This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.mft
File: 45A9D6A3E95D9881210149B7208CB8921A7716CB.mft (raw, json)
Hash identifier: VbFttmUO7KEVqdHVHHG7/MdUBqEzNEDiwtOe5XQYCWI=
Subject key identifier: D7:F0:EF:12:C0:D7:5C:BE:A1:38:5A:1D:7B:5D:41:6B:2C:85:5E:EA
Authority key identifier: 45:A9:D6:A3:E9:5D:98:81:21:01:49:B7:20:8C:B8:92:1A:77:16:CB
Certificate issuer: /CN=45A9D6A3E95D9881210149B7208CB8921A7716CB
Certificate serial: 166D9771933477791868F2863A4DEA07BF75AFE1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.mft
Manifest number: 0A
Signing time: Sat 27 Dec 2025 22:57:38 +0000
Manifest this update: Sat 27 Dec 2025 22:52:38 +0000
Manifest next update: Mon 29 Dec 2025 00:00:38 +0000
Files and hashes: 1: 323830343a393530633a3a2f33322d313238203d3e20323734343935.roa (hash: palxQt0TJRmonm6nkQBO8Vw/OhYY5tHXOZN4T88z8Qk=)
2: 3138392e38392e3233362e302f32342d3234203d3e203238313838.roa (hash: 4MofNCNroJdbxb2HaWbcshJY8p1PvOwv24OCtGJWpIg=)
3: 45A9D6A3E95D9881210149B7208CB8921A7716CB.crl (hash: qYWKbBZKfmabPlWV7yA+a0Yx5TpOtWWcRIOayAnr5tg=)
4: 3138392e38392e3233342e302f32342d3234203d3e20323734343935.roa (hash: g7qMyYpWounXHQrFsHeJZHm/Ur/wujewoHfJ3v0TESs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.crl
rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 29 Dec 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6d:97:71:93:34:77:79:18:68:f2:86:3a:4d:ea:07:bf:75:af:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45A9D6A3E95D9881210149B7208CB8921A7716CB
Validity
Not Before: Dec 27 22:52:38 2025 GMT
Not After : Dec 29 00:00:38 2025 GMT
Subject: CN=D7F0EF12C0D75CBEA1385A1D7B5D416B2C855EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:87:8f:05:12:2d:2b:03:16:c8:79:ae:9c:
cb:28:30:d0:07:0f:88:97:e7:99:7b:a7:80:cc:ed:
d9:bb:8e:8e:b8:67:df:a7:e4:19:07:31:19:a7:2e:
b1:68:15:40:ce:c3:a9:d2:0e:d0:39:49:b6:48:7e:
f2:64:df:3e:b8:c1:e1:89:58:ee:52:e5:62:ee:64:
41:0a:c4:2b:b4:36:65:c8:bb:3f:82:f8:87:48:1a:
e6:80:6a:ca:5f:98:17:6c:cb:3e:05:ab:5a:9f:48:
7f:4f:c5:44:fb:81:2c:d8:2b:83:d5:38:bd:29:f7:
d9:15:f9:1e:65:99:64:cd:a4:4b:c2:96:a9:93:bb:
fe:80:94:17:a1:cf:f8:b1:6e:58:2c:c7:4f:29:56:
ee:da:15:94:64:aa:97:9a:a2:7a:ee:d4:7f:7a:eb:
42:ce:03:1d:36:a0:55:fb:1c:7f:6a:36:0c:4a:5a:
e1:72:1d:59:b0:c7:3e:a1:59:e7:82:de:96:77:94:
25:a5:37:3e:6f:54:71:99:fa:22:07:5e:85:d3:d2:
f7:88:1f:28:eb:a7:cb:4b:d4:80:5a:92:eb:81:1d:
75:53:65:9d:96:99:bb:cd:22:57:65:48:4d:b3:e7:
fc:7f:01:bc:4f:9a:ef:fd:98:e5:2a:92:dc:e3:2a:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:EF:12:C0:D7:5C:BE:A1:38:5A:1D:7B:5D:41:6B:2C:85:5E:EA
X509v3 Authority Key Identifier:
