This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier: Iemo/K+h4JfE/ncpspzDSAs6L+ZihFCyvcxy4/aT7FA=
Subject key identifier: 42:C5:4A:FB:C4:AC:1E:89:B9:66:70:D9:17:5B:40:69:EB:B7:4D:1B
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer: /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial: 045AD40155FE8657614C9C725D936510C9D38B20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number: 02D0
Signing time: Fri 19 Dec 2025 17:31:26 +0000
Manifest this update: Fri 19 Dec 2025 17:26:26 +0000
Manifest next update: Sat 20 Dec 2025 18:36:26 +0000
Files and hashes: 1: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: 4yngCd7rMrm1N5h7XLUwcr/v6nWiYlH0k6Z0RNslBIQ=)
2: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: A3a78W0pyJVURXfE86eaTKQxsUe5iLQDL6VVPySvhx4=)
3: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: /02W0MeQbHpyCAaZLSENooDm7Q6/cQG4TZ0qLVZ3ol0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 18:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5a:d4:01:55:fe:86:57:61:4c:9c:72:5d:93:65:10:c9:d3:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Validity
Not Before: Dec 19 17:26:26 2025 GMT
Not After : Dec 20 18:36:26 2025 GMT
Subject: CN=42C54AFBC4AC1E89B96670D9175B4069EBB74D1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:6e:ba:47:c6:e1:cc:8c:68:22:9a:9a:89:
dd:54:34:6b:a0:67:ff:ea:f4:f7:01:e9:06:c7:01:
3d:be:8e:88:cc:df:4e:55:e2:4e:e6:2b:ff:b8:ad:
76:7e:1c:a6:d2:34:77:27:63:e1:14:10:86:8f:f8:
56:24:1b:29:fd:c7:39:73:97:59:65:a8:5e:8f:9e:
0d:ee:8d:79:6b:a7:c7:e2:92:64:bf:13:89:fd:c8:
d2:95:5a:89:e4:a7:5b:26:e9:eb:a1:ad:2f:af:35:
4c:c8:18:de:cc:88:d4:07:da:e1:64:36:5d:c6:a2:
3a:94:91:56:62:63:c4:62:48:ef:69:a5:2a:3e:b0:
67:e5:a7:e0:54:0b:b4:96:e2:22:38:b1:d2:28:0d:
6f:ff:17:7d:30:90:f6:89:a4:da:ee:dc:84:7d:7d:
6e:f6:69:6c:82:a4:24:9b:65:e4:c8:27:f3:13:bf:
94:43:2d:41:dd:99:b6:1b:06:13:55:31:eb:3b:46:
ea:9b:03:a3:d2:21:16:42:ee:48:66:fe:8c:06:51:
98:fc:38:fd:f0:c4:2d:7a:ef:65:08:18:46:4b:c9:
3d:26:31:7b:d4:3b:b6:b1:66:60:b1:98:a1:01:df:
a2:85:5a:6c:8c:a1:d8:88:aa:17:58:c8:b3:4a:bc:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:4A:FB:C4:AC:1E:89:B9:66:70:D9:17:5B:40:69:EB:B7:4D:1B
X509v3 Authority Key Identifier:
keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e3:e6:8b:66:e0:ba:4c:d1:2c:d5:a6:62:20:41:20:8e:1f:
19:da:74:91:5c:d0:40:91:e6:0f:88:00:1b:a1:45:ee:7d:a4:
