This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
File: 7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft (raw, json)
Hash identifier: zxPBU20fd+KxfG6GngjCi57f31hFD12nFvXIJH9Su5Q=
Subject key identifier: 17:40:CB:A1:1E:61:DA:94:4A:52:A9:BD:9A:9B:A7:64:93:13:94:E1
Authority key identifier: 7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28
Certificate issuer: /CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
Certificate serial: 0605C43CB0F0609BE616AF567A22E2AE5DD14D51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
Manifest number: 0353
Signing time: Mon 29 Dec 2025 23:07:34 +0000
Manifest this update: Mon 29 Dec 2025 23:02:34 +0000
Manifest next update: Wed 31 Dec 2025 01:48:34 +0000
Files and hashes: 1: 34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa (hash: Z3eXqkLPkta5lxiN4hgxoRNVmpRnWufvbzb5xqsI8DM=)
2: 7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl (hash: JKZkKxksRRl4Kesv1OIuyYIsQlQ+61XN1K6cNZq/dbA=)
3: 323830343a363636383a3a2f33322d3438203d3e20323639353536.roa (hash: gBG4Qlb27HXo3NuqJCUwy25pnJ/e3ADhfWsSexuL8bw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl
rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 31 Dec 2025 01:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:05:c4:3c:b0:f0:60:9b:e6:16:af:56:7a:22:e2:ae:5d:d1:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
Validity
Not Before: Dec 29 23:02:34 2025 GMT
Not After : Dec 31 01:48:34 2025 GMT
Subject: CN=1740CBA11E61DA944A52A9BD9A9BA764931394E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:89:1b:61:33:c9:73:32:9e:f5:c9:47:17:
04:b8:6b:71:03:c9:fa:a4:66:fb:29:92:30:7b:0c:
ec:c6:1c:53:2d:17:7b:b1:19:f5:59:9b:6a:7c:ad:
0b:1a:1b:c4:01:ca:79:b6:b1:e7:14:e3:c4:5d:42:
db:90:79:9b:34:e2:ec:7a:1e:7a:b9:5d:4f:99:fa:
20:57:36:7d:fa:35:29:de:49:5f:d0:6d:2e:dc:73:
59:c8:45:a7:8a:2d:ec:38:2d:bb:88:9e:c1:d2:16:
63:10:5e:6c:c8:1a:0f:24:21:78:ce:9c:ac:6b:7f:
79:db:2b:4d:fe:ee:56:8f:40:4d:93:b9:be:ec:8a:
8d:f9:21:2f:45:cf:7f:de:07:26:ca:fb:ad:68:e7:
28:d3:1e:c2:d1:5a:6c:96:63:e2:3e:69:11:80:f4:
df:41:7f:54:73:d6:cc:60:76:df:76:e7:3f:25:da:
40:da:aa:db:f8:d1:8e:ab:79:ad:c7:18:a0:da:46:
f3:a3:a4:0f:4f:91:73:00:b6:e7:4e:70:ca:49:b1:
33:80:47:47:64:e9:c4:e3:a1:46:7b:2a:e6:a6:d9:
1f:38:88:af:ae:4f:cc:67:3a:05:9f:40:e0:55:dd:
02:cc:72:04:ae:5d:34:12:eb:cb:79:22:4e:4f:c9:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:CB:A1:1E:61:DA:94:4A:52:A9:BD:9A:9B:A7:64:93:13:94:E1
X509v3 Authority Key Identifier:
