This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
File: 7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft (raw, json)
Hash identifier: 4zLH5YPd8VJXwm4XC7wQXYVOD+OO5JObprhQQ96vf0E=
Subject key identifier: 80:35:85:65:84:D7:60:6E:09:D9:88:E8:94:7C:0D:EE:78:27:70:C8
Authority key identifier: 7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2
Certificate issuer: /CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
Certificate serial: 09703B696AF5ED0D0C0CDE7B090657EA98966EA8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
Manifest number: 0342
Signing time: Mon 22 Dec 2025 16:57:55 +0000
Manifest this update: Mon 22 Dec 2025 16:52:55 +0000
Manifest next update: Tue 23 Dec 2025 19:53:55 +0000
Files and hashes: 1: 323830343a336563633a3a2f33322d3438203d3e20323636363231.roa (hash: tHqlXyqnCCZyA3FtBDeOSMEgIem0rhL5KjTo9sIP/Bc=)
2: 3132382e3230312e39322e302f32322d3234203d3e20323636363231.roa (hash: dopPXcVGhPEAGfQ7Sy6j+231fueSvFhNbw/rGWbZUwM=)
3: 7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl (hash: CaD+kOFQc5jLlGzqijBhDJXirVS34wbyIdwxS7FxEdU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl
rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 19:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:70:3b:69:6a:f5:ed:0d:0c:0c:de:7b:09:06:57:ea:98:96:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFFE4F07BF1202AF1654B9754000691AB38F4D2
Validity
Not Before: Dec 22 16:52:55 2025 GMT
Not After : Dec 23 19:53:55 2025 GMT
Subject: CN=8035856584D7606E09D988E8947C0DEE782770C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:cd:fd:17:97:91:b8:10:cf:e3:36:bb:dd:
cb:7e:fb:4f:23:5c:57:61:11:b9:c3:a4:a7:1a:92:
fe:49:5e:ed:55:34:b1:e6:f5:50:91:2c:b9:37:cd:
9d:07:24:a5:09:56:a7:40:fe:ba:f8:e9:c0:44:98:
79:79:77:1c:6f:a4:9c:97:6b:01:b7:46:25:cc:59:
0d:aa:bf:f6:8d:32:63:0f:b9:59:b2:86:d7:3b:02:
14:5f:61:0f:8c:a7:70:16:75:a2:9a:82:99:1b:6d:
48:e8:fb:ed:f3:1a:a0:f3:8f:d8:18:9a:8a:ca:72:
e7:cb:ed:d6:53:b6:2f:f7:77:33:3c:16:b3:33:34:
3f:95:19:7c:56:c8:49:d6:e4:16:d5:ad:b3:b9:c6:
26:54:82:ac:c9:14:fd:9c:20:3d:07:7f:bd:49:04:
af:b0:3a:fb:be:f0:04:b7:df:d2:e4:7b:dd:00:55:
de:11:16:6d:48:51:05:ff:02:eb:a6:48:2d:ba:a2:
33:d8:62:33:dd:1c:fe:c6:b1:2e:ef:55:a1:03:7c:
90:9b:33:04:6a:86:30:4d:d4:3b:6f:a8:d4:f5:31:
66:9d:08:28:da:db:c9:34:a8:1e:8a:90:6e:5e:38:
34:51:08:b9:92:ff:62:4f:cb:b3:1f:85:3a:22:e2:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:85:65:84:D7:60:6E:09:D9:88:E8:94:7C:0D:EE:78:27:70:C8
X509v3 Authority Key Identifier:
keyid:7C:FF:E4:F0:7B:F1:20:2A:F1:65:4B:97:54:00:06:91:AB:38:F4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuJdaidoqLFp7ozw3tynaHxZvKHeKNecPr17RAN6Ksua/1/7CFFE4F07BF1202AF1654B9754000691AB38F4D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:44:ee:e0:42:e9:73:21:f1:82:9f:26:fd:b0:75:1a:84:
80:68:a3:d0:53:62:d4:14:5b:37:73:62:9b:a2:22:c5:d6:9d:
f4:60:1c:ec:9f:e7:46:78:65:aa:b9:9a:2f:82:04:66:7d:52:
b5:9d:f9:1a:28:8d:81:ff:ad:b7:f4:13:a7:9e:79:4e:ce:cf:
fb:e3:e5:e9:49:db:11:55:42:af:09:f5:74:2d:26:ea:5d:21:
00:07:dd:5c:1d:b6:86:13:a4:d8:10:1c:b0:10:c1:9d:a9:9a:
d8:fb:38:e7:05:c3:18:64:f0:af:c2:9d:73:49:fa:68:a0:1d:
d1:1d:82:c9:0b:93:2a:ac:e3:d1:74:b2:d5:92:f5:2f:be:be:
fb:79:6b:76:e7:ec:d1:41:58:60:06:b2:ff:cd:66:ce:31:64:
a9:b0:a7:6b:b0:fb:fe:38:65:3b:e8:72:7b:85:1b:f2:b9:dc:
6e:90:2c:81:21:a0:f9:47:e1:5e:42:d0:2f:91:2c:44:77:3f:
9b:36:c9:e4:24:a9:df:b9:4a:9c:4d:81:7e:06:73:4e:72:9a:
73:48:f5:0b:60:86:26:40:7f:7f:d0:8f:34:f9:a2:10:cf:21:
fe:5b:a6:dc:b5:42:b5:a7:b6:a7:d8:13:57:4b:d1:83:c2:d8:
9a:b1:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:51:38 2025 by rpki-client