This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
File: 08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft (raw, json)
Hash identifier: 8NQmdSVEL5x45ovNwAudAJA5rMMWFlmD6IsyfNgezUw=
Subject key identifier: AF:78:EF:0D:80:37:61:C8:FA:8F:18:06:DF:E1:C9:17:8C:7A:60:82
Authority key identifier: 08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A
Certificate issuer: /CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A
Certificate serial: 2A5895E7BDD1BD8B4C1373692905D1EB459DFB82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
Manifest number: 7D
Signing time: Sat 20 Dec 2025 04:30:39 +0000
Manifest this update: Sat 20 Dec 2025 04:25:39 +0000
Manifest next update: Sun 21 Dec 2025 05:34:39 +0000
Files and hashes: 1: 323830343a366666633a3a2f33322d3434203d3e20323730363939.roa (hash: gfD4DT8xrbgsKAbOtxhKs94zEtw6SZqQtc9rYxG0qfw=)
2: 08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.crl (hash: NVDVYxZl2Pe6A5/KgrHkIAQjXP6DpTmhDGbb+g567xw=)
3: 3230302e3138372e3130382e302f32322d3234203d3e20323730363939.roa (hash: 3DjukDWweMhuIBO0IUDNviu44ZUEf1ziUSOevMRnTfM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.crl
rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 05:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:58:95:e7:bd:d1:bd:8b:4c:13:73:69:29:05:d1:eb:45:9d:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08DDDD3D95492046DE5DDF0A80DFA4076B24B19A
Validity
Not Before: Dec 20 04:25:39 2025 GMT
Not After : Dec 21 05:34:39 2025 GMT
Subject: CN=AF78EF0D803761C8FA8F1806DFE1C9178C7A6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:43:86:db:5e:d8:6a:f8:c2:87:f7:3d:ba:
73:dc:7f:f7:d6:ea:4c:d4:77:d6:39:17:f9:62:9d:
ca:06:79:20:3e:99:be:30:8b:24:a8:40:50:49:81:
b3:45:f2:cb:fb:ee:86:23:7a:e2:96:89:a6:bb:8c:
01:e4:f0:39:5b:90:2f:ec:a1:4c:90:e1:13:3c:4c:
d3:cc:ca:61:98:ac:29:e5:b7:1a:27:a9:e3:98:e8:
4f:06:60:bf:4b:5d:25:18:e6:55:c3:7c:28:f4:a0:
31:04:59:cd:86:b8:e2:9b:ba:ea:3a:eb:4e:52:52:
53:fa:e8:50:4e:65:88:f5:83:1d:39:3e:50:1a:6b:
d6:e1:99:d1:42:ed:1c:b7:d9:00:6a:37:89:c4:0e:
77:ea:79:26:6d:2a:d1:fc:2a:9b:4d:9d:d3:18:79:
89:c0:8c:ca:ec:c8:cb:4e:fb:62:8c:ad:9f:30:e2:
73:79:a6:f2:51:75:dd:ca:38:e4:7b:d3:bb:61:65:
53:fa:dc:07:f3:d5:0f:bb:06:37:ff:60:2a:af:82:
ca:9b:a3:5e:8d:0e:41:22:94:88:93:e5:21:57:bc:
8f:7c:5e:27:1b:4e:6c:54:80:c3:d2:77:df:18:38:
af:7e:fd:cc:ff:d9:33:b8:8c:bf:df:c8:a8:ac:4b:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:EF:0D:80:37:61:C8:FA:8F:18:06:DF:E1:C9:17:8C:7A:60:82
X509v3 Authority Key Identifier:
keyid:08:DD:DD:3D:95:49:20:46:DE:5D:DF:0A:80:DF:A4:07:6B:24:B1:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6atVe6Qfg8iD3975DVeZY9ye3SxC2zUdY7qXdkq5LcG/0/08DDDD3D95492046DE5DDF0A80DFA4076B24B19A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:09:a9:40:e0:d0:08:a9:02:8e:42:c1:69:ce:ee:6a:1c:
6b:ae:52:01:ff:3c:bc:e0:ed:fe:c4:67:a8:7c:2e:42:18:23:
2a:9c:fa:b4:0c:f2:43:38:09:d5:95:35:ae:23:4e:9f:78:10:
a1:bd:cb:72:7f:a7:91:e1:70:9a:c1:77:77:d8:62:bc:06:80:
c6:e7:7f:9c:d6:e5:c6:30:8e:cc:ef:70:56:a6:53:ac:b9:b7:
be:13:41:68:d8:33:e2:40:74:62:52:15:55:53:6c:08:43:06:
61:70:91:d9:06:60:61:cd:5f:fd:1c:d3:d9:68:a3:30:5b:8e:
79:6f:37:68:30:78:83:b5:5d:85:16:56:35:1b:94:23:9c:c6:
76:d2:31:b7:34:db:76:07:95:a7:22:74:b1:9b:45:ee:75:66:
1b:03:a8:ef:38:c2:8b:db:b7:64:0b:10:69:98:84:26:e4:9a:
ef:7c:45:21:fc:0c:c9:fe:9c:25:58:b5:e3:ac:37:25:74:09:
23:de:4f:43:37:f6:fa:67:fe:ed:e7:5a:47:a3:2c:d6:c8:70:
41:59:5f:86:33:fe:d2:6c:bd:28:9c:6f:c2:fc:ac:65:37:f6:
e2:7c:9f:a8:5f:95:d7:68:12:74:00:df:4e:d7:4c:ab:29:e3:
f1:fb:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:33:46 2025 by rpki-client