This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
File: 5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft (raw, json)
Hash identifier: OEx77qMygXkxIbIe7JnfAecW1Sh3IXhrDnBGZa0Lk6U=
Subject key identifier: 09:E9:19:34:89:E0:55:BD:D7:9B:60:EF:0C:35:39:19:9C:BE:3D:D0
Authority key identifier: 5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
Certificate issuer: /CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
Certificate serial: 12B4B26052A37553443BDCA600E50A86CE41940A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
Manifest number: 28
Signing time: Sat 20 Dec 2025 00:38:55 +0000
Manifest this update: Sat 20 Dec 2025 00:33:55 +0000
Manifest next update: Sun 21 Dec 2025 02:05:55 +0000
Files and hashes: 1: 5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl (hash: p6D/srlMmLhISF1no42UWcvhYtnZimEGq2F6YqQNT4A=)
2: 323830343a376665383a3a2f33322d313238203d3e20323731373137.roa (hash: Bv77NXlYV2GAtcFs447Ky4DHSoBoCbEz0IKK3RiBW+Y=)
3: 34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa (hash: CjoqMsbzM1Hru4SLzSDKeuKS3sgxoGCHcCMd1Aw3lUI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl
rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 02:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b4:b2:60:52:a3:75:53:44:3b:dc:a6:00:e5:0a:86:ce:41:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
Validity
Not Before: Dec 20 00:33:55 2025 GMT
Not After : Dec 21 02:05:55 2025 GMT
Subject: CN=09E9193489E055BDD79B60EF0C3539199CBE3DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:f3:04:3a:9a:dd:a5:a2:a7:3c:7e:e9:f9:
93:fd:89:c8:dc:bc:19:7b:b5:f0:dc:e9:91:0c:a2:
1a:9b:81:13:fd:30:3a:b8:d2:fc:63:e2:ed:7d:1a:
12:b4:0c:b7:2f:51:dd:83:19:ca:27:ef:ac:21:b5:
45:e3:22:4d:ab:33:7d:14:89:41:d3:a0:91:25:0d:
6f:4a:96:36:d8:1b:ef:bb:00:75:74:6c:37:d2:11:
27:75:be:3c:cc:65:9a:06:e0:28:e8:d0:30:fb:68:
8e:59:ff:6b:96:7a:94:15:97:ae:39:87:f0:bd:f3:
b1:4e:6a:85:a2:04:be:29:72:23:b0:45:0c:b4:9e:
71:fc:15:a7:da:c5:b5:0b:2c:68:58:fc:0f:ed:7d:
1b:69:e0:e0:7c:a1:0f:8b:c4:73:88:13:b7:d1:ba:
d4:27:4a:7f:14:bb:50:a8:d6:0f:6f:93:f9:9d:0f:
0c:ef:df:0a:1a:ab:74:44:0a:e7:2e:ef:00:9c:a3:
7b:ae:88:47:da:1b:fc:86:56:e5:f8:db:a1:a6:ef:
c3:7e:73:ab:47:ac:13:d1:f5:e6:7f:f5:75:77:34:
f9:04:72:e3:a0:99:ea:56:a7:07:a6:a7:d6:b0:fe:
9c:ec:3a:b7:86:a1:d3:23:81:36:28:3a:7c:a0:d5:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E9:19:34:89:E0:55:BD:D7:9B:60:EF:0C:35:39:19:9C:BE:3D:D0
X509v3 Authority Key Identifier:
keyid:5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7e:61:21:70:0c:21:d8:1b:7d:c3:aa:e0:c8:6c:ea:d1:7f:
92:89:44:a9:5b:53:12:d4:39:7b:4c:cb:a8:a1:84:29:f6:9d:
89:4d:51:27:e2:01:ac:a5:1a:c9:28:0e:31:d7:9d:fb:4f:63:
06:9b:60:52:3e:22:b0:17:26:7b:d2:09:54:bf:57:73:b3:64:
e5:a0:d8:a9:e3:11:28:71:6f:cd:d7:14:a8:ac:3b:10:7d:3a:
f9:ce:20:cb:29:90:c5:f1:ac:d2:58:7c:5f:c2:56:94:0d:3b:
16:4e:9a:ae:28:d9:ec:95:ca:69:07:1c:43:a8:26:13:13:94:
9c:9a:22:3b:41:25:4d:fd:18:6b:81:1a:bb:cb:89:73:d2:09:
a6:8c:2c:dc:71:74:24:b7:5a:96:53:d8:58:82:07:19:40:b1:
92:c6:a8:d3:17:1b:e8:af:7a:51:8c:72:31:c5:ef:3f:98:46:
33:3b:57:d5:1a:fa:6b:b4:cf:e6:b7:ed:c5:5d:20:3f:6c:c7:
01:2d:3c:8f:4f:a7:48:92:81:bd:a1:ab:e7:01:ab:63:a7:aa:
cc:6c:84:7a:35:c7:7c:8e:1e:2b:28:e9:d2:18:9a:64:10:c6:
34:94:9e:94:71:1f:35:a0:90:11:e6:3e:6b:0a:d7:26:d3:5c:
cb:fb:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:44:22 2025 by rpki-client