This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
File: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft (raw, json)
Hash identifier: UV4+N9sClRm0UyAl6PoMcWuIDjRAVm2hzcVCCoJmJ4w=
Subject key identifier: 9D:A4:41:5E:A7:48:25:C2:9E:FE:9C:91:BE:52:E8:AD:61:59:C7:27
Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Certificate issuer: /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Certificate serial: 65C10BA78B7AAE79644333DB886F67CB5076799B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
Manifest number: 2C
Signing time: Fri 19 Dec 2025 22:01:41 +0000
Manifest this update: Fri 19 Dec 2025 21:56:41 +0000
Manifest next update: Sat 20 Dec 2025 22:41:41 +0000
Files and hashes: 1: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl (hash: Aos5erkSDsQuZK2QSeVhYb58aa0Z6KBqwciTYa49kEI=)
2: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (hash: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=)
3: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (hash: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 22:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c1:0b:a7:8b:7a:ae:79:64:43:33:db:88:6f:67:cb:50:76:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Validity
Not Before: Dec 19 21:56:41 2025 GMT
Not After : Dec 20 22:41:41 2025 GMT
Subject: CN=9DA4415EA74825C29EFE9C91BE52E8AD6159C727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:44:50:89:3a:e7:22:b1:cd:d0:87:ac:03:
6f:62:a2:41:09:f8:e0:f6:bf:45:dd:45:6d:46:42:
de:74:c4:34:f8:8b:4c:90:ed:dd:f8:fb:d6:20:af:
2f:57:8a:63:83:05:4d:c6:54:e9:fd:84:02:e7:1f:
b5:1b:d0:d8:8f:c6:61:98:2d:ee:8f:20:fb:8a:9e:
dd:d1:3b:33:31:c4:14:3d:9e:64:4b:ef:49:53:32:
a5:20:c2:16:97:c7:b8:1d:3e:8e:9d:32:fb:11:4b:
01:05:bb:f2:51:8a:44:7f:4b:59:f4:7c:e8:be:60:
d5:16:cd:07:ec:2c:5b:87:11:1c:8d:70:d0:20:db:
55:ee:65:fd:07:bf:a3:12:dd:78:00:51:ec:07:8d:
29:ee:1b:10:87:35:c3:10:75:02:0b:95:90:06:29:
6d:a3:77:d7:48:59:3b:b0:81:2b:d8:a7:a1:57:0b:
08:88:f2:a6:9f:c6:0e:94:84:d0:84:49:86:ce:7e:
b6:82:66:42:3c:6d:59:22:c5:99:15:12:25:3a:3c:
28:16:58:b5:a6:3b:e0:c0:d6:54:b5:aa:1e:b7:ed:
7c:ad:59:1e:7a:c3:8a:02:2a:e1:7d:5f:aa:e2:7f:
68:52:b4:97:ee:2b:e5:e1:d3:a9:16:4f:2c:57:00:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:41:5E:A7:48:25:C2:9E:FE:9C:91:BE:52:E8:AD:61:59:C7:27
X509v3 Authority Key Identifier:
keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c0:bf:f8:ba:af:56:1f:44:6a:7f:b0:0e:53:fc:df:17:c8:
