This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File: D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier: 0eVjjO7H5sQdbmYwb5v6UXsfz94A8Mvr0xxv7MPYc74=
Subject key identifier: 4B:23:B0:AC:4E:D6:2D:84:DD:0B:8F:CC:A4:F4:26:2C:7D:95:D6:70
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer: /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial: 5874162BFB6446BCBA7DC62E5C365D852446E227
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number: 014D
Signing time: Sat 20 Dec 2025 00:05:09 +0000
Manifest this update: Sat 20 Dec 2025 00:00:09 +0000
Manifest next update: Sun 21 Dec 2025 01:19:09 +0000
Files and hashes: 1: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: nbN4ukyce754UAe7rihr7N/UFNah0kB8NkqYIQh4yFQ=)
2: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: rskIrxxYUExi7PHLwav+dE62vtLiBrj7a6GYBNV+wTI=)
3: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: 4PiSTqZZPTrj0hyC2aboHpZdjYLrsKq7MobsBJAoq3o=)
4: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: IInVxv3kcMa5vG/U4cTD9sr87/Sbsyr6ChFNUDZQdGI=)
5: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: 7qbfjGwinlfawR0X//sZeHGiCnVc4qfkZRjUARdD6XY=)
6: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: Ck0jPPfwVnJ7yIjXh5w3w6LjDjZUSDneN0x/3hVn1AI=)
7: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: 1lj+3sFMNB4egkilmG1GQjAutsJHZiknJoxF8YP/VHY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:74:16:2b:fb:64:46:bc:ba:7d:c6:2e:5c:36:5d:85:24:46:e2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Validity
Not Before: Dec 20 00:00:09 2025 GMT
Not After : Dec 21 01:19:09 2025 GMT
Subject: CN=4B23B0AC4ED62D84DD0B8FCCA4F4262C7D95D670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:c4:37:b3:31:fa:ed:2a:30:f0:ab:f0:c4:
77:fe:0d:00:3a:75:48:fc:8b:d2:26:b7:97:25:b4:
46:c6:a7:d0:5c:1c:87:74:8d:50:ea:22:47:e2:fb:
63:0b:1d:be:cf:8c:ae:a5:33:b6:c8:f8:df:33:c0:
5b:8c:0e:0c:fa:93:4a:cb:04:74:97:53:b1:bf:56:
20:1d:f2:be:c3:e7:b6:61:07:46:f4:78:e8:21:6f:
5e:0b:66:57:67:41:78:ed:7b:9d:22:08:82:d3:f3:
7b:0d:95:fc:78:36:12:cb:58:0c:cd:af:dd:43:c2:
a2:c1:ec:4b:d3:3f:60:3a:98:07:21:46:85:4d:57:
dd:6f:eb:1d:53:b6:20:2c:a2:a2:67:57:e8:b6:1a:
41:96:a0:9e:98:9d:87:c6:0c:b8:b3:71:1b:78:01:
8a:f3:31:c7:59:3d:99:3f:cf:0b:a9:3a:e2:59:57:
83:b1:96:26:0f:e6:25:cf:ed:e0:16:96:3e:f1:f4:
2d:b4:8f:2a:84:b6:56:60:ab:fd:72:81:dd:ff:b0:
75:4d:08:4b:0e:cc:00:9b:00:89:64:eb:61:0f:17:
e4:40:7a:b5:f2:e0:58:57:d0:92:e9:83:c5:bd:8e:
32:50:8c:90:f7:be:fc:12:3d:f7:f8:5a:3c:ee:76:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:23:B0:AC:4E:D6:2D:84:DD:0B:8F:CC:A4:F4:26:2C:7D:95:D6:70
X509v3 Authority Key Identifier:
keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:2e:a1:47:46:7b:8a:19:36:e1:11:ea:96:ba:b5:f3:6b:
47:3e:b4:15:57:f6:50:f0:a1:57:24:91:d9:0e:b9:60:6c:71:
ae:c4:f5:ef:b7:f3:7b:35:c5:b0:c8:ff:4d:41:4a:b4:9b:76:
4e:56:ce:d9:3a:53:9b:1b:9f:c3:3b:6f:f4:7c:55:1b:af:d9:
a6:e7:7c:ad:f3:3a:f5:b5:94:06:d4:89:8d:e9:f2:ef:0d:9d:
a6:b4:93:80:5a:99:b2:6d:01:dd:a6:a8:08:6b:24:cc:da:0f:
68:c0:e4:2c:dc:f2:60:c3:d5:78:95:54:09:99:2e:84:e1:c7:
9c:1f:55:6c:95:b9:e2:3f:18:62:3b:a7:80:6d:e2:1b:78:04:
3a:45:b0:ce:17:d2:5e:b6:4c:6c:56:18:86:25:84:56:61:2b:
35:f4:c5:90:40:42:cd:40:c0:00:c3:19:84:13:ee:60:3b:86:
f3:29:ed:b5:fb:13:83:20:79:66:6f:b8:61:ae:c5:7c:31:0d:
d2:0d:5f:ec:f1:90:90:96:5f:84:37:1f:da:11:b1:5f:fa:80:
bb:4e:1c:64:f9:94:2b:fc:2b:b4:77:05:4b:c6:59:a5:87:9a:
69:87:16:a2:61:76:26:ec:54:88:be:1c:e5:ce:1e:8c:91:b0:
52:e9:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:31:09 2025 by rpki-client