This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
File: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft (raw, json)
Hash identifier: CzbEeJHgWpqGgUgnRRRr/W9EqDRL0xC7fe1ejNf4qfo=
Subject key identifier: 9C:2A:F3:7D:CC:A8:EF:9D:C9:FD:79:9B:8F:C4:BA:D6:AF:20:20:D5
Authority key identifier: CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD
Certificate issuer: /CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
Certificate serial: 09D5AFB04BB82C018E5DF9233D31476B525FF673
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
Manifest number: A8
Signing time: Sat 20 Dec 2025 18:55:16 +0000
Manifest this update: Sat 20 Dec 2025 18:50:16 +0000
Manifest next update: Sun 21 Dec 2025 19:46:16 +0000
Files and hashes: 1: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: aP9w5LUb2eJVRnoNyFOvF8ygagN8phXJPyzq4MAIWds=)
2: CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl (hash: yCu3pN5rSM/OBYrZotY/Ve79CcOTHUvEJbtWgenItGY=)
3: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: RpLdfJT1pXXcOR4aWQ4um6Zo3Vsbi/E86oiN9R6ONyk=)
4: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 3U7NF9Lz9aGI73HLXDdDGtUNdHBz7fbGjnXgXaW6L2w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl
rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 19:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d5:af:b0:4b:b8:2c:01:8e:5d:f9:23:3d:31:47:6b:52:5f:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBED2EB55FBF7DD2356D73471DF593AA7073D3FD
Validity
Not Before: Dec 20 18:50:16 2025 GMT
Not After : Dec 21 19:46:16 2025 GMT
Subject: CN=9C2AF37DCCA8EF9DC9FD799B8FC4BAD6AF2020D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:e3:e4:81:25:73:c5:90:35:78:58:a9:01:
68:52:e1:30:c2:86:fd:8a:3b:07:5b:4a:5b:9c:15:
bb:e0:69:db:3b:82:8b:ea:2a:15:c9:9c:21:c0:5d:
af:27:3d:07:72:64:c0:88:00:d9:65:36:f3:e8:6a:
76:24:2a:d3:46:81:9e:bc:6a:8f:63:77:b1:a0:19:
c4:f0:93:53:56:9e:09:84:39:fe:52:d0:6b:22:7f:
a4:d9:17:31:cf:26:39:fc:fa:af:48:02:04:12:2c:
18:f1:cb:12:3b:8c:f6:7c:f5:f4:e5:52:2f:df:5e:
8d:f9:c0:bb:1a:f9:45:92:ba:cd:21:96:92:81:0f:
9d:a8:ea:66:80:90:69:9c:3b:86:fd:b0:6f:69:ab:
d6:23:78:ff:45:16:87:79:45:d8:66:8f:ce:83:e9:
81:b4:98:59:c7:17:66:91:ab:db:c1:e0:c9:4d:44:
cc:d1:b7:d0:50:d8:41:2c:ca:ac:c9:48:21:8e:fe:
48:db:26:91:cb:a2:e4:d7:44:49:f8:4a:6f:3c:72:
da:57:10:3a:d3:ed:04:cd:3c:f4:ad:ba:0e:3f:a7:
2d:f6:41:f9:35:0c:54:85:fa:dc:96:b2:5d:94:77:
84:48:09:14:ef:46:08:ce:21:37:85:b1:a1:b3:58:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:F3:7D:CC:A8:EF:9D:C9:FD:79:9B:8F:C4:BA:D6:AF:20:20:D5
X509v3 Authority Key Identifier:
keyid:CB:ED:2E:B5:5F:BF:7D:D2:35:6D:73:47:1D:F5:93:AA:70:73:D3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/1/CBED2EB55FBF7DD2356D73471DF593AA7073D3FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:e1:44:d8:c4:f2:96:65:d4:27:07:c4:fd:2b:da:95:76:
bf:c4:29:aa:7f:fc:48:d9:09:e4:2e:70:cd:e3:27:67:b2:49:
89:36:4a:f8:dd:2d:32:71:fd:db:66:3d:29:2f:cc:57:16:1f:
19:ea:46:e9:a4:f4:24:66:a0:b9:7e:98:f1:f1:bf:18:67:29:
8e:f9:03:19:e0:69:23:2c:fd:7d:21:1a:5b:7e:a3:94:43:cd:
37:c0:6c:b6:98:07:4d:b6:61:34:2a:f7:2c:e8:56:07:96:52:
0f:43:c2:47:5e:0b:78:f7:cc:d4:75:40:3b:5e:f7:da:a0:23:
16:9a:f8:83:bb:65:bc:67:7a:c7:57:64:79:c3:2a:5f:d7:0f:
6d:ff:4d:58:33:62:9a:fa:ff:2b:c4:e5:43:0a:83:8a:9b:ac:
1a:65:d0:a7:09:ce:48:17:dc:6e:b9:a5:c0:6d:ec:00:ae:70:
d3:20:ae:be:fd:51:4f:2e:bf:72:b6:22:88:00:f0:e8:7e:bb:
3b:84:0d:7a:db:d7:d3:ec:fc:6b:bb:de:4e:15:e5:62:7d:6e:
32:a7:5f:5c:df:aa:13:af:af:6e:8f:7e:30:f1:84:20:8f:a1:
54:71:4e:98:fc:64:8a:de:e6:46:d6:0f:77:66:3a:2d:0f:66:
7f:9b:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:14:47 2025 by rpki-client