This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
File: C977770848F9819D0F9036920A47A3511F957396.mft (raw, json)
Hash identifier: JBO4cH8ca1uozwfGa2Jj+0gBntY+rKXw27yFMs0hs48=
Subject key identifier: 35:C2:92:AA:1E:69:73:97:23:69:04:3C:B6:9D:56:E9:44:00:68:9E
Authority key identifier: C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96
Certificate issuer: /CN=C977770848F9819D0F9036920A47A3511F957396
Certificate serial: 284077C3546C02FCAA3AA1E094ADF9502CA2FCC3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
Manifest number: 0224
Signing time: Sun 21 Dec 2025 07:23:56 +0000
Manifest this update: Sun 21 Dec 2025 07:18:56 +0000
Manifest next update: Mon 22 Dec 2025 10:26:56 +0000
Files and hashes: 1: 3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa (hash: TVzmqKnWWvHYKCWjjedRZsa480nszs00KNjw/sTXWEE=)
2: 323830343a333361343a3a2f33322d313238203d3e20323635343039.roa (hash: gc3reMiSgG5mvAe2MhBEBzXPFp+ncGj/EYTxQ5sRjdk=)
3: C977770848F9819D0F9036920A47A3511F957396.crl (hash: NEKm6BVFEupJ6Paiwmqnsi9/7j1aPXfD1eQGLWQryes=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.crl
rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 10:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:40:77:c3:54:6c:02:fc:aa:3a:a1:e0:94:ad:f9:50:2c:a2:fc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C977770848F9819D0F9036920A47A3511F957396
Validity
Not Before: Dec 21 07:18:56 2025 GMT
Not After : Dec 22 10:26:56 2025 GMT
Subject: CN=35C292AA1E6973972369043CB69D56E94400689E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:77:8a:98:c0:a7:6a:ad:41:5c:32:f1:fa:
56:1f:d1:e8:d9:74:95:ec:66:1e:59:48:20:db:3b:
64:31:38:66:74:81:1f:3f:43:aa:91:91:1d:1f:7d:
6d:5e:63:aa:f5:4e:4d:46:84:f7:d7:a3:bd:a6:e4:
44:8f:a8:fc:2c:54:b3:cc:14:04:27:c2:89:2a:9f:
34:29:c5:1c:b5:5c:01:a4:9b:ae:77:a9:cb:08:46:
e9:7e:e1:5b:4d:a4:25:38:ca:2f:7a:be:6b:a3:f7:
c4:0e:d6:3a:5b:ea:8f:f2:4d:9c:32:a0:39:6c:68:
9e:cc:70:94:df:0f:7d:ba:c8:12:d4:43:48:f4:e6:
0f:77:dd:89:f9:57:22:66:e9:2b:d9:47:b0:88:a5:
8f:2a:c7:76:a2:9c:d9:e1:f7:a7:13:82:0a:c7:31:
81:06:18:ac:d9:03:58:10:48:54:f6:0a:87:a7:47:
4a:1a:f1:15:9f:1d:13:da:59:0e:97:cd:5c:8a:eb:
1b:4d:03:6f:78:5a:37:df:31:24:3e:d4:6d:bd:74:
2f:7b:f0:81:29:62:e9:52:96:e0:f6:20:19:74:53:
1b:da:5d:68:8f:b3:2c:13:4a:40:50:ee:9e:ff:ae:
76:c3:ff:76:3e:8c:cc:ae:28:50:aa:76:76:c6:bd:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:92:AA:1E:69:73:97:23:69:04:3C:B6:9D:56:E9:44:00:68:9E
X509v3 Authority Key Identifier:
