This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
File: D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft (raw, json)
Hash identifier: 3EGuIpmrDxAxarAuDdOKwH8+yP2yPbWA7q/i3eoL+vY=
Subject key identifier: CE:AB:17:0A:26:71:34:83:9A:84:2E:AD:48:70:E9:5B:FA:FE:AB:A5
Authority key identifier: D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94
Certificate issuer: /CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
Certificate serial: 75B40AA4384626A2521A14EDCDD41AD21F112B01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
Manifest number: 3F
Signing time: Fri 19 Dec 2025 19:37:15 +0000
Manifest this update: Fri 19 Dec 2025 19:32:15 +0000
Manifest next update: Sat 20 Dec 2025 21:52:15 +0000
Files and hashes: 1: D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl (hash: C9Spq/NQ6fxAIz9NK54BrHBE2qvffSAwlpvqJfjlCic=)
2: 3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa (hash: qlUjHpjAWKMnQPffdQJn3eCpwFflll7j8Xky9+T9Cfs=)
3: 323830343a373835633a3a2f33322d3438203d3e20323731323337.roa (hash: aRvaBBCO0cntwA2+Kz+mMu8boe9ywcCKXHaMThipubU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl
rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 21:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b4:0a:a4:38:46:26:a2:52:1a:14:ed:cd:d4:1a:d2:1f:11:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
Validity
Not Before: Dec 19 19:32:15 2025 GMT
Not After : Dec 20 21:52:15 2025 GMT
Subject: CN=CEAB170A267134839A842EAD4870E95BFAFEABA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:07:b8:88:f6:7e:b8:7c:16:3a:30:f4:95:
d8:15:87:01:30:69:21:cf:e5:fe:d5:9a:b5:09:2a:
55:94:62:2c:0b:38:d4:8c:af:57:29:7c:9e:5a:0c:
e4:27:dc:e1:46:82:2f:b5:2b:e7:24:dc:ff:94:cb:
f3:fb:11:37:c1:21:bb:35:0d:02:21:4b:7f:7e:89:
bd:70:85:2a:b0:7c:fb:f1:51:6e:82:d0:1d:34:40:
5d:3c:c0:dc:64:7d:5e:46:7d:eb:8f:99:f8:20:47:
ef:31:0e:7f:ff:32:a8:0f:67:75:77:d0:d6:0f:92:
e9:96:d7:55:f9:e7:eb:55:c7:8f:c7:2d:2a:48:75:
f8:31:46:21:e0:fb:2d:ff:59:11:03:1d:c3:e3:53:
8b:6e:7e:32:9e:d4:1e:e1:25:2b:0c:75:ec:f2:8d:
71:dc:66:ea:02:56:ad:d9:87:59:96:dd:66:92:e7:
ef:92:34:99:5e:a6:0a:04:12:31:52:ee:ed:17:e4:
d1:eb:a5:f2:1b:80:67:91:9b:1f:08:80:55:b2:a9:
7c:c8:01:ad:87:eb:e5:8e:7b:31:4d:24:2b:da:27:
c2:0c:2c:38:7c:90:70:3f:07:42:3e:9e:ab:69:cf:
cb:95:2d:d1:3d:d4:f0:27:3e:a3:3d:95:66:a3:f6:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AB:17:0A:26:71:34:83:9A:84:2E:AD:48:70:E9:5B:FA:FE:AB:A5
X509v3 Authority Key Identifier:
keyid:D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b8:55:72:05:d2:63:9f:8b:27:51:ed:cd:dc:94:09:19:00:
c7:1a:4f:22:56:60:d7:b3:71:ff:d5:7f:b6:61:db:e1:5a:c1:
64:9a:c4:ba:6b:e7:55:4c:7e:57:dd:68:2c:b5:a1:6d:44:50:
46:04:55:0d:9f:e3:cb:54:f0:3a:f3:7f:6d:9b:f7:51:98:64:
42:b3:1c:dd:09:ba:6d:cc:af:45:b3:83:31:5f:51:1f:83:c7:
f9:e8:83:1f:5c:2f:70:45:f8:f0:c1:d1:22:18:2b:ac:0c:6b:
f9:99:62:71:0a:ee:ed:60:d2:0a:5b:72:bb:d6:bd:a5:30:c2:
05:f0:54:1e:49:48:7b:a6:63:94:2b:75:9b:9d:3c:2c:9f:ef:
a9:4e:c0:3e:33:4f:54:3a:7d:6c:c9:7e:23:fd:67:3e:8c:41:
03:67:aa:db:df:ea:39:76:6f:cc:5f:af:80:ad:c3:c7:35:26:
67:4f:88:44:a8:64:99:27:e0:56:6b:89:1c:77:51:e0:5c:97:
e4:87:aa:fa:dc:ee:e3:25:54:42:fe:ee:ab:1f:fa:12:56:2f:
e6:b6:bc:66:79:2d:89:69:7c:b5:c1:83:e5:ab:1f:98:20:67:
44:83:93:1b:62:dc:c8:56:06:be:fd:1b:95:80:fd:c5:5d:5a:
c3:23:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:35:44 2025 by rpki-client