This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
File: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft (raw, json)
Hash identifier: KbFmA0QaUom3a9JNVvzk7q5A7z56wjeG+5ESksMkL9Y=
Subject key identifier: B2:06:5E:41:D3:CB:CE:1E:17:E7:87:0E:C8:A0:6E:40:21:0A:6D:93
Authority key identifier: 5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9
Certificate issuer: /CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9
Certificate serial: 671E634B75D16CDBBC39FE08CF45B5BA3733F616
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
Manifest number: 67
Signing time: Sun 21 Dec 2025 06:14:25 +0000
Manifest this update: Sun 21 Dec 2025 06:09:25 +0000
Manifest next update: Mon 22 Dec 2025 07:45:25 +0000
Files and hashes: 1: 34352e37302e3235322e302f32322d3332203d3e20323637363131.roa (hash: yRi1SXpN/dv/T/K6SaSvoW/LDkoILoiPkENVWXL0Ftc=)
2: 5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl (hash: ikAT+0qK6IZuqfFM4599zwepcXvraCHvTL9WRvh3bH8=)
3: 323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (hash: bL/3cJavWtCjzV3M2Smxs5oF64TchmbOwc08G5LhIYM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl
rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 07:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1e:63:4b:75:d1:6c:db:bc:39:fe:08:cf:45:b5:ba:37:33:f6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9
Validity
Not Before: Dec 21 06:09:25 2025 GMT
Not After : Dec 22 07:45:25 2025 GMT
Subject: CN=B2065E41D3CBCE1E17E7870EC8A06E40210A6D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:1c:e6:24:f2:79:37:cb:00:92:5f:d4:10:
c0:6a:48:94:4c:8f:5e:eb:82:5f:05:89:7e:f5:50:
6c:58:45:41:7f:0f:c8:82:06:8a:90:dc:24:a7:44:
89:1c:23:79:97:b1:76:ef:d6:d4:d3:ab:6e:d4:46:
4b:48:2a:ff:81:e3:de:b5:53:ed:6b:d4:d5:a1:d9:
c9:75:ec:5d:ff:ea:8d:58:4e:ec:72:f5:91:c4:36:
f9:79:50:d2:db:4a:32:ef:41:19:f5:97:03:c5:d3:
26:97:5b:6f:00:ca:1b:e1:24:48:eb:ec:13:56:80:
f7:f5:93:68:48:f3:b4:a3:f5:02:50:0b:3d:c9:1a:
2b:49:c7:59:05:6d:94:23:1d:a5:7e:56:01:2d:13:
4b:13:f5:60:3d:94:4b:a9:e7:93:ed:83:c9:28:a2:
b5:f3:18:88:2a:a8:f0:fe:e5:39:b4:72:77:fe:bc:
15:2e:f2:9c:56:97:95:ff:dc:a4:b2:b4:f3:69:5b:
2e:c2:f6:99:b1:ad:a6:41:a0:01:81:c4:12:31:1f:
73:b4:a9:9b:85:f9:16:6e:48:e5:7d:5c:5b:43:ad:
0e:94:32:60:ab:2c:86:2a:26:66:76:59:67:b9:52:
05:1d:ab:b9:08:02:87:f2:ff:12:74:85:85:52:3f:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:5E:41:D3:CB:CE:1E:17:E7:87:0E:C8:A0:6E:40:21:0A:6D:93
X509v3 Authority Key Identifier:
keyid:5A:1E:4C:0F:6F:96:E5:93:3B:E0:09:91:E3:86:C3:F9:65:E7:C3:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/5A1E4C0F6F96E5933BE00991E386C3F965E7C3E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2b:0c:bb:2e:43:7c:06:6f:39:17:ab:d2:50:4e:94:ad:53:
b6:d8:72:83:e8:f6:cd:82:1b:05:7a:5b:66:a0:81:7d:c9:11:
e4:3a:fd:76:2b:29:c7:67:31:88:34:4a:f9:8b:d3:90:84:93:
ab:17:51:46:9e:2a:12:1f:8a:e8:02:61:d8:f9:64:1d:0c:0d:
72:10:67:f3:b2:dd:36:da:77:33:e4:90:1e:d7:2d:dc:3f:2d:
7e:ca:76:e4:8f:c5:09:c0:90:7f:34:4e:3f:13:f2:1a:a2:48:
16:7c:67:1b:3b:bb:34:99:86:f9:bd:93:d8:13:a0:11:c8:14:
c7:48:a0:a2:c3:ee:f5:34:01:c7:c7:06:5e:0f:90:a8:a1:37:
54:f2:34:d6:08:64:f8:d0:b4:72:9b:67:f7:f6:98:29:6a:1a:
01:06:cb:33:8b:0d:e1:44:4a:f6:1f:7f:e0:f5:ec:23:b4:88:
ea:98:90:6c:d7:8b:5d:ec:a5:5b:8d:9b:fa:1f:89:08:da:c6:
a6:d0:92:54:6a:86:d0:1f:61:0c:f3:ea:83:b5:c4:ae:e0:c4:
61:c2:ba:4a:53:64:81:54:03:5b:99:67:1c:ef:02:77:d2:2d:
04:db:6f:6e:4d:fd:cd:12:c3:25:08:2c:6a:49:8f:c7:dd:65:
e5:78:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:32:03 2025 by rpki-client