This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
File: 5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft (raw, json)
Hash identifier: aXkKA4RtR13QIh8ZsdN+/U21neGR6s8dGpO97ydq8G8=
Subject key identifier: BD:02:97:D6:D9:69:DD:18:5A:CF:04:A7:5C:AA:5A:92:DE:17:AC:F9
Authority key identifier: 5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49
Certificate issuer: /CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849
Certificate serial: 89EFF86C27D6A6A031547FEE40E9BE47EA2376
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
Manifest number: 022E
Signing time: Tue 30 Dec 2025 15:23:11 +0000
Manifest this update: Tue 30 Dec 2025 15:18:11 +0000
Manifest next update: Wed 31 Dec 2025 16:51:11 +0000
Files and hashes: 1: 323830343a383738303a3a2f33322d3634203d3e20323732373133.roa (hash: iwB4G7o8/hqOjc7JM0qav32ieoxe3LTOUmlnkMiDHbg=)
2: 5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl (hash: MQtgYN1yP7yytVkjCRQEAuWrLo4T3GCl2rLEz8JUdww=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl
rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 31 Dec 2025 16:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
89:ef:f8:6c:27:d6:a6:a0:31:54:7f:ee:40:e9:be:47:ea:23:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849
Validity
Not Before: Dec 30 15:18:11 2025 GMT
Not After : Dec 31 16:51:11 2025 GMT
Subject: CN=BD0297D6D969DD185ACF04A75CAA5A92DE17ACF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:ee:93:4f:2c:04:41:e1:2d:16:b6:83:ed:
c4:63:18:2b:23:41:a5:59:9a:40:6e:16:d6:3d:f5:
09:21:c0:ca:86:e9:a6:79:d8:6a:79:97:2a:35:4e:
d4:6e:17:d6:ea:1d:5c:be:5c:5b:68:25:6c:34:2b:
cf:c3:c0:e8:d0:67:33:3f:67:16:7b:ee:ce:2d:87:
fa:74:73:e1:f0:6d:da:ff:1d:34:53:76:6b:95:22:
39:f4:92:75:41:63:0c:86:42:cf:e1:27:34:47:93:
35:55:df:e9:c2:8c:e3:8a:40:24:e8:4f:b5:16:35:
b1:99:8c:63:12:df:e6:57:ce:ba:97:a4:b5:18:b3:
b5:8f:fd:4f:a8:ff:cf:84:cf:f7:57:ec:00:62:af:
b2:e3:f9:e0:bf:ab:21:b4:0d:87:98:20:49:10:3b:
0a:14:cf:90:89:00:26:68:05:a9:92:2a:1a:5b:35:
44:8c:8f:cc:59:ea:20:7d:7a:ba:3e:6f:85:7f:7f:
68:e0:03:b0:a8:9e:29:48:c2:26:46:99:19:06:e4:
74:45:06:f7:c7:c6:43:f6:6b:0c:05:b9:19:bc:07:
85:fa:78:d1:3f:48:c1:09:e5:96:40:a2:bc:fd:d1:
ec:91:31:c5:24:dc:bb:3b:91:6d:9f:ca:77:30:25:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:97:D6:D9:69:DD:18:5A:CF:04:A7:5C:AA:5A:92:DE:17:AC:F9
X509v3 Authority Key Identifier:
keyid:5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:87:22:e0:01:48:97:a2:af:2b:74:d9:82:1b:d1:29:d0:ad:
25:ab:d2:6e:84:46:46:dd:9f:ab:41:63:4f:55:4a:e3:93:5a:
a6:eb:1f:73:3e:cf:98:f3:aa:c6:3c:14:21:74:d7:6a:1c:fa:
5d:26:fb:9f:4b:41:ad:ad:a0:3d:22:7f:b5:68:05:70:f8:2a:
38:b7:a1:b9:67:ba:c1:be:1e:f6:44:90:bf:83:98:5b:d2:16:
4b:fd:ee:7e:3f:c4:2b:05:a8:d2:6b:06:10:3a:2b:2c:59:35:
b0:23:16:4f:c6:0b:0a:b5:36:e9:8b:e4:f6:1d:a1:8e:ac:a7:
97:73:9a:ba:ee:2a:a0:a7:14:db:60:e1:d7:a0:08:23:db:1b:
1a:de:dd:5c:da:dd:2f:f7:6b:d1:aa:58:fb:d5:aa:95:58:b7:
c2:e4:a8:57:d9:76:c3:3c:a4:f7:cb:1e:79:90:29:b3:9c:eb:
54:21:b0:87:cb:e9:42:64:91:d0:e3:19:57:05:da:5c:73:97:
1d:09:48:4b:e1:f0:1c:e8:fd:ce:ac:07:05:61:31:35:aa:83:
bd:fd:7e:a1:3c:71:2b:84:d2:b9:79:bb:34:59:6d:9f:5d:0e:
4b:e3:81:d9:0a:d8:ca:54:ae:3a:54:1b:ec:02:11:22:12:32:
f6:56:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:45:27 2025 by rpki-client