This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
File: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft (raw, json)
Hash identifier: 0L5Qzai90BraD8w2MDBsVe4ANJgkIl0UbFev+uohsiM=
Subject key identifier: 3E:0E:82:68:2B:C4:E1:B0:62:96:37:BB:FE:97:AA:59:57:87:6D:1E
Authority key identifier: CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A
Certificate issuer: /CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A
Certificate serial: 06A1A8BD579A8C6A9ABA16EEFECFF8B0170B1583
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
Manifest number: 4F
Signing time: Fri 19 Dec 2025 20:08:47 +0000
Manifest this update: Fri 19 Dec 2025 20:03:47 +0000
Manifest next update: Sat 20 Dec 2025 20:29:47 +0000
Files and hashes: 1: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl (hash: hkNswjWK9/QQKFocm1azZW6CnMV933/QZK4nKY+01Sg=)
2: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: iSKt+O/N+iNmfjUfkl/1zsDgFZ6/Nhl0ym5tKlT/l5M=)
3: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: 5Br5hbvYBXoc32hzXjNMrP/gjwU0zbkYoTihpOwr6ok=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl
rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 20:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a1:a8:bd:57:9a:8c:6a:9a:ba:16:ee:fe:cf:f8:b0:17:0b:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A
Validity
Not Before: Dec 19 20:03:47 2025 GMT
Not After : Dec 20 20:29:47 2025 GMT
Subject: CN=3E0E82682BC4E1B0629637BBFE97AA5957876D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:4b:47:cf:1b:d1:df:a2:1d:46:db:8a:f6:
21:4a:88:39:c4:55:9d:e6:42:f1:6a:0d:58:5a:35:
03:fa:ed:b8:37:2f:18:bd:9d:c8:fb:be:b4:3d:f5:
68:ac:15:70:d9:e6:b9:e6:cc:f5:1a:ac:e8:64:c7:
ac:23:47:20:bd:8e:54:9f:1c:c0:d3:69:84:92:2f:
d5:80:92:6d:45:da:0b:e8:53:cd:f4:dc:84:1d:97:
f4:15:78:9c:d3:cc:af:d2:fe:be:51:a6:77:1a:90:
d6:0d:f6:9f:a5:ee:b4:1c:9a:9a:ba:25:4e:74:af:
4e:fc:db:48:3e:9c:d4:d3:a4:84:54:a3:91:51:61:
c3:da:c4:62:d8:a4:fc:49:9e:18:cf:f3:dd:67:ed:
97:42:c9:33:88:f4:b3:74:1d:d0:a6:d9:07:38:e0:
6e:48:cd:b1:54:1c:d6:9c:3d:1a:11:e8:4e:ca:f8:
10:d0:44:92:4d:7c:d6:56:35:4e:82:c8:84:76:7c:
a4:13:3c:e0:42:c2:77:01:b6:ef:01:4e:49:68:3c:
a9:61:7b:68:56:6f:0f:09:f8:79:b5:ec:3b:56:c8:
b9:48:42:81:45:81:fb:56:13:e5:59:11:62:e3:08:
d2:72:04:d4:e3:fd:93:32:72:37:a1:94:a4:ac:44:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:82:68:2B:C4:E1:B0:62:96:37:BB:FE:97:AA:59:57:87:6D:1E
X509v3 Authority Key Identifier:
keyid:CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:40:93:74:05:4f:bc:0f:fa:15:68:32:cb:24:09:10:16:7a:
3a:30:30:9a:02:03:54:3d:8e:86:4e:81:97:34:fa:56:17:07:
c3:e3:d4:7b:01:f7:e9:b8:2f:09:bc:41:cf:2f:5b:53:33:bd:
4e:f5:a0:05:6d:27:95:ff:73:bd:a0:98:3f:68:28:04:3a:ce:
e6:6e:85:62:b9:b5:d8:14:c9:35:27:d2:d2:84:ab:3e:ae:70:
6c:20:e4:dd:09:58:c0:df:38:56:ff:a8:43:6d:d5:2c:ca:73:
32:41:49:97:55:28:14:6e:94:5d:7e:ce:62:f2:42:65:7b:6a:
01:24:a7:db:bf:1e:26:a3:4d:87:7a:05:61:7d:c4:d2:b5:3c:
b9:2c:d5:80:5d:a4:23:ba:2b:93:6e:8a:1d:67:c3:ba:1b:ea:
8e:a1:b1:7c:88:92:22:c7:df:67:c5:55:4c:55:fe:3f:2d:a6:
be:c6:80:9f:33:81:ca:5c:7d:b6:22:62:b7:87:3b:58:f5:28:
49:d9:a2:38:75:7e:d7:9d:af:ba:89:79:2d:25:f3:f7:67:dd:
97:9c:be:52:85:e8:95:fc:0e:5c:fb:85:75:a8:9f:25:e1:34:
06:2b:1f:e9:85:1e:b4:d1:49:23:15:4f:3a:84:62:af:ac:ad:
e7:62:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:09 2025 by rpki-client