28:
5c:10:4b:0e:3b:5d:92:46:02:49:dd:ec:2c:33:d5:
ef:eb:75:12:e3:f9:4f:76:8e:f1:5d:be:2b:1b:4b:
1e:2c:f2:e4:46:bf:e5:da:a4:6b:f2:bf:e3:37:75:
26:58:1a:f5:b0:9d:f4:02:84:ff:8d:82:75:f6:28:
57:8c:ff:ee:9b:c4:e4:ec:7b:fa:1b:f2:0f:35:f8:
0f:5f:db:80:09:54:dd:29:50:7f:bc:0b:ec:df:6b:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:E2:98:C9:32:9F:F4:5F:C9:72:9B:E2:F5:3A:E0:10:73:62:C0
X509v3 Authority Key Identifier:
keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:f8:75:b2:98:cd:43:d7:86:f0:0f:48:cf:a8:89:f1:87:
f1:fc:25:8d:25:38:5d:d8:99:a5:fa:05:ad:a5:59:2d:9b:08:
d8:57:4e:34:be:5a:09:94:d9:34:ab:7f:d2:b1:16:9f:2f:da:
f1:88:0e:2e:ad:55:60:bb:7a:73:a1:16:76:02:14:17:8d:51:
c8:f6:cd:a1:94:07:71:31:03:6f:5c:aa:ce:df:86:d6:6c:12:
ba:e0:d6:a0:5c:67:73:28:1f:f2:6e:a1:9e:82:38:3d:ee:89:
25:ff:ed:56:d5:cc:39:99:bd:94:2c:e2:5f:8c:3f:28:78:c6:
39:e3:c0:72:5d:ea:b3:1d:f5:d3:8e:90:ad:4f:ae:86:b2:9e:
c0:62:a7:30:25:5e:82:64:fd:56:ca:6a:12:d6:dd:ca:1e:0a:
e1:24:fa:b5:bf:c5:da:0f:38:b3:ef:97:0d:13:e7:ac:42:d1:
11:16:18:3b:29:ec:80:6f:89:50:42:f6:90:16:f8:7f:04:be:
9b:59:4e:2b:34:e7:cf:63:90:29:50:48:20:03:6e:5b:6d:ec:
04:59:fa:96:dd:6b:1d:6b:32:8b:bd:59:1a:55:ac:3d:4e:df:
48:22:90:ec:76:74:c1:4a:0c:a8:06:2e:39:7b:5c:93:d4:dc:
04:ed:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 16:10:14 2025 by rpki-client