This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft
File: 8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft (raw, json)
Hash identifier: BwW8WFwpq3Mdz7f8Ef133NcLjaIDLgeqBue2hj38/hI=
Subject key identifier: 59:90:EB:F8:AB:F6:4A:6F:1F:78:26:EE:09:C8:33:9B:6B:B7:8C:FE
Authority key identifier: 85:47:CD:EB:A3:25:B0:3E:5B:5D:CA:9F:B7:B6:B1:D6:1F:D7:84:27
Certificate issuer: /CN=8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427
Certificate serial: 324E0AF81EA35DCD41B1019BBCBF5C4E1D5C1D56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft
Manifest number: 41
Signing time: Sat 20 Dec 2025 11:56:55 +0000
Manifest this update: Sat 20 Dec 2025 11:51:55 +0000
Manifest next update: Sun 21 Dec 2025 14:15:55 +0000
Files and hashes: 1: 323830343a333532383a3a2f33322d313238203d3e20323636323732.roa (hash: 4aVsFRn1l4nvFUvFHQ/e137PplNuAvprtjd/BW8Ocx0=)
2: 8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl (hash: XBAzSCR2VtLATYIxB9b4kStvNQ+wdX5dZAdKBTcsPIo=)
3: 3137302e37382e3134382e302f32322d3332203d3e20323636323732.roa (hash: 5xn8t0pL6bp82eRcesCb60oDCab/EPZZngeBW734do0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl
rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 13:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4e:0a:f8:1e:a3:5d:cd:41:b1:01:9b:bc:bf:5c:4e:1d:5c:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427
Validity
Not Before: Dec 20 11:51:55 2025 GMT
Not After : Dec 21 14:15:55 2025 GMT
Subject: CN=5990EBF8ABF64A6F1F7826EE09C8339B6BB78CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:0d:d9:66:da:05:72:fd:53:a3:c9:56:7c:
63:37:56:f5:4a:bc:64:74:1f:e3:89:52:6a:ce:17:
9f:61:af:2b:71:91:f1:1a:51:a1:ed:de:86:fb:0b:
45:db:86:d9:82:0e:fc:22:42:fa:c9:f0:0b:46:23:
1e:6b:6d:df:d8:85:05:06:b7:79:9d:1b:b4:f3:94:
33:c2:70:74:8a:da:0f:9b:80:78:89:47:91:3c:65:
38:36:38:1c:d9:f9:00:34:8a:aa:7d:55:2a:a0:49:
17:ab:e5:3c:ac:60:b9:29:4b:0f:65:f6:dc:18:cc:
a6:7b:0b:a2:40:96:29:3e:9e:fd:65:63:1f:10:bc:
7a:10:65:f0:ce:2e:1e:6d:63:38:8c:2a:bd:7c:03:
c8:27:3e:ec:4e:70:16:07:b0:25:a4:80:a6:2e:a0:
4e:11:a6:fd:26:ac:a0:9e:3a:bb:ad:58:5b:02:5f:
8f:c6:be:7a:e1:c8:b2:e6:04:fc:7b:67:25:08:0a:
1c:18:9f:11:ce:39:40:b3:04:ec:bf:9b:41:36:71:
02:13:3b:83:fa:49:4c:c7:c8:0b:62:84:37:83:a0:
b1:da:73:3b:4d:8d:c1:42:f2:94:2c:ac:96:95:37:
16:c5:11:e3:13:6b:3f:4a:bd:04:aa:65:e5:57:82:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:EB:F8:AB:F6:4A:6F:1F:78:26:EE:09:C8:33:9B:6B:B7:8C:FE
X509v3 Authority Key Identifier:
keyid:85:47:CD:EB:A3:25:B0:3E:5B:5D:CA:9F:B7:B6:B1:D6:1F:D7:84:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/8547CDEBA325B03E5B5DCA9FB7B6B1D61FD78427.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:4e:59:0b:3f:76:a6:53:93:97:21:58:8b:cd:9a:00:e5:
e9:84:19:6d:42:f6:e9:5c:30:02:66:f3:6b:4b:f3:ef:e9:60:
65:e4:87:d5:09:09:5e:45:2d:70:e9:3a:b9:b0:a7:a1:92:f4:
99:bb:56:9f:43:e6:97:53:25:d0:14:96:8c:33:a1:84:61:40:
83:9c:29:d1:e9:76:f7:8c:50:6e:2e:d3:68:36:89:2e:d8:2a:
43:7c:42:66:e4:53:75:a9:27:b0:6d:1a:c3:3f:49:27:78:c2:
8c:f9:65:5b:b4:9e:34:f5:67:6e:6e:d9:22:c2:35:fb:74:86:
46:42:a3:f8:0f:f9:d8:02:ca:89:c8:3e:1c:7c:07:ad:78:73:
01:be:3b:42:7f:8f:b5:e6:2b:ce:d0:cb:b6:96:7f:45:86:3a:
9a:98:75:c4:83:98:e0:17:89:ac:4e:dd:02:e4:80:26:94:fb:
f8:74:79:3d:0b:aa:87:8b:f6:36:51:f0:8a:cd:17:45:17:7a:
08:cf:c9:c3:75:1d:2e:dc:fd:2a:7b:2f:02:bc:70:a8:7b:78:
1b:9e:b6:14:b3:fa:b7:a6:6f:c1:1c:d5:d1:59:7e:ea:7f:54:
cf:d9:3c:8b:27:15:0d:b8:8c:bc:61:9b:b2:43:f7:66:b3:cc:
ee:ef:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:27:40 2025 by rpki-client