This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
File: 8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft (raw, json)
Hash identifier: EfMArIvd0Yeixv1sPTatWAzlHhtX3ZaFYgG/WFYLc20=
Subject key identifier: 77:F5:1C:98:52:0D:AC:20:5E:11:39:C0:AA:C9:FB:73:37:32:51:6A
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Certificate issuer: /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial: 74560CDE5F06E902D0F7A8D45B2E5A652B879045
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
Manifest number: 01A0
Signing time: Mon 22 Dec 2025 10:36:11 +0000
Manifest this update: Mon 22 Dec 2025 10:31:11 +0000
Manifest next update: Tue 23 Dec 2025 12:02:11 +0000
Files and hashes: 1: 34352e3136392e342e302f32322d3332203d3e20323638303830.roa (hash: lXIva/FmRzPc3dMx95dHIcJMlu0gin2uVYLawNNRhhM=)
2: 323830343a353762303a3a2f33322d313238203d3e20323638303830.roa (hash: CFPBnj3EvE+lsQQOYsMIJqDxNxjw6BVblmWnNO38t00=)
3: 8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl (hash: cK2g3wtbTVQUcu7LPvWpatqNqEUSHckFF8GUygYhJFw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 12:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:56:0c:de:5f:06:e9:02:d0:f7:a8:d4:5b:2e:5a:65:2b:87:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Validity
Not Before: Dec 22 10:31:11 2025 GMT
Not After : Dec 23 12:02:11 2025 GMT
Subject: CN=77F51C98520DAC205E1139C0AAC9FB733732516A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:c5:9f:ce:75:1e:e1:62:1a:d3:a3:3a:6d:
97:7d:5e:0b:c2:1b:90:2a:c2:48:68:c5:c3:f6:ae:
bb:24:39:75:9f:60:5f:dd:ac:f5:76:b1:3c:e0:fe:
43:d2:30:9a:7c:cc:63:3e:e5:92:28:07:63:09:5a:
64:62:a9:80:0c:cf:e4:71:bd:4c:66:f0:ef:0a:f8:
2e:51:78:d3:79:54:5e:90:ab:49:50:e2:a0:94:14:
25:a6:a0:3a:24:5c:ac:b4:f2:df:6a:42:3e:b6:c1:
75:eb:96:c2:ba:c1:43:40:6d:79:11:08:99:e4:e1:
71:7d:07:ec:a2:b5:93:3f:3e:3e:0b:31:4e:a4:bb:
ff:c4:c1:7e:74:b0:ae:1c:f3:41:f7:d2:ea:f7:17:
4f:c7:f9:1c:18:62:c8:22:83:19:55:7d:e8:15:f3:
24:a9:a5:5e:5c:d9:18:c3:3e:ce:6d:a4:7b:3a:b8:
38:5b:e1:67:54:bb:d3:30:d6:d4:be:2f:72:3a:2d:
38:89:6e:27:77:5a:89:cd:de:44:4b:ed:8d:d3:72:
d5:cb:e4:94:1a:20:4d:4d:91:04:df:4e:44:83:0b:
bf:ca:ae:1a:c8:99:5d:58:6f:1d:83:0c:9f:dd:e4:
28:96:17:fa:1d:65:b5:1b:cf:b5:15:8e:31:b5:d5:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:1C:98:52:0D:AC:20:5E:11:39:C0:AA:C9:FB:73:37:32:51:6A
X509v3 Authority Key Identifier:
keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:92:a9:80:bb:af:06:4e:00:40:5e:a8:cb:cc:c1:9d:66:39:
29:4f:20:e6:2d:f8:02:de:bd:27:8d:5f:0b:7b:dc:66:1c:39:
29:6b:46:4e:1f:66:f5:56:0f:4b:18:ca:f2:bb:8f:15:7f:87:
c2:03:09:4e:9d:1a:eb:17:89:03:03:bb:29:43:b2:87:ff:4b:
70:e1:2d:df:20:8c:5b:33:9b:2b:f5:4e:2b:85:b5:70:26:22:
55:b4:04:33:11:50:0c:66:7d:6f:98:4b:38:0e:b8:1e:b1:cb:
99:d9:4d:50:46:ea:43:16:28:50:0e:c1:90:18:1d:75:5a:c8:
0f:f0:00:e5:0f:f0:b2:52:3f:6d:67:d5:aa:d1:cc:e7:52:69:
42:59:f4:a2:3a:fa:10:bd:80:63:37:3f:88:1f:d2:32:fc:47:
fc:15:63:2e:d5:49:74:29:96:57:1a:04:61:bb:32:1f:55:8d:
f0:9c:ff:88:f9:ac:e6:d1:6b:bf:98:06:82:25:6f:33:1a:ca:
d5:6c:af:c1:15:9e:97:a3:55:8f:24:ff:e6:be:ef:b3:c4:25:
26:a1:1e:3d:71:d7:be:dc:38:a5:3f:5a:50:aa:86:d4:95:42:
9b:0e:5f:02:12:d9:d5:c2:f5:2e:19:1b:6b:64:c3:c3:50:a6:
25:10:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:59:11 2025 by rpki-client