This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.mft
File: 4C220782AEE345F8F20B4B31D947B80C36C6C6BF.mft (raw, json)
Hash identifier: uJYfflfKOSrPJvH6Sh0egxVggRm8nRmu8TheKur+Uqg=
Subject key identifier: B7:BD:18:59:D6:73:54:2F:9A:4D:C6:E5:D0:A7:EA:87:E6:6A:62:FA
Authority key identifier: 4C:22:07:82:AE:E3:45:F8:F2:0B:4B:31:D9:47:B8:0C:36:C6:C6:BF
Certificate issuer: /CN=4C220782AEE345F8F20B4B31D947B80C36C6C6BF
Certificate serial: 7543CCFB92DB81ECC8DD69733E1ADC87BDE03430
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.mft
Manifest number: C8
Signing time: Wed 24 Dec 2025 03:43:30 +0000
Manifest this update: Wed 24 Dec 2025 03:38:30 +0000
Manifest next update: Thu 25 Dec 2025 07:33:30 +0000
Files and hashes: 1: 323830343a363161633a3a2f33322d313238203d3e20323639323439.roa (hash: mGniI9SUYK2irM5PQk9883zzUp0efGzBmnkGKuCgIpo=)
2: 4C220782AEE345F8F20B4B31D947B80C36C6C6BF.crl (hash: M+xKVb4AglqAA4zNEePK7nV2iLm1TO83z3VMPk/q52o=)
3: 34352e3138332e302e302f32322d3332203d3e20323639323439.roa (hash: 5moHNpPUuxYbeqoxjkOH7rMuxaL1pJmVntmzI4BEl/8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.crl
rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 07:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:43:cc:fb:92:db:81:ec:c8:dd:69:73:3e:1a:dc:87:bd:e0:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C220782AEE345F8F20B4B31D947B80C36C6C6BF
Validity
Not Before: Dec 24 03:38:30 2025 GMT
Not After : Dec 25 07:33:30 2025 GMT
Subject: CN=B7BD1859D673542F9A4DC6E5D0A7EA87E66A62FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:d8:bf:ec:f6:26:da:9b:55:b3:dd:9b:ce:
65:71:a9:33:2c:c9:5e:cc:ae:4f:97:54:7e:12:8e:
b5:7d:82:e6:57:f7:5c:68:01:d8:5f:a8:e2:9d:d5:
7b:cd:4b:84:bb:db:87:f1:98:d6:42:a0:8d:20:2c:
09:be:ac:80:15:10:7e:77:cf:f2:48:b2:d8:e9:3b:
36:da:07:56:fe:c0:de:7c:4d:ff:c4:47:bc:c6:8e:
92:df:be:f6:53:4a:40:af:cc:22:ec:49:68:df:c2:
5e:b0:5c:cc:69:ec:3b:5d:95:3a:d2:9b:77:30:90:
3b:76:d1:0d:bd:7b:a5:c5:28:4c:b4:9b:52:e9:72:
3a:dd:e1:e1:86:e7:17:46:08:38:69:de:37:9d:78:
b2:f4:ec:9e:85:9d:46:0f:1b:ba:f3:48:eb:00:e4:
ca:40:1a:ae:18:6f:6d:a1:ac:1c:41:13:1e:3b:ff:
60:2f:d6:e5:05:65:28:4b:f1:98:a8:35:65:16:f9:
a7:53:98:fc:56:8d:ac:1a:db:5d:79:c9:48:a2:5d:
8a:75:ab:29:ea:09:cb:37:85:65:c2:b9:18:b6:7b:
49:34:dc:1f:a7:6b:5e:07:3b:c2:c0:45:4b:8d:6b:
13:a0:21:e8:54:79:0c:1f:c3:bc:21:15:27:d7:9c:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:18:59:D6:73:54:2F:9A:4D:C6:E5:D0:A7:EA:87:E6:6A:62:FA
X509v3 Authority Key Identifier:
keyid:4C:22:07:82:AE:E3:45:F8:F2:0B:4B:31:D9:47:B8:0C:36:C6:C6:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:85:84:f1:83:85:03:25:0c:b9:b4:e4:de:31:fa:46:43:bb:
7a:af:66:d7:8a:a6:76:13:8d:15:b7:bb:74:a9:f0:48:98:41:
bd:8c:9e:0e:60:96:50:18:ca:12:1f:29:34:2f:de:dc:f9:dd:
ee:ab:86:dd:cd:7d:c9:26:e8:05:f0:15:dc:a5:4f:46:c3:47:
c6:9d:dd:64:2e:88:a4:31:43:d0:2a:13:64:dc:89:a9:ea:38:
9f:b6:5b:11:f9:7f:15:6a:5e:94:5a:35:bb:08:0c:7a:6f:6a:
e6:87:80:9e:79:12:88:53:ed:10:2e:aa:c3:31:ba:ca:ba:ec:
0d:71:b9:5c:2d:20:61:ed:37:06:55:e5:52:c6:e2:cc:5c:67:
ce:d6:4d:08:e6:b3:60:ad:b1:db:84:80:11:33:04:d2:36:a4:
86:5f:08:14:14:8f:27:75:9d:8e:f3:4d:69:46:c1:33:34:ca:
bc:82:6f:0d:6d:d4:84:e7:65:aa:db:cd:4a:5c:ea:9e:ac:5a:
b9:56:3c:8b:72:04:42:e9:90:d2:13:5d:bb:d4:15:27:89:de:
9e:96:aa:4d:8f:09:f3:3c:e0:25:7d:55:93:8d:5c:b7:2e:15:
77:b1:00:d3:b3:2f:5e:ce:ce:36:cd:f1:0d:e0:f5:43:79:85:
d1:aa:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:57:46 2025 by rpki-client