This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
File: 8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft (raw, json)
Hash identifier: Imhh8yVZilc/8eUTx7OHF0x0aW/asOavvb9n9IejFhk=
Subject key identifier: CD:1B:F3:36:BA:39:2D:37:61:F2:90:19:3A:2D:57:6E:D5:21:36:76
Authority key identifier: 8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3
Certificate issuer: /CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
Certificate serial: 4B9BF4ACB33FBFA8FB6639FA584EA1176BED8FA2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
Manifest number: BE
Signing time: Thu 25 Dec 2025 11:34:30 +0000
Manifest this update: Thu 25 Dec 2025 11:29:30 +0000
Manifest next update: Fri 26 Dec 2025 12:18:30 +0000
Files and hashes: 1: 323830343a353439303a3a2f33322d3438203d3e20323638363538.roa (hash: i83s5u9huhbJHapQ9/OBbf/QCqrm4HELSWsH4LVEbM4=)
2: 34352e3136352e36302e302f32322d3234203d3e20323638363538.roa (hash: /ReUzT2vFRsB7AzdAhivYPC6glBsbzMTBCpkRANlGEQ=)
3: 8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl (hash: W4JH41czU4KiiWtk4Vgk2YQ4a+ryprTKgIN44UeVyvE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl
rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 12:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9b:f4:ac:b3:3f:bf:a8:fb:66:39:fa:58:4e:a1:17:6b:ed:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
Validity
Not Before: Dec 25 11:29:30 2025 GMT
Not After : Dec 26 12:18:30 2025 GMT
Subject: CN=CD1BF336BA392D3761F290193A2D576ED5213676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:8c:79:71:e8:4f:cd:51:cc:9b:0d:b5:7d:
30:0c:23:27:5d:65:51:e2:c7:e5:bf:5a:42:0f:65:
3d:25:a8:df:cd:40:96:73:6b:23:c1:ab:96:81:a1:
3f:b7:92:f2:d8:ad:4c:dc:03:e8:59:fb:32:f0:f6:
10:5e:75:8c:fa:ec:8c:66:2f:c6:39:50:3c:bd:f0:
23:ce:aa:b0:ea:36:4a:14:56:0b:72:73:b6:50:cd:
96:24:b0:9d:89:fc:51:e5:e3:73:73:89:35:c3:5e:
43:7e:8d:35:64:4a:55:9d:89:1f:af:1e:05:c8:7a:
d6:6d:09:f0:c1:2b:32:55:3f:79:3b:34:bf:e9:73:
c8:f4:8a:dc:ff:99:c7:29:54:de:3f:c9:14:fd:79:
49:80:5c:84:f6:86:c8:df:f0:ee:e2:f7:ec:3e:dd:
d1:77:96:cf:a2:e8:10:04:a3:16:ff:c2:0a:4b:a8:
8e:2d:e1:00:30:c6:a9:17:cb:13:b8:cd:7d:1d:6b:
05:3e:3e:27:b6:94:05:12:d0:31:f0:6c:77:0d:75:
d6:e9:23:4e:04:99:5a:b8:47:15:c4:40:83:12:19:
ff:bc:b5:75:f6:e4:55:bf:49:c3:cd:5b:3a:70:2f:
99:cb:f1:fa:ed:92:78:8a:c2:47:2f:9c:ad:1a:19:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:F3:36:BA:39:2D:37:61:F2:90:19:3A:2D:57:6E:D5:21:36:76
X509v3 Authority Key Identifier:
keyid:8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:86:c4:a6:8f:77:0e:28:d2:08:25:9f:0e:93:d5:9c:56:bb:
74:d7:61:61:ce:4d:96:d7:cd:f4:b6:19:08:37:c2:9a:5f:09:
74:88:1a:4f:a0:32:cd:44:db:e0:3a:35:e9:0d:87:dc:06:4c:
0a:6b:4b:92:82:75:65:1d:79:71:16:1a:7c:3f:54:ee:d8:93:
4b:72:de:57:55:0f:af:3b:f3:64:3f:52:98:f2:16:79:3b:34:
29:26:95:14:06:f5:1f:93:1b:95:08:e7:cd:0b:a2:eb:59:bd:
76:42:ef:e4:f4:61:1c:20:97:53:4d:58:4b:dc:77:40:2b:ec:
92:28:56:fb:03:cd:7c:e5:51:05:83:c0:d8:9b:ce:3d:fc:75:
8a:a9:2b:08:7e:8c:f4:a9:97:a2:32:08:27:0d:8e:4b:e2:b0:
14:85:40:c0:15:d0:1a:69:76:0f:7f:38:ed:37:95:db:4d:52:
cf:92:c6:8e:0f:19:b4:2a:e9:ac:f4:e8:72:4c:aa:fc:cb:31:
6d:26:2f:b3:1b:77:8c:88:be:21:1f:b9:63:7a:00:21:1a:f3:
43:98:c9:a1:29:bd:64:86:f1:81:57:01:9e:60:85:44:e3:59:
19:1b:63:b7:9a:57:f2:23:ec:82:e1:62:c4:f1:33:4a:b0:97:
b7:b9:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 14:19:26 2025 by rpki-client