This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
File: 652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft (raw, json)
Hash identifier: Uj4eNCU9siXAM5YHDtCP6Vy8wYaBik8Xzok5CXjgr+I=
Subject key identifier: 9B:16:F2:C3:8F:EF:FB:50:A1:C4:7D:3E:5B:BB:74:B1:B4:36:FD:ED
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Certificate issuer: /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial: 4294A1E9EDF8A9BCDB88298340F70658F54F6C41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
Manifest number: 02AC
Signing time: Fri 19 Dec 2025 17:57:50 +0000
Manifest this update: Fri 19 Dec 2025 17:52:50 +0000
Manifest next update: Sat 20 Dec 2025 18:20:50 +0000
Files and hashes: 1: 3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa (hash: bTWOO4wMvbqej9v9hS54DGbiTULpIB10RJoQ2OsKGbM=)
2: 3132382e3230312e34322e302f32342d3234203d3e20323636363531.roa (hash: BtvGiuIxRAaZDO9TFdhUngmhnUzBR9e4y2IA4O10w2A=)
3: 652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl (hash: RYo93GVFT3moXAU5SgB87QQdZF9N0GCNDGks295778A=)
4: 323830343a336634633a3a2f33342d3334203d3e20323636363531.roa (hash: nvEWeG8lH5d2MsmX+xQFRD5MvYcNdcC9aJ1I/4SEwpY=)
5: 323830343a336634633a3a2f33322d3332203d3e20323636363531.roa (hash: oQ5xUWz3d0i7eXbNQbXz6z5LBoGWqPWYIVvuQQjITYQ=)
6: 3132382e3230312e34302e302f32342d3234203d3e20323636363531.roa (hash: xBspFIvvQcExKAo/nd4giRNDUHi8wecs3/3QxXS1Pyc=)
7: 3132382e3230312e34302e302f32322d3232203d3e20323636363531.roa (hash: TIk1Yg+16SrPF3R1cxmS78vrS4BO07CB0a31rcsSi7U=)
8: 323830343a336634633a633030303a3a2f33342d3334203d3e20323636363531.roa (hash: XkiA6Lokta3U5nObChKRL+1d6EQRWTeW8RsCbBfT3Bc=)
9: 323830343a336634633a383030303a3a2f33342d3334203d3e20323636363531.roa (hash: QdjN75dZquqcnEQ7VBJTA7QkqzKltp3LTnvJxCRZEh4=)
10: 323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa (hash: ipvqzKz4k5VQOe+Bzj6rPE+R7Nc032T922rJ18S7voM=)
11: 3132382e3230312e34302e302f32332d3233203d3e20323636363531.roa (hash: o4JnUJZiVwQrp/eMZmZKR+MwefjKuhiH1badgAUEMho=)
12: 3132382e3230312e34332e302f32342d3234203d3e20323636363531.roa (hash: EyaKfNszNHavsJyuqerPUX2W9LUCVQCYy8yCBUH6NwI=)
13: 3132382e3230312e34312e302f32342d3234203d3e20323636363531.roa (hash: vP35esMPeBi/GI77WTFbqL1y1r9s92CCrUdvFKwFJh8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 18:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:94:a1:e9:ed:f8:a9:bc:db:88:29:83:40:f7:06:58:f5:4f:6c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Validity
Not Before: Dec 19 17:52:50 2025 GMT
Not After : Dec 20 18:20:50 2025 GMT
Subject: CN=9B16F2C38FEFFB50A1C47D3E5BBB74B1B436FDED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:8f:2e:48:04:b9:ed:cc:0c:cd:8e:5c:29:
79:b9:3f:fd:bf:f6:a5:4c:22:c5:64:60:cb:3a:ab:
2b:3c:37:76:f9:58:f7:45:22:c1:50:19:8c:6e:bf:
9f:7a:6e:83:33:8f:0e:e0:3e:59:69:28:2e:d2:42:
9b:88:a6:28:8d:fe:23:0e:a1:76:44:47:b1:01:06:
96:82:26:5a:ec:51:17:73:58:e6:e2:a0:51:9e:6d:
e1:ed:9d:87:f5:c4:64:41:6b:12:7c:50:ce:ac:7d:
6f:e2:98:bd:d2:ce:29:ae:88:dd:20:e1:de:c6:0b:
60:ab:03:c6:20:de:3a:74:ac:a7:cc:b8:c9:7a:01:
d5:35:31:25:d0:15:3f:95:7a:13:cf:c8:48:92:76:
3f:f8:b7:4d:02:83:10:22:38:ba:7f:71:fc:4c:f5:
e3:e5:99:df:0f:3f:ab:5d:07:23:2a:b7:9a:e6:fb:
f9:e6:23:22:29:8a:cc:6b:5a:24:de:4e:f8:75:9b:
29:32:b4:3e:aa:26:3a:0d:04:cf:bb:b2:ab:b0:11:
4f:a8:77:54:3b:d0:b3:13:7b:2c:59:4c:97:a8:83:
f7:ef:23:78:8a:4b:0a:30:53:76:d4:8a:87:46:42:
d0:8f:af:21:aa:38:c0:71:3a:0b:29:bf:e8:1a:2b:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:16:F2:C3:8F:EF:FB:50:A1:C4:7D:3E:5B:BB:74:B1:B4:36:FD:ED
X509v3 Authority Key Identifier:
keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3e:3f:37:c7:a4:67:b8:63:c6:94:7b:92:54:20:92:ed:28:
04:3e:5f:cb:96:af:e5:a4:5f:c1:46:06:df:35:a7:c4:65:c7:
8a:4f:38:83:e8:95:10:b0:05:0c:fd:5b:cf:c0:67:22:7c:79:
a6:c2:bc:1c:44:5a:3e:d0:9f:22:6d:7c:9f:83:90:2d:cc:ec:
d7:76:d9:52:a9:02:bc:b4:e9:a8:e3:28:58:c1:40:b6:47:14:
ac:44:1e:7d:f9:1b:71:01:1c:b2:95:45:0e:8b:2f:8c:76:ce:
c5:14:67:dc:2f:f8:86:95:ed:c7:a7:ba:d0:df:9c:d3:40:0b:
76:3f:44:8a:b3:a7:a4:ae:3b:c4:78:62:d5:92:ba:8c:cc:f0:
ab:de:4c:8a:23:be:d6:54:07:ee:e6:d6:36:4b:97:93:15:de:
4d:f5:a9:52:87:26:f4:dc:d8:4b:82:62:ea:b3:8d:e3:84:28:
5f:4a:96:25:c2:f5:b2:49:62:0a:e3:41:f6:90:c9:5a:82:8b:
f6:d6:d5:54:71:d5:f6:2b:07:5f:ff:80:04:98:72:cc:af:d0:
83:14:f9:0a:57:d3:1a:41:f9:90:13:bf:50:4d:14:26:eb:c3:
b8:44:38:92:08:1a:88:5f:0e:72:e5:1f:02:0d:0b:bb:76:4a:
4c:bb:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:31:26 2025 by rpki-client