keyid:C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c2:6b:76:48:c5:04:e7:2c:2b:63:f5:47:cd:ea:97:1c:5c:
94:50:c9:08:dc:75:62:ea:4b:19:25:b9:d3:93:b1:77:ae:93:
61:c3:5d:08:bc:c6:f9:e5:db:bf:6d:6e:cd:5f:93:72:a3:59:
a7:a3:13:12:43:bb:6e:ad:8e:18:15:8f:19:86:73:68:14:90:
e4:6e:bd:32:9e:65:a9:47:18:36:c8:36:b2:5b:88:a0:43:c4:
30:3f:37:2d:55:53:90:a9:f2:a5:31:0a:e9:31:6a:1f:14:c8:
38:12:ff:54:2f:da:27:6b:79:72:28:b4:bc:f5:3f:9e:ba:81:
b4:af:c8:24:8f:65:dc:c6:92:09:7d:6f:45:cd:b4:ca:e2:64:
3a:c3:2b:19:04:c5:b3:66:b3:ff:b5:7d:59:3a:9c:63:99:6d:
35:4b:3a:0c:7b:b8:aa:98:41:a9:0a:a2:51:ba:ee:93:3f:c4:
e0:47:15:6d:d7:75:04:21:9d:a4:c1:a6:6e:ad:a0:4e:8e:dd:
1f:02:02:54:f1:2c:31:60:b8:3a:39:12:6a:d0:fc:4e:93:1c:
f9:12:7d:dc:cc:fb:fc:10:70:70:35:ab:87:68:c7:ae:50:cf:
b0:c0:4e:96:b8:ce:f9:52:bf:bf:33:94:6b:39:84:01:56:28:
9c:66:75:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKEB3w1RsAvyqOqHglK35UCyi/MMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3Nzc3MDg0OEY5ODE5RDBGOTAzNjkyMEE0N0EzNTEx
Rjk1NzM5NjAeFw0yNTEyMjEwNzE4NTZaFw0yNTEyMjIxMDI2NTZaMDMxMTAvBgNV
BAMTKDM1QzI5MkFBMUU2OTczOTcyMzY5MDQzQ0I2OUQ1NkU5NDQwMDY4OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dXeKmMCnaq1BXDLx+lYf0ejZ
dJXsZh5ZSCDbO2QxOGZ0gR8/Q6qRkR0ffW1eY6r1Tk1GhPfXo72m5ESPqPwsVLPM
FAQnwokqnzQpxRy1XAGkm653qcsIRul+4VtNpCU4yi96vmuj98QO1jpb6o/yTZwy
oDlsaJ7McJTfD326yBLUQ0j05g933Yn5VyJm6SvZR7CIpY8qx3ainNnh96cTggrH
MYEGGKzZA1gQSFT2CoenR0oa8RWfHRPaWQ6XzVyK6xtNA294WjffMSQ+1G29dC97
8IEpYulSluD2IBl0UxvaXWiPsywTSkBQ7p7/rnbD/3Y+jMyuKFCqdnbGveO3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNcKSqh5pc5cjaQQ8tp1W6UQAaJ4wHwYDVR0j
BBgwFoAUyXd3CEj5gZ0PkDaSCkejUR+Vc5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNtSFhRRHhEUmpvYXNlSlRkeDlMWVdKTWhud01wV1piVmhIOGVpYkNI
ZnYvMC9DOTc3NzcwODQ4Rjk4MTlEMEY5MDM2OTIwQTQ3QTM1MTFGOTU3Mzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5Nzc3NzA4NDhGOTgxOUQw
RjkwMzY5MjBBNDdBMzUxMUY5NTczOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUNtSFhRRHhEUmpvYXNlSlRkeDlMWVdKTWhud01wV1piVmhIOGVpYkNIZnYvMC9D
OTc3NzcwODQ4Rjk4MTlEMEY5MDM2OTIwQTQ3QTM1MTFGOTU3Mzk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOcJrdkjFBOcsK2P1R83qlxxclFDJCNx1YupLGSW505Oxd66TYcNdCLzG+eXb
v21uzV+TcqNZp6MTEkO7bq2OGBWPGYZzaBSQ5G69Mp5lqUcYNsg2sluIoEPEMD83
LVVTkKnypTEK6TFqHxTIOBL/VC/aJ2t5cii0vPU/nrqBtK/IJI9l3MaSCX1vRc20
yuJkOsMrGQTFs2az/7V9WTqcY5ltNUs6DHu4qphBqQqiUbrukz/E4EcVbdd1BCGd
pMGmbq2gTo7dHwICVPEsMWC4OjkSatD8TpMc+RJ93Mz7/BBwcDWrh2jHrlDPsMBO
lrjO+VK/vzOUazmEAVYonGZ1Bw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:24:51 2025 by rpki-client