This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
File: BA3E764B84DA8622ADE38A43DC527A79F7881585.mft (raw, json)
Hash identifier: e3L4mFmJyc8uXnq2xSqc5327ErF5pYAK15VR9mxJhLg=
Subject key identifier: DD:BD:08:27:84:E8:12:09:FB:3E:3F:96:59:B5:A0:CD:17:3C:BD:BD
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Certificate issuer: /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial: 7697317D07F2DEBD1AE7E3B9A3A1FDE399BC7DB6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
Manifest number: 29
Signing time: Fri 19 Dec 2025 09:26:41 +0000
Manifest this update: Fri 19 Dec 2025 09:21:41 +0000
Manifest next update: Sat 20 Dec 2025 09:34:41 +0000
Files and hashes: 1: 323830343a6636383a3a2f33362d3336203d3e20323633353834.roa (hash: x8uXLzYJ3KQgEVIKfWCOnvuX0Q4DS24j88C/gxom4ZM=)
2: 3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (hash: 5Wjj8bzw0RazLZKAchZPhzS06hskM1n65O+NoY45Nt4=)
3: 323830343a6636383a323030303a3a2f33362d3336203d3e20323633353834.roa (hash: uYq8Z2eSQOmRiD5ILvx6fyjRk9b9+qtvQGSCE7Ep2e8=)
4: 323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa (hash: MZgRTyf2J28RWgfhi5URnSouRJuk3sbODbnWZpe0v+A=)
5: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (hash: t50JabpR/fHm4jYbN9ijYjyBCxDsn3x6P1Shp1ReHsQ=)
6: 323830343a6636383a363030303a3a2f33362d3336203d3e20323633353834.roa (hash: vghdzbzTW9gbTQBL/z6/MB6BKjAIv4vGcKbKudcyj1g=)
7: 323830343a6636383a333030303a3a2f33362d3336203d3e20323633353834.roa (hash: uiOrLiMshlGbHKdZdj77/3SCjLAFsyVnDP7Zz91l1A4=)
8: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (hash: 9cvoKxhkNAQCqmZ4MxIm2viMWaoXDeioiIjsieTsL9g=)
9: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (hash: TT6alJAbxGe6MzLt59P++mK+/7Se+vb1JMyKuM/QDqI=)
10: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (hash: P1MG0nPdsp5CzH8mrfswYDpVTZqDRgdOnx+GwgAa1z8=)
11: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (hash: xoeRtFQ3sjtZXLJixW8KyfpWs2JWWXX4DSEdzHDcRQE=)
12: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (hash: 2du9xE+p67VA79UZjUxhk4cb6pu/g5bYUVcnOk00dsk=)
13: 323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa (hash: qKQQpw1mjeg1W/0vZWkgb+QCXVU+GySV+l4MeFtxQac=)
14: 323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa (hash: LJWMhYXgYibrkvJawC53GG6yEZMzQWX5wlL36dgS80w=)
15: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (hash: ndx2DdUf4v1bm0a+hqnEwvujPvBCw1fLMGxzNzWbE1E=)
16: 323830343a6636383a373030303a3a2f33362d3336203d3e20323633353834.roa (hash: ItfrLUpu0thSvMym/sdBqPRf1tcrXSLOyHc4sTMgWT0=)
17: BA3E764B84DA8622ADE38A43DC527A79F7881585.crl (hash: 6yF6YmrPqOKdfGQSZz+/N+bYtkO9tUcbKdfHg2ZeZxo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 09:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:97:31:7d:07:f2:de:bd:1a:e7:e3:b9:a3:a1:fd:e3:99:bc:7d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Validity
Not Before: Dec 19 09:21:41 2025 GMT
Not After : Dec 20 09:34:41 2025 GMT
Subject: CN=DDBD082784E81209FB3E3F9659B5A0CD173CBDBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:e1:fc:58:68:ba:50:33:4f:c5:3a:0c:ec:
60:8d:8f:9e:66:a5:5b:95:98:72:b9:7e:85:5f:8a:
f4:49:4b:d2:49:48:ff:7d:08:45:78:1f:a1:a3:a5:
1c:0d:bf:4d:39:1e:70:59:9d:fa:eb:d8:25:a9:30:
cc:76:d9:79:cd:b4:7c:6d:7b:f2:d4:6e:01:68:d1:
59:4e:b5:6c:91:54:7b:c6:22:70:0e:5a:d2:41:e4:
23:3f:78:dc:7a:81:e7:2c:d2:82:3c:1d:7c:64:e8:
4e:8b:97:ee:17:5e:ba:bf:bd:9f:60:32:6c:24:de:
f4:5c:27:ac:08:19:0e:c4:f0:1e:95:19:12:81:7c:
a6:79:8f:f5:f7:59:19:d5:43:30:9e:0c:a1:cf:65:
61:f7:8f:2f:17:b7:12:24:38:46:97:b1:b9:49:47:
25:12:90:c5:ea:25:f2:1a:25:0e:1d:e1:45:ca:57:
b6:db:db:16:80:e5:8c:73:95:86:51:8c:1e:ac:31:
da:8b:17:6d:34:51:63:96:3f:a9:fc:c5:b4:01:ea:
ed:fa:46:91:f0:12:93:50:fd:d5:20:92:1e:d3:a5:
3a:26:f1:6a:a4:0f:bb:8a:38:83:13:72:2d:0c:8b:
ea:a4:b8:1a:7c:7e:31:c4:92:d5:50:b9:fb:de:63:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BD:08:27:84:E8:12:09:FB:3E:3F:96:59:B5:A0:CD:17:3C:BD:BD
X509v3 Authority Key Identifier:
keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c3:0f:d8:95:36:84:ba:04:d1:dd:2b:91:61:1d:2a:8c:a9:
cc:34:4e:77:1b:f2:c1:8c:71:13:fe:54:fe:24:02:4f:b1:15:
cf:a1:6d:89:24:1c:56:5f:af:55:98:54:80:92:81:28:75:a3:
f0:af:80:59:9d:cf:4a:4d:e5:f9:1c:79:b4:ab:e2:22:a6:7b:
20:eb:7c:3d:d1:12:ae:ea:8e:1b:7d:ad:00:3c:d5:35:ae:05:
e3:8f:34:8f:c5:a8:85:fa:45:70:c7:88:7b:73:50:f9:35:3b:
af:0e:63:64:9a:15:1d:b2:02:9f:09:6e:ee:d5:42:7c:84:bd:
b6:7b:b1:70:ef:3e:a6:80:91:bf:b7:4c:ec:30:f1:de:bc:d6:
f2:60:a3:56:86:d9:52:98:1d:b0:fa:59:84:e5:c3:61:63:45:
de:2a:86:91:bb:31:f9:b4:a9:3f:90:72:74:16:c1:4c:88:b7:
1a:d3:bd:03:95:42:cf:b8:8f:07:2f:1d:5d:62:f4:ba:30:49:
77:82:3f:3e:1c:28:30:15:0a:8e:62:23:92:54:b4:3a:06:28:
ca:9b:35:9f:94:a0:c1:d9:ab:89:bf:da:4c:fc:7a:b5:78:71:
3c:73:19:bf:b5:26:65:49:ad:98:30:ea:74:6d:51:fc:d4:4b:
f3:c8:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:02:55 2025 by rpki-client