keyid:45:A9:D6:A3:E9:5D:98:81:21:01:49:B7:20:8C:B8:92:1A:77:16:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45A9D6A3E95D9881210149B7208CB8921A7716CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9QN1yQ3PVf9iUfM2exXNCHWfpDLaUEdNLCUGrRRCsYj/0/45A9D6A3E95D9881210149B7208CB8921A7716CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0f:5c:b3:c7:3b:c3:a5:20:be:c9:9b:97:44:ee:cd:85:b7:
90:24:ea:0e:12:b6:80:92:9f:c8:b7:7b:f3:a4:4f:a5:6e:3c:
e9:89:e8:fe:15:7d:6d:64:54:c6:e1:38:a3:41:1c:88:9a:71:
2c:a1:8d:47:5c:8f:9d:ea:57:cd:96:61:00:0a:8b:55:4e:0a:
d4:dd:ef:a7:1f:73:60:87:7a:e6:76:2f:8d:58:cf:5f:87:cc:
b9:ab:b5:e5:10:df:0f:a0:ce:61:7f:d3:af:34:3f:d4:9d:83:
97:5e:eb:30:c3:4d:ff:00:a2:75:f4:f5:92:61:92:4c:13:18:
04:5d:cb:94:18:93:58:67:a4:8c:78:e0:ac:96:41:66:8b:e5:
68:c7:fe:0c:a6:66:c2:4a:c0:95:5f:9a:2e:a1:a5:24:49:a2:
70:bb:20:b4:ea:6a:bc:91:2d:59:60:d2:28:db:42:a8:29:1c:
b6:b7:dd:bf:60:ef:c8:9f:34:cb:f7:ea:61:90:16:e8:15:0c:
c0:53:f5:a5:87:bb:f4:c9:14:62:41:96:e4:2c:92:5d:76:5c:
a8:a3:28:70:af:19:16:35:aa:33:c8:ad:3c:76:ba:2f:62:7b:
d6:7c:19:13:58:25:50:b3:4a:54:9a:5e:ac:80:a6:f6:cb:7a:
0f:e4:62:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFm2XcZM0d3kYaPKGOk3qB791r+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVBOUQ2QTNFOTVEOTg4MTIxMDE0OUI3MjA4Q0I4OTIx
QTc3MTZDQjAeFw0yNTEyMjcyMjUyMzhaFw0yNTEyMjkwMDAwMzhaMDMxMTAvBgNV
BAMTKEQ3RjBFRjEyQzBENzVDQkVBMTM4NUExRDdCNUQ0MTZCMkM4NTVFRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO4ePBRItKwMWyHmunMsoMNAH
D4iX55l7p4DM7dm7jo64Z9+n5BkHMRmnLrFoFUDOw6nSDtA5SbZIfvJk3z64weGJ
WO5S5WLuZEEKxCu0NmXIuz+C+IdIGuaAaspfmBdsyz4Fq1qfSH9PxUT7gSzYK4PV
OL0p99kV+R5lmWTNpEvClqmTu/6AlBehz/ixblgsx08pVu7aFZRkqpeaonru1H96
60LOAx02oFX7HH9qNgxKWuFyHVmwxz6hWeeC3pZ3lCWlNz5vVHGZ+iIHXoXT0veI
Hyjrp8tL1IBakuuBHXVTZZ2WmbvNIldlSE2z5/x/AbxPmu/9mOUqktzjKuHHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1/DvEsDXXL6hOFode11BayyFXuowHwYDVR0j
BBgwFoAURanWo+ldmIEhAUm3IIy4khp3FsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjlRTjF5UTNQVmY5aVVmTTJleFhOQ0hXZnBETGFVRWROTENVR3JSUkNz
WWovMC80NUE5RDZBM0U5NUQ5ODgxMjEwMTQ5QjcyMDhDQjg5MjFBNzcxNkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1QTlENkEzRTk1RDk4ODEy
MTAxNDlCNzIwOENCODkyMUE3NzE2Q0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SjlRTjF5UTNQVmY5aVVmTTJleFhOQ0hXZnBETGFVRWROTENVR3JSUkNzWWovMC80
NUE5RDZBM0U5NUQ5ODgxMjEwMTQ5QjcyMDhDQjg5MjFBNzcxNkNCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqg9cs8c7w6Ugvsmbl0TuzYW3kCTqDhK2gJKfyLd786RPpW486Yno/hV9bWRU
xuE4o0EciJpxLKGNR1yPnepXzZZhAAqLVU4K1N3vpx9zYId65nYvjVjPX4fMuau1
5RDfD6DOYX/TrzQ/1J2Dl17rMMNN/wCidfT1kmGSTBMYBF3LlBiTWGekjHjgrJZB
ZovlaMf+DKZmwkrAlV+aLqGlJEmicLsgtOpqvJEtWWDSKNtCqCkctrfdv2DvyJ80
y/fqYZAW6BUMwFP1pYe79MkUYkGW5CySXXZcqKMocK8ZFjWqM8itPHa6L2J71nwZ
E1glULNKVJperICm9st6D+Ri2Q==
-----END CERTIFICATE-----
Generated at Sun Dec 28 11:07:05 2025 by rpki-client