This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
File: 3921558C04D37C64DA2CBC9D86CFF035672C152F.mft (raw, json)
Hash identifier: oF72nI+3I6TyiI7bEs/EpxmuQBGg6jTUQK4Zda3A2Jo=
Subject key identifier: C3:4D:95:90:A6:F5:AE:06:7C:EC:DE:8E:21:03:B4:21:1D:F7:A4:B8
Authority key identifier: 39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F
Certificate issuer: /CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
Certificate serial: 5A17C92532046D84EBE7106B04DD7565C9488FB6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
Manifest number: A1
Signing time: Sat 20 Dec 2025 01:49:34 +0000
Manifest this update: Sat 20 Dec 2025 01:44:34 +0000
Manifest next update: Sun 21 Dec 2025 03:11:34 +0000
Files and hashes: 1: 323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (hash: dUDlHgNCuZ93aicUk/mH3Si/Q6dP4PtlITKr+tKS6Wc=)
2: 3921558C04D37C64DA2CBC9D86CFF035672C152F.crl (hash: DVQBXaAGei0rwLFz/CwvBGES7WicxIr0fVXOAm4GjO4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl
rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 03:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:17:c9:25:32:04:6d:84:eb:e7:10:6b:04:dd:75:65:c9:48:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
Validity
Not Before: Dec 20 01:44:34 2025 GMT
Not After : Dec 21 03:11:34 2025 GMT
Subject: CN=C34D9590A6F5AE067CECDE8E2103B4211DF7A4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:0a:88:af:c3:e5:ed:5e:a8:62:58:ca:5d:
97:8d:fa:56:ad:2e:fa:a7:aa:9c:95:a2:74:ad:c9:
c1:4d:91:8a:cb:a3:44:3e:02:2a:2f:9b:10:23:88:
64:14:b0:6d:36:8f:d3:38:b6:62:07:1e:fd:89:05:
b7:6c:6d:21:dd:04:50:94:18:21:d5:a3:60:3e:fe:
da:62:3e:23:ee:35:aa:b0:23:2b:6d:ee:ee:5f:2a:
a4:20:bf:2c:27:d1:f4:30:ce:3f:83:57:98:8f:00:
29:4e:01:79:11:4d:5e:5b:f1:78:94:d5:1d:cf:e0:
cb:8a:e8:c2:ad:1c:59:40:32:e3:3e:5a:fe:28:d5:
64:cd:0b:e5:26:5e:2a:07:f4:81:2a:51:ba:0e:57:
77:2e:fc:3b:2a:ef:7c:9b:16:f5:39:ec:f6:34:56:
3f:ca:2f:26:4f:44:f9:e8:9c:a0:9d:0f:e6:9a:a4:
4b:a3:13:1c:4a:b7:9e:9f:e2:ab:f8:c4:0d:ba:ee:
77:d3:ba:81:24:72:cc:3d:58:5e:a2:10:49:40:42:
72:11:5b:c4:05:bf:2d:b7:c6:d2:70:65:a8:fa:61:
14:fc:50:03:1a:1f:59:cd:0f:be:5c:ea:9e:47:0b:
f3:d9:6e:ab:1d:c3:3f:8d:df:c6:be:06:e6:93:e5:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4D:95:90:A6:F5:AE:06:7C:EC:DE:8E:21:03:B4:21:1D:F7:A4:B8
X509v3 Authority Key Identifier:
keyid:39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d0:72:79:ce:54:a4:83:1b:c8:5a:ab:a3:a1:42:ac:49:4e:
7d:72:2e:3d:ae:13:86:f3:bf:08:ac:6d:3e:13:88:b2:5e:21:
94:73:54:18:66:07:26:0d:39:78:5b:3f:59:15:79:ab:12:20:
50:f5:b1:2c:31:3a:7a:14:5a:9b:84:cc:87:41:32:31:f6:9d:
cf:bd:d5:82:57:25:4c:3f:52:10:f2:26:fa:61:e9:98:c6:99:
68:a7:50:86:1b:5b:13:1f:d7:37:4f:ff:4c:a8:c0:13:43:df:
1e:8f:05:54:86:37:80:df:a8:50:e0:d6:cc:d6:d2:58:53:aa:
cc:f6:22:42:b6:ae:75:e2:1c:17:55:37:dc:b1:c0:2c:35:44:
2a:60:ec:97:a9:af:20:6a:55:3b:31:6a:44:fb:6d:76:47:8b:
f9:85:d5:6d:30:4e:8d:dc:a6:42:ba:d1:0e:3a:1a:f9:00:fc:
3e:c5:2e:0f:5b:34:e3:c5:c4:31:86:2d:3c:b4:d6:f2:8c:e4:
6e:97:41:57:2f:8a:21:e5:f8:90:77:d8:ed:fb:9e:f6:4c:2f:
a3:ec:cf:29:31:5e:6d:52:a5:cf:ff:ce:78:1c:88:ba:49:b4:
1b:8b:47:75:fd:12:74:b6:c2:e7:81:c4:f2:4d:da:fc:2d:81:
e8:e4:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:32:20 2025 by rpki-client