This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
File: 42361EAB494B759A64EFEB313189F9E2DF6603C8.mft (raw, json)
Hash identifier: X8cc9eE4WIu2yfFXBX52F92l4JIXuUeIByBObJpdJ2w=
Subject key identifier: 8E:3A:5A:CD:6F:2D:E9:60:CE:DC:26:CB:F1:20:51:1F:D7:4E:0D:15
Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Certificate serial: 26614CD121D98C9C6C67F74A6EA7BCBE482F79D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
Manifest number: 0345
Signing time: Sat 20 Dec 2025 14:52:11 +0000
Manifest this update: Sat 20 Dec 2025 14:47:11 +0000
Manifest next update: Sun 21 Dec 2025 16:28:11 +0000
Files and hashes: 1: 323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (hash: ENkngCJgmku9h/YUGevS0xZQjyUztj3jNjafQ8PFgic=)
2: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (hash: IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=)
3: 42361EAB494B759A64EFEB313189F9E2DF6603C8.crl (hash: ve350YuO/YMNfDZTQ34fBeJ7Oa+Ycj0Plgli31KEofU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 16:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:61:4c:d1:21:d9:8c:9c:6c:67:f7:4a:6e:a7:bc:be:48:2f:79:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Validity
Not Before: Dec 20 14:47:11 2025 GMT
Not After : Dec 21 16:28:11 2025 GMT
Subject: CN=8E3A5ACD6F2DE960CEDC26CBF120511FD74E0D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:a5:57:db:f9:e9:7a:04:b7:fb:61:e8:f7:
af:16:c9:94:ee:48:4c:b3:bd:50:66:79:e2:27:4d:
37:b9:5b:df:97:69:38:b0:5b:f4:80:9d:ca:40:cf:
b5:84:6c:90:72:d1:d0:3a:6d:9a:0c:37:d2:1d:ac:
a8:44:65:b2:0f:da:29:93:79:16:84:5a:ea:1d:6d:
14:0c:49:b9:2f:77:b4:9e:53:ef:3e:5c:a7:27:1a:
d3:5b:9f:fb:24:cf:ab:f2:2e:1a:24:59:da:40:a2:
b1:83:e1:6f:ae:3f:19:29:b7:54:e3:a1:f0:e6:27:
eb:ca:19:f0:5a:a9:f1:1d:1d:5a:45:5f:e0:0d:42:
2f:48:90:57:3c:e1:e1:7e:9a:8d:33:d0:dc:14:c1:
33:2b:49:c0:4c:77:f4:36:26:a3:9d:fd:de:6f:d5:
c7:72:94:76:6e:a5:34:f8:7a:75:12:fd:e8:7d:84:
76:79:89:b3:f7:1b:89:71:7c:44:f4:2b:7d:54:40:
8b:b6:c4:23:05:c1:05:6e:1c:61:97:68:33:b3:2f:
5c:a0:3b:51:f9:c3:0b:85:f0:2c:f4:44:9e:ff:92:
02:44:31:d0:8a:4e:0e:b0:7f:03:74:4d:3b:ea:b6:
6c:3e:cf:c4:ef:8b:06:16:e6:64:cc:21:71:46:d6:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:5A:CD:6F:2D:E9:60:CE:DC:26:CB:F1:20:51:1F:D7:4E:0D:15
X509v3 Authority Key Identifier:
keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:4e:41:7b:c4:49:4f:6f:38:31:15:6d:0b:08:ab:31:21:
42:a4:78:aa:f2:0c:e5:a9:57:30:03:22:c2:3e:9f:af:cc:11:
a4:26:ce:e7:4c:bc:36:e2:d2:87:ad:48:84:40:80:dd:d9:db:
9c:6b:f8:2d:a5:54:0c:94:47:6d:42:cb:dd:24:9d:e3:df:ee:
b0:a0:b5:1e:a6:00:e8:8b:73:41:43:41:bf:9f:0a:b3:dc:cc:
a2:06:bc:45:28:c0:4d:d0:5f:42:3a:6d:4f:c7:10:ff:48:0a:
93:25:1d:57:58:65:51:d6:b1:e9:a4:5b:87:b5:e2:62:38:2a:
75:f4:df:bf:b3:12:76:09:4a:17:6e:46:63:b3:35:7c:71:b8:
f4:41:79:e7:f5:12:75:85:72:aa:d1:a9:57:ee:e2:36:38:de:
fb:e0:97:57:69:6c:24:e6:aa:34:3a:03:6f:a1:12:73:98:9c:
20:9e:6c:22:ae:4d:4e:78:2d:27:ad:66:a2:f0:7d:fe:fc:37:
e8:f1:b5:42:b5:d6:6b:1c:2a:d9:ea:03:11:15:9a:0c:62:13:
68:6f:d3:ed:ff:de:cf:61:b2:e2:03:e2:58:64:c7:33:97:72:
40:30:06:b8:52:70:2a:09:7e:ce:c8:9e:19:45:52:eb:1b:57:
29:66:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:06:32 2025 by rpki-client