keyid:7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c3:d3:da:15:51:40:5a:a9:04:9d:c0:75:0c:b7:f5:bb:e1:
ae:ab:7e:1b:03:1a:86:3b:dc:a6:cd:07:2c:8b:85:df:f1:86:
df:59:74:52:e4:07:1a:1a:3a:c2:d7:35:7d:e7:63:a1:1f:4d:
55:ae:4a:30:3e:ea:c9:42:04:32:b3:a0:c8:cc:87:4a:5b:6d:
86:74:81:5e:33:d1:94:83:37:5f:4e:f4:be:3f:9e:1d:0a:09:
41:f6:9b:38:9c:03:38:90:ce:51:de:cd:8b:05:dd:17:9f:0e:
ab:b6:b5:9b:13:b8:3e:2d:91:27:c3:10:f8:8d:00:0d:d6:27:
af:25:a9:27:8d:af:0b:87:46:ea:f6:5d:a9:4b:4c:54:46:62:
c2:d6:c3:0a:04:c2:8e:76:b8:68:0d:cc:0c:3e:82:6a:5a:fe:
c6:db:e6:64:23:f1:8f:f2:a0:d3:eb:8c:eb:03:5a:39:66:12:
ca:5f:21:45:f4:b2:63:88:a9:9f:6a:91:2f:1e:a1:36:f0:38:
30:19:a3:2c:97:3f:60:fd:ca:f3:56:d7:64:f6:0d:fb:c9:9e:
41:94:02:11:33:34:7a:34:79:03:cc:a1:ec:ac:e3:e2:5c:cb:
c3:8a:ac:e6:47:13:d8:17:19:a6:4c:5b:a7:1c:a3:0b:48:fa:
29:0d:fd:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBgXEPLDwYJvmFq9WeiLirl3RTVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBMUZDRjkxQkQwRjk3QzBENDUwMEUyMTgzRDg1Nzgy
QjE3NUQyODAeFw0yNTEyMjkyMzAyMzRaFw0yNTEyMzEwMTQ4MzRaMDMxMTAvBgNV
BAMTKDE3NDBDQkExMUU2MURBOTQ0QTUyQTlCRDlBOUJBNzY0OTMxMzk0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq0IkbYTPJczKe9clHFwS4a3ED
yfqkZvspkjB7DOzGHFMtF3uxGfVZm2p8rQsaG8QBynm2secU48RdQtuQeZs04ux6
Hnq5XU+Z+iBXNn36NSneSV/QbS7cc1nIRaeKLew4LbuInsHSFmMQXmzIGg8kIXjO
nKxrf3nbK03+7laPQE2Tub7sio35IS9Fz3/eBybK+61o5yjTHsLRWmyWY+I+aRGA
9N9Bf1Rz1sxgdt925z8l2kDaqtv40Y6rea3HGKDaRvOjpA9PkXMAtudOcMpJsTOA
R0dk6cTjoUZ7Kuam2R84iK+uT8xnOgWfQOBV3QLMcgSuXTQS68t5Ik5PycQVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUF0DLoR5h2pRKUqm9mpunZJMTlOEwHwYDVR0j
BBgwFoAUfKH8+RvQ+XwNRQDiGD2FeCsXXSgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJIVXRpREwyejJvVEduZVNKMTVONzdiN1llUWV2NkFLcnZ5eGpZZHZM
d3AvMS83Q0ExRkNGOTFCRDBGOTdDMEQ0NTAwRTIxODNEODU3ODJCMTc1RDI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQTFGQ0Y5MUJEMEY5N0Mw
RDQ1MDBFMjE4M0Q4NTc4MkIxNzVEMjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDJIVXRpREwyejJvVEduZVNKMTVONzdiN1llUWV2NkFLcnZ5eGpZZHZMd3AvMS83
Q0ExRkNGOTFCRDBGOTdDMEQ0NTAwRTIxODNEODU3ODJCMTc1RDI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGMPT2hVRQFqpBJ3AdQy39bvhrqt+GwMahjvcps0HLIuF3/GG31l0UuQHGho6
wtc1fedjoR9NVa5KMD7qyUIEMrOgyMyHSltthnSBXjPRlIM3X070vj+eHQoJQfab
OJwDOJDOUd7NiwXdF58Oq7a1mxO4Pi2RJ8MQ+I0ADdYnryWpJ42vC4dG6vZdqUtM
VEZiwtbDCgTCjna4aA3MDD6Calr+xtvmZCPxj/Kg0+uM6wNaOWYSyl8hRfSyY4ip
n2qRLx6hNvA4MBmjLJc/YP3K81bXZPYN+8meQZQCETM0ejR5A8yh7Kzj4lzLw4qs
5kcT2BcZpkxbpxyjC0j6KQ39QQ==
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:56:37 2025 by rpki-client