This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
File: 653D1900116E7E41CE869340B5477E400370D802.mft (raw, json)
Hash identifier: 9J4Fuyq3RPd5CRorucLEaoauRMURj87KbKdUAHFDtZU=
Subject key identifier: 14:06:F0:8F:00:11:74:BD:FB:02:B7:D5:8F:DA:1E:F0:3A:3C:FE:08
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Certificate issuer: /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial: 291E041071C0ED42779EB891E73AB01594B0AA8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
Manifest number: 028C
Signing time: Mon 29 Dec 2025 16:00:05 +0000
Manifest this update: Mon 29 Dec 2025 15:55:05 +0000
Manifest next update: Tue 30 Dec 2025 16:14:05 +0000
Files and hashes: 1: 3137372e35322e34352e302f32342d3234203d3e203532373936.roa (hash: ZGDiMWxSAnPCfpSuSRrivc6SnVVYs0c2VksGanOWt2Y=)
2: 323830343a6239343a3a2f33322d3332203d3e203532373936.roa (hash: UHOAMnyQuDaDlnL1JvlwIpjEGx/YCz4LZEw70WSU75Q=)
3: 3137372e35322e34342e302f32322d3232203d3e203532373936.roa (hash: soLAkjXBPK2bz7dUuYvwF+iMaf4v+T4PtGggdZjRSO0=)
4: 3137372e35322e34372e302f32342d3234203d3e203532373936.roa (hash: Xp2u2qJYCff1ip3P87quhanzUqnA0SBeflwFfEp8iH4=)
5: 3137372e35322e34362e302f32342d3234203d3e203532373936.roa (hash: pI9tTYU30K+di3HL9t6xuL+sKaArxMKOT4n971nvxAo=)
6: 3137372e35322e34342e302f32342d3234203d3e203532373936.roa (hash: 6vdFQfA5lnE387AQBaz7OJcadPg4QswmmQbDioW4CWM=)
7: 653D1900116E7E41CE869340B5477E400370D802.crl (hash: TF+Hcqb9hI5wKpcY9YKt9XogPWiQsELCmylhpRadoZ4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 30 Dec 2025 16:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1e:04:10:71:c0:ed:42:77:9e:b8:91:e7:3a:b0:15:94:b0:aa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
Validity
Not Before: Dec 29 15:55:05 2025 GMT
Not After : Dec 30 16:14:05 2025 GMT
Subject: CN=1406F08F001174BDFB02B7D58FDA1EF03A3CFE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:77:98:94:b3:22:35:ed:57:36:df:98:85:
8e:05:1a:cb:75:cb:d6:69:59:aa:25:01:34:59:2f:
6c:2e:98:da:4e:58:95:7a:c9:7b:6f:ed:85:4c:3c:
b2:b8:3a:22:4e:3c:37:6a:ae:32:17:6a:a1:99:79:
14:27:71:f5:14:73:9f:ca:06:0e:ae:cf:d8:c1:25:
82:b0:22:18:3c:9f:ac:7b:71:56:91:32:01:09:8c:
0e:b0:4e:04:c9:e3:c0:01:24:44:6e:26:2c:a4:4c:
40:8b:f6:cf:cb:af:89:eb:c7:6f:1b:97:16:3b:48:
30:15:21:52:19:30:58:c6:a5:09:6c:a6:6f:fc:40:
72:90:85:4a:0b:6f:c8:a5:d8:6c:72:6c:7c:7c:58:
46:db:8c:be:c1:88:3f:67:1a:fe:20:3a:71:20:fe:
49:16:a6:b2:a4:11:cd:ca:1b:07:8d:ac:46:8b:58:
33:2b:b7:29:d8:20:7c:ea:9c:c9:f5:82:d8:cd:6e:
9a:e5:16:0b:05:7f:2c:55:f4:38:0b:54:28:c3:39:
36:1d:6a:ce:18:40:ef:99:c0:f2:a3:89:d7:a9:0e:
b4:0c:58:56:a1:93:cb:21:9a:b5:c5:0c:95:de:a5:
6b:81:da:68:25:1c:53:c0:1a:01:69:ca:e8:0e:c7:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:F0:8F:00:11:74:BD:FB:02:B7:D5:8F:DA:1E:F0:3A:3C:FE:08
X509v3 Authority Key Identifier:
keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ef:d8:b0:92:c7:da:17:3c:01:62:f3:eb:5d:11:f2:26:8c:
fd:35:af:9f:89:9f:de:51:26:7d:00:7c:88:88:96:f4:b6:79:
3c:05:ae:e4:71:8a:3d:80:16:40:89:6b:29:cf:a1:99:cc:1d:
78:96:a2:86:86:4c:22:5e:3b:9c:60:eb:a6:12:7f:3f:ec:31:
e0:c9:31:ca:1c:4b:31:4e:af:70:e8:e1:6a:f4:4a:bd:46:9f:
c5:fd:fe:95:a3:b0:07:2e:d2:06:13:65:de:89:1a:b4:12:6c:
01:55:f9:1b:84:2f:8b:10:55:45:d2:9d:60:a9:17:aa:6e:9e:
da:8d:e7:90:84:2d:d6:d3:2c:4e:9f:0a:ac:01:e2:84:d9:64:
3c:6e:78:5a:80:f7:07:26:77:50:e3:04:0f:d6:b5:fe:a7:fa:
31:a2:a7:8a:8c:e6:12:4d:7b:53:f7:94:7b:76:ae:5c:d0:d6:
94:62:da:02:f1:1f:d3:ac:6e:d8:af:cc:f2:93:ff:82:1a:a7:
a2:75:b5:0e:d8:24:21:a3:1b:bd:70:35:ad:8c:17:42:a8:4a:
65:44:7e:ce:2e:f4:bf:07:d2:5b:09:01:3f:57:4a:05:2e:eb:
99:03:1b:e8:0a:17:e8:e0:1c:a5:47:88:c5:08:95:f5:cf:1e:
3a:fe:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 00:23:23 2025 by rpki-client