7d:82:fa:70:3f:f9:ec:db:9e:30:a6:b3:40:2d:4d:2f:c9:e2:
4e:b9:3c:0e:43:9e:4d:22:51:fb:28:aa:7d:39:29:c6:02:8c:
dd:07:2d:c6:65:b5:ea:60:ac:50:ed:ea:e2:8c:c7:7a:46:13:
2c:a8:65:27:10:ab:6f:ea:29:71:fe:d0:4a:97:cf:48:16:2c:
70:b7:02:1c:7e:da:ae:53:8e:da:93:42:e7:a8:ad:63:e2:d6:
25:6b:c3:7b:5e:8b:6a:66:b7:5f:f8:28:b7:6a:76:ae:07:cb:
d8:ac:0a:63:eb:b8:d4:7c:57:6a:23:b9:e6:68:8b:25:74:da:
ee:ae:0e:47:8c:de:4a:a4:37:d9:32:4f:d1:82:0b:00:41:1e:
5e:3b:c9:05:7b:0f:05:bf:09:84:17:18:d1:e6:6b:9f:89:5c:
1c:45:ef:93:9d:8c:44:49:f8:4b:41:74:60:70:1c:3a:ea:9e:
59:02:d8:a1:76:91:d9:b5:ed:56:f1:d2:0c:26:a9:df:b0:bd:
72:fe:7e:db:70:9f:3d:90:b6:9a:bb:99:e6:43:d4:47:c1:83:
2b:60:11:94:15:8b:1f:78:2e:45:75:f0:15:99:6c:50:57:46:
da:23:1e:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZcELp4t6rnlkQzPbiG9ny1B2eZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFENkU4MTU4RjlFRkU5MUU5QUMwNjdGOTlBQUU1QjM0
RkI3QzdBODAeFw0yNTEyMTkyMTU2NDFaFw0yNTEyMjAyMjQxNDFaMDMxMTAvBgNV
BAMTKDlEQTQ0MTVFQTc0ODI1QzI5RUZFOUM5MUJFNTJFOEFENjE1OUM3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MkRQiTrnIrHN0IesA29iokEJ
+OD2v0XdRW1GQt50xDT4i0yQ7d34+9Ygry9XimODBU3GVOn9hALnH7Ub0NiPxmGY
Le6PIPuKnt3ROzMxxBQ9nmRL70lTMqUgwhaXx7gdPo6dMvsRSwEFu/JRikR/S1n0
fOi+YNUWzQfsLFuHERyNcNAg21XuZf0Hv6MS3XgAUewHjSnuGxCHNcMQdQILlZAG
KW2jd9dIWTuwgSvYp6FXCwiI8qafxg6UhNCESYbOfraCZkI8bVkixZkVEiU6PCgW
WLWmO+DA1lS1qh637XytWR56w4oCKuF9X6rif2hStJfuK+Xh06kWTyxXAAtBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnaRBXqdIJcKe/pyRvlLorWFZxycwHwYDVR0j
BBgwFoAUcdboFY+e/pHprAZ/marls0+3x6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHA4a0F4UUJWc0xnZWdOUTRFdjNleFh4eHN3RUt6QjJXVVROaXptRWV4
TDIvMC83MUQ2RTgxNThGOUVGRTkxRTlBQzA2N0Y5OUFBRTVCMzRGQjdDN0E4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDZFODE1OEY5RUZFOTFF
OUFDMDY3Rjk5QUFFNUIzNEZCN0M3QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHA4a0F4UUJWc0xnZWdOUTRFdjNleFh4eHN3RUt6QjJXVVROaXptRWV4TDIvMC83
MUQ2RTgxNThGOUVGRTkxRTlBQzA2N0Y5OUFBRTVCMzRGQjdDN0E4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAecC/+LqvVh9Ean+wDlP83xfIfYL6cD/57NueMKazQC1NL8niTrk8DkOeTSJR
+yiqfTkpxgKM3QctxmW16mCsUO3q4ozHekYTLKhlJxCrb+opcf7QSpfPSBYscLcC
HH7arlOO2pNC56itY+LWJWvDe16Lama3X/got2p2rgfL2KwKY+u41HxXaiO55miL
JXTa7q4OR4zeSqQ32TJP0YILAEEeXjvJBXsPBb8JhBcY0eZrn4lcHEXvk52MREn4
S0F0YHAcOuqeWQLYoXaR2bXtVvHSDCap37C9cv5+23CfPZC2mruZ5kPUR8GDK2AR
lBWLH3guRXXwFZlsUFdG2iMeNA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:46 2025 by rpki-client