This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
File: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json)
Hash identifier: jw59WGOhmLDUj58WcQTE0xyZJhrZNhDfxG2VbgBYen4=
Subject key identifier: 54:5B:3E:D1:EE:77:45:3C:49:CB:52:0A:64:E5:21:97:F7:3C:AF:79
Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
Certificate issuer: /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Certificate serial: 2CF892E9C1C27DDC81D58879E0EFA7B758D1E0D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
Manifest number: 010B
Signing time: Fri 19 Dec 2025 22:38:15 +0000
Manifest this update: Fri 19 Dec 2025 22:33:15 +0000
Manifest next update: Sun 21 Dec 2025 01:16:15 +0000
Files and hashes: 1: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: 5eOCbjVWdqWe35tLbjTajlvD+Zu2qpI29dSWggCtL4U=)
2: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=)
3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 01:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f8:92:e9:c1:c2:7d:dc:81:d5:88:79:e0:ef:a7:b7:58:d1:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Validity
Not Before: Dec 19 22:33:15 2025 GMT
Not After : Dec 21 01:16:15 2025 GMT
Subject: CN=545B3ED1EE77453C49CB520A64E52197F73CAF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:d0:49:47:fa:73:c7:93:9f:68:ee:d8:b3:
a5:77:d1:7a:45:58:89:c0:9d:ac:75:7e:ec:d1:bf:
57:26:bf:b9:a2:84:fe:40:a9:ec:63:e0:c4:e0:e1:
45:7d:d4:f8:09:d5:27:31:3c:34:86:99:3a:a2:ce:
5f:18:37:c4:e4:69:e6:22:70:a2:6b:1e:df:db:1c:
cd:32:8f:bc:8e:78:48:ba:cd:47:89:4e:59:de:e5:
bb:08:85:1e:24:05:3b:8e:2b:d6:37:b0:35:96:14:
fc:c7:30:d5:73:88:27:cb:62:70:e8:a4:3c:8b:3f:
dd:00:39:22:c7:bd:39:e0:10:d0:d5:be:83:b5:ab:
de:39:10:f2:5c:10:65:60:0e:07:08:ac:00:d4:7f:
81:8b:38:3d:2a:49:bb:c2:2d:29:fd:d6:7c:42:75:
23:1b:d9:ad:d6:81:e4:3c:39:04:0f:bc:ba:47:e6:
0e:c5:c4:ca:7b:2e:89:46:8a:b9:48:7d:ca:ee:d3:
5f:48:f4:3a:90:8a:93:35:17:12:ea:69:f9:4a:74:
b8:60:4d:7a:09:34:3e:26:b9:4f:ae:d5:f0:4e:eb:
11:42:99:2e:ca:51:59:f1:90:d2:db:0a:cb:a2:ad:
a3:57:ae:16:d2:12:a4:dd:be:ee:99:b9:8d:07:31:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5B:3E:D1:EE:77:45:3C:49:CB:52:0A:64:E5:21:97:F7:3C:AF:79
X509v3 Authority Key Identifier:
keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b8:30:d8:66:34:1c:14:0f:47:94:33:ee:b7:5c:35:6f:ab:
cc:cd:76:36:96:08:a4:98:e9:94:61:f7:c7:00:97:24:cf:8b:
89:1a:a8:c8:3c:1a:5e:ca:cb:0a:4f:32:47:4e:35:5b:99:43:
30:8e:7d:03:90:c9:35:fc:cc:2b:b7:1f:0f:71:ba:d0:03:7e:
90:21:81:2c:db:be:6a:ce:28:d1:ab:16:d8:ae:be:00:46:ec:
39:7b:63:40:7d:74:fd:5d:50:5d:c9:20:fd:0f:a9:e8:1f:08:
0b:98:d9:87:ca:97:a8:68:47:fe:62:0c:b7:65:d3:81:02:8e:
a8:a7:e7:a1:c6:a5:ea:09:0e:fc:69:26:90:d0:ec:af:fe:f0:
1a:07:cf:b5:64:19:29:cc:d8:ad:32:48:5d:fd:14:a2:54:e1:
e9:bc:37:8b:21:44:bc:06:62:75:62:46:8d:ce:61:72:61:bc:
58:48:09:0a:1a:84:5b:cf:af:5d:5b:52:12:45:23:20:55:58:
37:98:47:cb:0d:cb:71:72:7a:fd:1c:53:4a:c3:60:4f:00:3d:
a1:3e:8c:ca:c6:36:34:7f:d1:da:79:f5:8e:07:4d:b3:9f:67:
d9:61:c3:fc:70:05:a6:c6:c7:b5:64:a6:4d:a0:28:af:0f:e6:
52:ed:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:58:08 2025 by rpki-client