This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
File: D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft (raw, json)
Hash identifier: 64T/3kaFJ2xo9WSjDjGFw3wRPIjdpsZS5IB7iC+E68k=
Subject key identifier: 3A:B0:F4:5C:DF:7E:13:06:F1:78:ED:1C:E9:89:C2:D9:9A:CE:40:74
Authority key identifier: D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
Certificate issuer: /CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Certificate serial: 11BC96CD34522FDDD15DF8515AAADC4B9E73BA48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
Manifest number: AC
Signing time: Wed 24 Dec 2025 15:10:27 +0000
Manifest this update: Wed 24 Dec 2025 15:05:27 +0000
Manifest next update: Thu 25 Dec 2025 17:30:27 +0000
Files and hashes: 1: D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl (hash: RHKG5pTAMTHcXOXf+BeZKryU9earAlserd9iX6/+9RU=)
2: 34352e3136342e3139362e302f32322d3332203d3e20323638363430.roa (hash: 1f4Li89JjfMh3Zvwa4e6/48Ur/rzUCE7uzz/lzOZsCc=)
3: 323830343a353434383a3a2f33322d313238203d3e20323638363430.roa (hash: FPH5t3f9p9u23ePvWI4mh8ez4iCBapk+tdB2o6Jl1+E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 17:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bc:96:cd:34:52:2f:dd:d1:5d:f8:51:5a:aa:dc:4b:9e:73:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Validity
Not Before: Dec 24 15:05:27 2025 GMT
Not After : Dec 25 17:30:27 2025 GMT
Subject: CN=3AB0F45CDF7E1306F178ED1CE989C2D99ACE4074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:f7:13:88:75:ec:8d:08:f2:55:92:9b:4d:
e7:cb:cf:29:1e:e9:19:71:32:05:0e:91:90:b8:44:
21:3c:9b:f7:92:19:3c:94:b2:99:d4:a4:6b:fd:71:
e3:15:01:46:28:7a:07:88:d3:4f:1e:41:2a:29:11:
85:20:51:ac:36:d6:83:66:e0:77:29:6d:58:a6:bf:
b0:16:66:6a:ef:8e:e8:d4:f5:05:78:b0:06:0c:ff:
be:ff:89:a0:3c:3f:cc:60:1c:64:54:9a:0d:10:b0:
7a:e5:c7:b5:fe:5b:65:06:43:36:6e:20:48:89:50:
fc:e9:26:aa:42:b1:4d:35:5c:4d:df:55:69:0f:f2:
be:04:c9:c0:53:5c:98:8d:47:cc:3b:bb:f3:1b:eb:
fb:23:a0:06:c2:52:71:5c:10:e0:04:a4:98:46:ed:
60:a7:4d:d3:2a:8e:d8:78:f6:8c:5f:f6:59:77:2f:
79:e5:4f:3f:7c:fe:2d:d6:f2:d9:a0:af:51:2b:d4:
11:ee:89:72:3e:9a:cd:9f:ca:40:0e:7d:51:de:5e:
22:37:c5:21:9e:bc:e5:3c:a1:ca:82:79:62:19:3d:
61:ff:a2:c1:7e:2e:b9:7a:25:bd:47:13:93:af:36:
f0:c2:2a:18:de:4e:90:27:54:1b:b3:8b:08:b8:20:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:F4:5C:DF:7E:13:06:F1:78:ED:1C:E9:89:C2:D9:9A:CE:40:74
X509v3 Authority Key Identifier:
keyid:D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0f:04:57:c4:74:f6:3a:97:e0:ae:ba:13:af:55:d4:b2:6f:
5e:45:40:09:37:50:ee:2d:e7:d1:e4:20:79:e7:1c:d0:88:b1:
c3:e8:29:be:b7:ab:48:e3:d3:04:7b:7e:ab:3f:59:8f:e9:03:
b5:c2:5d:b4:ee:51:b9:d9:c1:67:b5:9b:45:6b:92:0e:4f:19:
8c:f4:43:c1:5d:64:4d:5e:9d:56:ec:43:2b:dd:50:da:3b:ca:
15:7f:0f:59:07:f6:fa:7a:69:74:5a:d1:80:4c:45:54:1a:f4:
79:56:04:78:e1:e3:1d:0c:a3:85:43:86:18:8a:19:fb:77:67:
e1:c2:08:0c:e6:49:6b:74:a0:0a:28:0a:01:86:3f:03:03:f7:
ba:68:75:dd:b3:07:8d:5a:44:42:bb:25:27:45:a6:78:29:7a:
f1:5d:97:47:8d:f5:8a:78:89:39:9d:78:96:ea:13:26:12:f6:
51:b1:26:ac:b4:4e:ac:1c:89:42:dd:7a:6a:32:cd:24:7d:92:
1e:87:77:d0:c5:69:a6:24:79:c8:08:2f:55:04:e0:7a:d0:c9:
65:dd:84:c2:4e:67:e0:69:04:8b:94:c9:7f:b5:af:a6:2b:e0:
57:42:1c:9f:37:02:e7:c5:6d:a1:69:99:5c:1f:c8:d1:29:62:
8b:ec:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 08:23:15 2025 by rpki-client