This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
File: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft (raw, json)
Hash identifier: UuiCdt7wCtXhvSBuFj68CJX/zwbQ72rCZnv4aVIqwU0=
Subject key identifier: B6:4E:23:E1:49:C8:BC:0B:B3:77:5E:44:E5:B1:D2:BB:66:74:58:B8
Authority key identifier: BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26
Certificate issuer: /CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
Certificate serial: 2CF75B042D5D34EF1F84C99EEE7AB365F9482AC5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
Manifest number: 017F
Signing time: Tue 30 Dec 2025 17:05:46 +0000
Manifest this update: Tue 30 Dec 2025 17:00:46 +0000
Manifest next update: Wed 31 Dec 2025 17:33:46 +0000
Files and hashes: 1: 323830343a363930383a3a2f33322d3438203d3e20323730323434.roa (hash: LfJ27fny3HxOEf2E3+cUrLvQbGwB+jGu3gHJ5S1w/cY=)
2: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl (hash: 6CM14zt0kMXS4lGxeuwKn9yTZtlc86I33IiA+oBkRoE=)
3: 3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa (hash: 70BJQu4PLqi9KdVVab9jANTw7cydloTHwzKtBuGLFtM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl
rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 31 Dec 2025 17:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f7:5b:04:2d:5d:34:ef:1f:84:c9:9e:ee:7a:b3:65:f9:48:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
Validity
Not Before: Dec 30 17:00:46 2025 GMT
Not After : Dec 31 17:33:46 2025 GMT
Subject: CN=B64E23E149C8BC0BB3775E44E5B1D2BB667458B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:e2:0e:bc:8c:29:8e:86:29:59:f6:58:f8:
6b:f2:c5:d3:97:dc:25:22:ad:37:08:f7:fd:76:85:
0c:57:b9:73:2e:72:52:db:24:2d:11:b7:c3:c6:16:
0d:5b:d7:fe:80:21:fa:7a:d9:ef:fb:75:cb:8e:21:
70:84:1d:29:da:fa:58:61:ef:ec:16:92:10:32:9c:
72:1e:5f:52:42:43:f7:28:dd:c9:5a:52:29:69:dd:
9a:2b:0b:3c:47:e5:16:2f:63:b3:3e:2a:95:11:f6:
83:8d:e4:36:8d:b4:7b:07:c7:70:42:76:c9:1b:b7:
73:cb:33:de:fa:42:40:bc:58:f3:02:cf:e7:69:7f:
a5:56:9f:98:5c:69:5b:e4:e9:80:7f:e2:d5:1d:3a:
b8:6b:20:3b:77:5f:c4:91:f8:9a:41:6b:c6:33:1f:
38:c9:98:e3:a5:f1:31:00:cf:04:d0:0f:87:99:cd:
13:1a:37:a7:49:da:c1:a9:7f:84:73:84:48:86:bb:
1e:1d:bf:e3:80:54:92:95:b5:10:c5:99:14:d9:3b:
91:6b:ee:1c:44:8b:75:c1:41:7e:ae:01:7c:07:2b:
61:73:ad:11:2f:ef:58:05:80:74:19:a3:ff:82:fb:
29:b5:21:1f:ac:8a:52:71:62:9f:ab:0f:7e:ed:d4:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:23:E1:49:C8:BC:0B:B3:77:5E:44:E5:B1:D2:BB:66:74:58:B8
X509v3 Authority Key Identifier:
keyid:BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:40:b1:82:a3:01:7d:1a:89:08:10:f8:01:15:27:ce:72:10:
6a:8f:3c:bc:19:fb:2f:34:06:d6:e7:dc:d5:ee:d5:f9:9f:2e:
dc:e3:de:5e:eb:41:20:f5:c6:84:53:4a:06:01:ff:34:e3:d8:
31:4c:29:22:59:52:6c:8f:4a:99:b6:f5:c9:bf:83:7f:ad:b9:
78:f1:62:9c:46:49:8a:cc:e6:35:13:fb:22:b0:71:ff:0d:fe:
2a:f0:4d:79:63:aa:21:c2:54:86:a9:1e:ec:a3:05:53:7a:f4:
e7:09:68:75:b1:0b:40:ec:74:f1:f5:61:83:a5:23:44:43:c3:
76:99:3d:0b:1e:0c:b6:74:8e:ba:3c:64:e3:fa:96:5c:e4:31:
5c:ee:59:27:8e:08:0a:67:9f:5f:de:6b:25:94:e2:14:25:ba:
81:89:84:04:59:19:2e:86:7f:b5:0b:2f:54:37:67:2c:5a:0c:
12:24:48:99:75:b0:5d:7f:eb:24:e6:de:59:c3:43:09:c7:29:
a0:04:50:91:79:a4:fa:52:6e:d2:36:2f:ae:bd:3b:b0:92:4c:
95:ce:cd:9b:3a:08:2a:21:31:2f:c1:84:3d:92:f0:5c:98:1b:
74:42:1d:c9:63:7d:db:6f:a5:f1:a9:8f:10:f6:f3:98:ec:44:
6a:0e:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:38:25 2025 by rpki-client