This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
File: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json)
Hash identifier: EVvaCtoVAS/zWcQTAMbUkLV82VjWuHnhqPy9sMxi3yE=
Subject key identifier: 49:05:E4:19:DF:D7:1C:6C:1B:75:46:69:C2:38:84:4C:10:98:A5:24
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Certificate issuer: /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial: 16ABDA3D2C763D7A4BE71E4ECA11885600009A4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
Manifest number: 7B
Signing time: Wed 24 Dec 2025 03:15:50 +0000
Manifest this update: Wed 24 Dec 2025 03:10:50 +0000
Manifest next update: Thu 25 Dec 2025 04:05:50 +0000
Files and hashes: 1: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=)
2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=)
3: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: dU/465/HK7sIhfbh5jzGck9dmQ6vCCQML8EKGvF6EC0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 04:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ab:da:3d:2c:76:3d:7a:4b:e7:1e:4e:ca:11:88:56:00:00:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Validity
Not Before: Dec 24 03:10:50 2025 GMT
Not After : Dec 25 04:05:50 2025 GMT
Subject: CN=4905E419DFD71C6C1B754669C238844C1098A524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:61:83:b5:51:08:85:12:b9:8f:87:e8:f7:
d4:dc:dd:ec:44:36:85:78:3e:22:fc:f6:ff:f7:32:
90:36:65:46:83:da:97:92:e9:18:da:19:4a:70:ec:
21:99:08:e2:19:19:e2:19:29:2d:07:9e:d4:b3:fd:
00:2f:19:9c:f4:4d:b7:a3:d1:55:68:be:e4:2d:59:
fb:7b:af:cb:cc:2b:31:cd:53:ff:0b:17:c1:aa:02:
00:e7:fe:2a:7d:1e:cd:73:f9:0e:87:a6:6d:68:8d:
f6:0d:c0:82:33:55:3e:a1:c5:99:18:b2:53:bf:1a:
06:e9:25:12:de:b2:16:9a:99:79:4e:13:c3:90:47:
d3:1d:1d:19:50:ea:16:f2:49:1a:10:36:c4:b5:14:
29:05:77:b6:41:14:1e:fc:22:c1:93:ad:ce:33:d1:
17:e4:75:d6:69:f1:97:20:12:92:80:7a:c4:6f:0e:
72:d5:2a:ea:bb:89:95:22:e6:86:e3:d8:f6:d5:ca:
df:35:5d:53:7d:02:fb:3c:c2:88:c5:5e:5c:e8:78:
64:2b:32:27:95:65:fd:40:74:c8:ae:bc:80:92:5a:
8e:2a:65:50:03:c4:9f:5a:61:72:ff:59:d2:12:0e:
79:73:d4:5e:79:5c:27:d3:e3:0e:e0:22:cd:e8:84:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:E4:19:DF:D7:1C:6C:1B:75:46:69:C2:38:84:4C:10:98:A5:24
X509v3 Authority Key Identifier:
keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:c6:77:fb:e6:46:52:1a:96:2c:6a:9e:7a:94:48:3c:1a:
47:02:6a:28:00:28:b8:75:eb:c3:82:07:ee:51:d7:3b:eb:7f:
53:3a:d8:81:26:fb:89:7c:fc:e0:77:33:72:3a:52:bc:e3:1a:
c4:dd:d4:c5:b9:38:ca:dd:87:81:14:e3:ce:cc:07:3e:d5:1a:
2f:74:ba:08:94:93:6d:31:50:9b:fa:c7:56:e9:84:b2:65:7d:
67:0b:6d:a9:5b:b3:bd:f3:d1:08:2a:24:cb:44:60:e3:de:02:
fa:b9:34:89:cd:38:22:aa:f4:50:f2:fe:37:dd:15:7f:bd:32:
62:d4:1b:9e:95:f3:94:32:ac:1a:c6:a4:3d:b9:85:ea:ea:c6:
6d:fc:19:ab:79:41:23:b2:e3:56:3c:b6:0a:c2:ae:40:09:7b:
d5:48:c1:c4:0c:3d:a5:57:b9:08:1c:d4:af:53:1c:bc:d5:6a:
ce:f3:ec:32:e4:a5:36:2a:3f:9f:e1:59:b6:7f:b0:44:6e:cb:
fb:97:20:8b:f7:a3:48:d0:40:00:bf:91:5f:33:89:f6:71:ac:
02:d4:db:6c:d8:7b:3c:6e:41:c8:e6:5c:99:bc:cd:52:66:60:
8b:cf:77:c8:8f:50:6b:f6:21:d9:8c:8b:8c:e9:20:cb:b5:03:
f2:02:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:55:29 2025 by rpki-client