This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
File: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft (raw, json)
Hash identifier: SdTY0uwdYg2P9p8g47tpq3tbCvwzp6t9N/GsS/hdlLA=
Subject key identifier: 75:4B:8B:24:41:B2:D0:FC:01:31:1F:45:A9:E5:5D:7E:6F:DB:54:41
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Certificate issuer: /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial: 28E7495B8790EB76C19F425C94D1C5FB03531F0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
Manifest number: 02BE
Signing time: Thu 25 Dec 2025 01:08:26 +0000
Manifest this update: Thu 25 Dec 2025 01:03:26 +0000
Manifest next update: Fri 26 Dec 2025 03:34:26 +0000
Files and hashes: 1: 323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (hash: 2RhvcmCViO7K6rvzNLUvrSfyH4uASVKfLVRVw16Kfio=)
2: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl (hash: QjmpnknWgbz+P8guu6YUvbj7cGJY5d96/L08l9voI84=)
3: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: TWgboQvD5ElxCD7GryGFp3lioM8xkrhIZhs+YOtG00s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 26 Dec 2025 03:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e7:49:5b:87:90:eb:76:c1:9f:42:5c:94:d1:c5:fb:03:53:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Validity
Not Before: Dec 25 01:03:26 2025 GMT
Not After : Dec 26 03:34:26 2025 GMT
Subject: CN=754B8B2441B2D0FC01311F45A9E55D7E6FDB5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c4:a0:3e:1f:02:71:87:91:1e:b8:7d:67:22:
1b:51:75:fe:00:2a:3f:e7:82:2a:e5:db:f2:eb:ca:
8f:5d:3d:62:69:54:f1:93:5e:38:4e:6a:c2:86:69:
1c:97:50:20:6b:15:13:b5:4f:87:f0:c2:dd:11:a1:
fe:18:00:b4:27:06:44:94:78:c3:f8:1e:2b:46:51:
1a:cf:ce:cc:dd:6e:da:ff:ff:0d:6d:79:73:c4:11:
32:aa:70:0e:d7:4e:5c:66:61:f1:f1:bf:5b:31:32:
51:bf:3c:4a:fe:d0:7c:dd:5b:5f:81:79:a6:88:36:
d2:a2:8c:d1:78:ee:54:df:90:e9:92:f0:cf:04:21:
47:4e:e7:e1:2a:24:72:9d:8d:e1:8c:62:0e:8d:0f:
96:fe:58:6f:f9:c7:de:38:21:25:f8:d0:85:d4:3c:
05:bd:53:bd:b8:12:2d:55:b8:e5:3d:76:e6:81:42:
69:01:62:ba:20:5e:a5:74:b7:dd:de:ab:86:ea:9d:
5a:5f:1c:51:ed:6e:73:44:e2:90:3e:7d:09:e6:b2:
db:2c:f1:ca:d6:4a:a9:a8:44:0d:7c:e8:4a:9b:31:
55:06:45:85:cd:1d:48:ff:20:09:58:bc:53:7c:47:
3f:a2:53:29:49:2d:24:3f:ff:b7:2d:60:a7:39:21:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:8B:24:41:B2:D0:FC:01:31:1F:45:A9:E5:5D:7E:6F:DB:54:41
X509v3 Authority Key Identifier:
keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:13:9b:0e:09:a2:ad:0f:9d:82:69:2c:d8:43:6b:7b:60:bd:
16:f3:70:aa:33:2d:73:c6:f5:3f:ce:7c:dd:00:2d:d1:5d:18:
10:6f:fc:42:7d:49:2f:c4:a4:22:04:9f:12:24:59:51:4b:fa:
c8:85:4d:fe:a9:98:a3:62:c3:40:a8:83:57:7a:f7:1d:04:d3:
26:f9:1b:91:23:37:2f:e6:56:73:d9:0f:2a:8b:2a:ef:4c:82:
53:53:37:3d:32:da:df:44:63:1d:ed:8e:7d:f0:4e:82:6f:30:
9e:53:4a:b1:ed:5a:7c:a2:94:23:48:11:69:b9:4d:f2:44:c1:
9d:1c:ea:73:6f:28:2b:39:07:a1:ae:e1:1e:16:96:5f:78:47:
ea:84:64:19:8b:bc:8c:76:00:9c:b9:71:a7:ec:41:1b:99:8a:
3a:d5:1f:23:5b:41:56:09:e8:10:08:50:f7:81:57:84:0e:5f:
34:7f:fb:65:c5:98:20:fa:7e:09:c1:92:e7:b1:a6:5f:c8:26:
6f:f4:d1:39:82:96:48:c8:01:ce:ff:c5:56:52:b0:b1:18:57:
58:37:a4:67:ea:45:e0:c9:d4:6e:11:1d:b0:08:f3:cf:36:21:
de:5e:fc:70:ef:a6:a7:78:18:ce:43:5b:20:ff:68:c6:03:3b:
6c:58:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:18:06 2025 by rpki-client