02:f6:6b:cb:39:59:51:a9:a5:50:f7:04:3f:6e:a3:82:1e:34:
41:7f:1f:e6:4d:77:42:52:31:13:24:a2:d8:49:d1:92:7b:16:
b1:d5:ed:30:eb:38:40:8c:82:5d:16:09:f5:0d:fa:91:28:31:
5a:4d:4a:67:d5:04:43:1e:c5:25:eb:25:6d:bb:be:1f:c7:7a:
23:fa:26:ad:77:ec:7a:7d:66:cc:94:31:2b:aa:e8:00:9a:11:
39:8d:e3:94:3f:c4:64:f1:32:8e:db:f2:4e:30:ea:2b:80:68:
31:09:35:2b:12:1c:62:65:4d:a1:ad:71:97:00:d2:f2:12:2d:
34:06:43:cd:24:24:ac:31:9b:79:94:6b:de:bb:aa:5e:88:f3:
26:73:07:65:5b:f3:72:c9:43:dd:cf:fc:c4:85:89:d5:8b:59:
f7:87:6b:e9:47:4d:82:c3:ce:70:f5:ee:f1:a2:a9:14:12:a7:
c7:ff:99:6f:11:fe:8c:d8:eb:18:e5:3f:90:de:f3:3d:ed:e0:
69:31:6f:f4:c8:b1:9f:92:f3:f9:9e:8f:9d:d2:b8:ef:1a:02:
55:2b:e0:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBFrUAVX+hldhTJxyXZNlEMnTiyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENDQkFENENDQTE3MEUzMUM2QTZFMjJCMTcyRjg4NEIy
MjRFM0M0OTAeFw0yNTEyMTkxNzI2MjZaFw0yNTEyMjAxODM2MjZaMDMxMTAvBgNV
BAMTKDQyQzU0QUZCQzRBQzFFODlCOTY2NzBEOTE3NUI0MDY5RUJCNzREMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdG66R8bhzIxoIpqaid1UNGug
Z//q9PcB6QbHAT2+jojM305V4k7mK/+4rXZ+HKbSNHcnY+EUEIaP+FYkGyn9xzlz
l1llqF6Png3ujXlrp8fikmS/E4n9yNKVWonkp1sm6euhrS+vNUzIGN7MiNQH2uFk
Nl3GojqUkVZiY8RiSO9ppSo+sGflp+BUC7SW4iI4sdIoDW//F30wkPaJpNru3IR9
fW72aWyCpCSbZeTIJ/MTv5RDLUHdmbYbBhNVMes7RuqbA6PSIRZC7khm/owGUZj8
OP3wxC1672UIGEZLyT0mMXvUO7axZmCxmKEB36KFWmyModiIqhdYyLNKvHCPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQsVK+8SsHom5ZnDZF1tAaeu3TRswHwYDVR0j
BBgwFoAUjMutTMoXDjHGpuIrFy+ISyJOPEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVRmV01abkJLQ25HeFYzazlCMW1peDR3SkJ0M0pWamNmb2RRQWtLMmFF
a0ovMC84Q0NCQUQ0Q0NBMTcwRTMxQzZBNkUyMkIxNzJGODg0QjIyNEUzQzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQ0JBRDRDQ0ExNzBFMzFD
NkE2RTIyQjE3MkY4ODRCMjI0RTNDNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVRmV01abkJLQ25HeFYzazlCMW1peDR3SkJ0M0pWamNmb2RRQWtLMmFFa0ovMC84
Q0NCQUQ0Q0NBMTcwRTMxQzZBNkUyMkIxNzJGODg0QjIyNEUzQzQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArePmi2bgukzRLNWmYiBBII4fGdp0kVzQQJHmD4gAG6FF7n2kAvZryzlZUaml
UPcEP26jgh40QX8f5k13QlIxEySi2EnRknsWsdXtMOs4QIyCXRYJ9Q36kSgxWk1K
Z9UEQx7FJeslbbu+H8d6I/omrXfsen1mzJQxK6roAJoROY3jlD/EZPEyjtvyTjDq
K4BoMQk1KxIcYmVNoa1xlwDS8hItNAZDzSQkrDGbeZRr3ruqXojzJnMHZVvzcslD
3c/8xIWJ1YtZ94dr6UdNgsPOcPXu8aKpFBKnx/+ZbxH+jNjrGOU/kN7zPe3gaTFv
9Mixn5Lz+Z6PndK47xoCVSvgzg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:13:42 2025 by rpki-client