This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
File: D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft (raw, json)
Hash identifier: QpHPQjXJfSWTXiJMzUiOQgvtv0uhj4xFPc398kX9cdE=
Subject key identifier: 58:D4:B7:16:A3:8E:00:29:55:5D:A1:16:DC:08:EB:6C:D7:B6:9E:64
Authority key identifier: D1:D3:5D:39:49:8F:93:F9:C9:E8:E1:41:1E:36:1C:C7:87:8B:22:2A
Certificate issuer: /CN=D1D35D39498F93F9C9E8E1411E361CC7878B222A
Certificate serial: 237900EC7C7CE40C940F1485B53C65E05A013B89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
Manifest number: 018D
Signing time: Sat 20 Dec 2025 06:35:27 +0000
Manifest this update: Sat 20 Dec 2025 06:30:27 +0000
Manifest next update: Sun 21 Dec 2025 06:56:27 +0000
Files and hashes: 1: 323830343a353039343a3a2f33322d3438203d3e20323638333937.roa (hash: Z1boymgadhqyXxNZYF1q8FyV3V5e6woWlxKOcxmjbuo=)
2: D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl (hash: RaC13D1oLHJAtDEJgU3WCXiBQdNffYxsdkVAsWSgGaw=)
3: 34352e3136302e3130342e302f32322d3234203d3e20323638333937.roa (hash: ptuJoYLp6LWJYUuBLCNA+GGCucIYgkuS8u4dzQ3LBiU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl
rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 06:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:79:00:ec:7c:7c:e4:0c:94:0f:14:85:b5:3c:65:e0:5a:01:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1D35D39498F93F9C9E8E1411E361CC7878B222A
Validity
Not Before: Dec 20 06:30:27 2025 GMT
Not After : Dec 21 06:56:27 2025 GMT
Subject: CN=58D4B716A38E0029555DA116DC08EB6CD7B69E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:b9:f3:6e:5b:b5:f8:98:00:af:ae:93:58:
bc:a4:97:e9:c1:1d:48:ee:87:f3:9f:d1:05:e3:fb:
82:38:6e:3c:48:c3:c8:d1:f6:59:ac:f1:19:18:68:
13:5e:ec:67:4e:51:7a:9b:c1:04:44:b4:2f:e3:51:
f9:8c:a6:09:da:56:d2:3d:47:4d:7c:aa:c6:f9:d9:
00:e6:f2:d5:74:1e:6e:41:80:97:af:15:8e:b8:7d:
fa:b9:dd:cc:a8:f7:da:d3:40:3e:00:0a:be:61:24:
cb:ed:1d:ea:7e:6a:24:84:4c:e0:2d:02:6c:ce:0a:
90:f8:c0:6c:e0:fb:ae:87:37:0e:c0:97:a1:80:0c:
29:14:e0:a6:26:19:b0:9f:a1:0f:62:ea:6a:44:8a:
0f:46:e3:67:27:ef:c4:00:fd:5c:b0:9e:d9:20:f9:
ee:cc:81:22:c0:b9:82:27:7d:59:27:d1:be:d5:f4:
3d:04:9d:09:f4:48:4b:7c:79:72:2a:b5:3c:61:ef:
1a:68:99:4a:52:fa:d0:92:c2:e5:d7:ee:44:72:ce:
a5:77:8d:27:3a:37:19:fa:51:c7:dc:11:5b:f9:8a:
f1:37:22:22:fd:47:a9:a5:8a:9f:0f:5b:81:41:c6:
f8:f1:cf:4f:74:bd:5f:21:aa:a3:e2:48:c7:4d:c4:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D4:B7:16:A3:8E:00:29:55:5D:A1:16:DC:08:EB:6C:D7:B6:9E:64
X509v3 Authority Key Identifier:
keyid:D1:D3:5D:39:49:8F:93:F9:C9:E8:E1:41:1E:36:1C:C7:87:8B:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D35D39498F93F9C9E8E1411E361CC7878B222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/D1D35D39498F93F9C9E8E1411E361CC7878B222A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:86:ac:c9:9b:93:4c:0a:28:fb:59:d9:07:ba:c5:61:fb:64:
9e:39:cb:7e:31:d0:4c:33:e7:54:50:c8:ea:50:d2:4b:cb:7a:
2b:b1:87:a1:81:ef:aa:94:55:cb:16:47:d4:5c:b6:2e:a7:68:
f5:34:d1:92:3e:16:bc:c7:58:a7:65:f5:f0:35:15:17:25:0c:
07:89:de:09:a4:6e:f4:65:e6:26:ba:5b:09:50:97:00:c5:0c:
14:28:3c:57:1e:59:a7:d4:93:dd:1d:87:33:bd:42:e8:a2:55:
fe:5f:56:4c:d6:6a:00:b0:3a:ca:f4:8a:56:97:ec:fe:32:af:
fd:29:9d:5d:7b:be:8e:a9:d3:6d:6e:9c:0a:d7:d4:3d:eb:9d:
7d:3c:17:62:37:d4:25:a3:9d:62:4a:73:f5:3b:0e:da:73:52:
a3:1a:65:61:fe:23:0b:15:85:15:3f:ed:6f:ed:3c:80:af:56:
3e:5e:9b:88:e8:f3:6a:09:14:ee:4f:1c:27:ee:86:82:17:de:
ef:ed:8e:3b:40:90:5f:83:1b:73:65:d0:f7:e4:e5:71:7b:11:
0c:05:1d:07:b0:b4:bd:eb:44:7e:91:78:84:31:16:f3:7d:b2:
2d:20:ed:9e:ff:2d:f4:4a:bd:5d:d9:11:6f:4d:80:92:42:fe:
5c:3c:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:05:20 2025 by rpki-client