This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json)
Hash identifier: S02adEGAeZv38gZu1Vwl+ot+SHUFsP4vdU1bTHvRILg=
Subject key identifier: F3:E4:7C:73:85:1B:A9:D8:0A:53:CB:76:F1:A6:56:7D:6F:F6:46:4B
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Certificate issuer: /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial: 42315F387549176BD7CF2322EA58B3AAA3DB0170
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
Manifest number: 02DC
Signing time: Sat 20 Dec 2025 03:35:13 +0000
Manifest this update: Sat 20 Dec 2025 03:30:13 +0000
Manifest next update: Sun 21 Dec 2025 05:58:13 +0000
Files and hashes: 1: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: 1/+EI1RIV81cAq6qdqOFra0pW+AGNrGvldKqEq+qHgg=)
2: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=)
3: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 05:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:31:5f:38:75:49:17:6b:d7:cf:23:22:ea:58:b3:aa:a3:db:01:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Validity
Not Before: Dec 20 03:30:13 2025 GMT
Not After : Dec 21 05:58:13 2025 GMT
Subject: CN=F3E47C73851BA9D80A53CB76F1A6567D6FF6464B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:24:d4:46:56:c9:89:29:ba:68:84:af:12:
96:b9:83:66:31:cd:9e:c2:23:d2:ed:cf:fc:1a:cb:
6a:f4:fc:59:1c:8b:2f:ca:7f:ac:72:bf:70:e9:3a:
51:43:b8:17:f1:da:fd:1f:5c:20:04:e2:4d:31:28:
0f:f8:2c:bc:4c:61:1e:23:ed:71:cc:d5:68:05:0e:
f6:bb:14:80:a7:a4:5b:84:d2:2e:6a:ec:8d:87:01:
78:2a:36:93:b4:c8:81:e0:0f:42:b1:c0:fe:a7:f6:
55:c0:d7:04:23:f2:0c:54:34:2e:a5:07:e8:0a:c8:
9e:cf:fc:94:01:f0:34:96:d3:85:16:b5:7a:59:05:
cf:2a:0e:90:ee:f8:d3:29:7b:0f:16:3a:78:c3:d5:
b1:e6:8d:35:f0:5c:23:0e:c1:5d:9f:6f:06:6a:28:
db:71:7e:34:61:f0:df:6e:8a:23:7a:7e:f7:c6:be:
94:4b:ff:d5:0a:05:c1:52:9c:88:c8:fd:23:90:b6:
62:e1:70:cd:75:ba:75:c8:40:c4:04:7d:2c:c2:97:
01:75:19:ea:65:59:65:eb:3f:56:35:51:2f:4e:c6:
fd:e6:7e:c6:0d:b8:91:87:35:a0:5c:8a:d1:41:1c:
98:c9:46:41:9a:fa:88:ae:88:5c:51:7e:8a:d0:75:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:7C:73:85:1B:A9:D8:0A:53:CB:76:F1:A6:56:7D:6F:F6:46:4B
X509v3 Authority Key Identifier:
keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:8b:e6:97:9a:2d:20:c6:03:84:6f:9e:6a:80:ad:5b:5e:
e4:98:31:b1:1d:f5:c1:67:cd:ee:5f:04:fd:be:ff:91:31:63:
3c:28:b8:6b:20:3f:7f:c3:9f:bd:bf:c4:d4:e2:a7:df:ad:18:
7c:a5:72:0d:50:f5:5e:5e:21:0f:48:e6:67:7c:db:e9:e9:da:
1b:3a:78:af:d4:a7:f8:7e:ba:a2:86:ca:1f:3f:67:e2:83:fa:
f8:f4:a7:8f:db:0c:93:0a:04:c1:29:77:4e:7d:85:d0:b9:ca:
10:66:92:d3:e4:e7:c0:f3:9e:79:97:27:56:67:4f:e9:a5:81:
aa:e1:2c:8a:02:cd:41:f2:c0:07:8f:c3:69:5a:2d:79:bc:ad:
84:d3:4a:ec:61:00:2b:12:78:df:89:a6:d0:5a:0c:c4:88:32:
78:c4:61:81:d7:50:22:52:46:44:9a:fd:c3:2f:be:d7:68:6a:
70:bc:8a:81:90:8a:d0:0c:78:4a:21:31:e1:f4:4c:10:32:a3:
91:ae:2a:c9:38:5b:84:b0:af:96:98:9b:4f:98:0a:88:c3:ba:
2e:b0:de:fc:d8:6e:6f:dd:c3:08:91:70:4e:05:00:06:55:b8:
73:3a:84:bb:35:5f:b6:bd:90:62:09:5f:6b:52:df:3f:2c:ef:
db:11:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:36:12 2025 by rpki-client