This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
File: E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft (raw, json)
Hash identifier: VXecLE7ru/cyfmiRBGJOfKi6j8YdadmOsAajOJIbXl8=
Subject key identifier: 70:0D:AF:82:C2:E5:D6:2D:65:87:A8:A1:CD:3E:86:94:3E:3E:32:98
Authority key identifier: E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25
Certificate issuer: /CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
Certificate serial: 68C0E03A79387F521AA9094D42CF717999A8B705
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
Manifest number: 8D
Signing time: Mon 22 Dec 2025 14:00:34 +0000
Manifest this update: Mon 22 Dec 2025 13:55:34 +0000
Manifest next update: Tue 23 Dec 2025 16:27:34 +0000
Files and hashes: 1: E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl (hash: Wv2C5Ejj+TUOhhU+g1a8hLBq/GIGI8Xcfdk16urXWdQ=)
2: 34352e3232362e39322e302f32322d3332203d3e20323636393932.roa (hash: tGtZGahHyRDdT4wps0iiTI4ennMfoo4Is3Y2F9jKOn8=)
3: 323830343a343637633a3a2f33322d313238203d3e20323636393932.roa (hash: FG9yedBaRW69iKWQ5vrW8liVhEjSF+gYfzKeBeedf5w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl
rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 16:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c0:e0:3a:79:38:7f:52:1a:a9:09:4d:42:cf:71:79:99:a8:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325
Validity
Not Before: Dec 22 13:55:34 2025 GMT
Not After : Dec 23 16:27:34 2025 GMT
Subject: CN=700DAF82C2E5D62D6587A8A1CD3E86943E3E3298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:6d:a8:24:9b:06:d7:78:9c:90:3f:11:76:
33:d9:3d:a0:8e:a3:96:28:0b:98:7c:0d:4a:f4:e7:
50:cd:01:85:de:fd:57:e8:f8:79:ad:aa:c5:14:52:
a9:4e:5e:31:6e:e2:2c:c2:99:8c:61:fa:76:79:d9:
1b:f4:5b:2e:99:34:a8:7c:a8:53:06:f0:26:28:ac:
44:21:75:da:a1:16:2c:0c:3f:c1:1b:44:e5:5e:4f:
7a:f1:25:29:9d:7b:e5:82:f6:c2:65:20:02:d6:74:
f3:0e:f9:6b:28:dc:a5:2f:2e:8d:2d:28:7b:6f:3b:
20:81:a8:14:e0:b5:5c:6c:07:31:90:26:14:e6:a4:
ed:60:4d:63:85:36:b1:83:1d:13:8d:fe:fa:ac:23:
91:d5:01:7d:8d:04:e3:af:67:ec:4d:8b:2c:9f:11:
79:26:69:cb:03:c3:5c:ce:58:49:0e:68:e5:ff:dd:
f9:62:59:83:d2:b3:67:9e:c1:4b:f0:df:1c:11:15:
58:99:a8:90:3b:4d:1c:9c:32:f6:95:52:3b:3b:c8:
8f:7a:9d:d4:77:50:7a:71:3e:fa:10:21:05:76:97:
0d:fd:ac:92:f0:02:71:cb:e7:7c:df:8c:d1:3e:76:
4c:74:92:f4:b9:57:73:6b:a5:ac:b9:c7:e0:5b:4b:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:AF:82:C2:E5:D6:2D:65:87:A8:A1:CD:3E:86:94:3E:3E:32:98
X509v3 Authority Key Identifier:
keyid:E0:F9:CE:BF:1B:40:D8:FC:1A:5E:2C:82:B0:39:57:0C:93:49:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/E0F9CEBF1B40D8FC1A5E2C82B039570C9349F325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ef:19:5a:01:df:d5:9e:aa:95:9b:5f:48:6d:2d:67:39:17:
b2:5c:7e:d2:e3:01:6c:2a:2f:2a:50:57:97:7e:fe:a3:89:24:
93:46:a8:ab:e9:85:09:82:35:4b:44:b5:c7:4d:8b:77:17:9c:
cb:64:1b:d7:7e:81:a2:c9:bb:a2:91:bc:f9:9d:d6:cf:a5:05:
87:c2:c7:da:3a:e6:71:98:5a:d6:1e:ba:16:73:bc:1b:e9:b6:
22:eb:0c:0b:d0:3c:3c:b6:67:33:37:37:6e:7d:a2:3c:43:ed:
99:db:d1:0a:11:ff:f3:76:3d:68:6d:eb:8e:83:f8:9e:4c:3a:
9f:af:6a:91:a9:f3:39:39:66:5f:ad:07:35:04:0b:ea:24:01:
dd:1b:a7:b4:c8:82:a7:31:5c:16:54:c5:16:33:71:a6:1a:2e:
6f:3d:20:5d:7d:cb:13:34:52:1e:cd:69:e2:95:38:7f:e4:43:
39:ca:d6:4b:a4:10:8f:fc:20:b2:3e:fa:03:09:a2:53:b5:fc:
34:39:7c:45:b0:36:fd:96:2a:80:fd:0e:d2:35:b2:fe:0d:1e:
ff:27:25:08:c9:56:63:b4:e2:c7:d3:32:69:58:fa:a0:4d:cb:
fa:1a:d9:df:32:67:4a:c2:59:87:55:b3:36:b7:fd:d4:81:5d:
e5:85:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 18:42:30 2025 by rpki-client