This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
File: B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft (raw, json)
Hash identifier: p1bfQZKXkaJ8YwmUsirUOI9KIeXco6FVYGAAMfKH7eg=
Subject key identifier: 69:26:E7:EC:B3:C0:99:91:A8:F7:0C:DE:B2:49:06:B0:15:29:23:54
Authority key identifier: B5:DD:40:20:A5:28:87:5D:48:DA:F9:7E:54:B1:4D:A3:17:7C:B1:D0
Certificate issuer: /CN=B5DD4020A528875D48DAF97E54B14DA3177CB1D0
Certificate serial: 67250139998D649C2A80FB230399A98AF893F1E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
Manifest number: 93
Signing time: Sat 06 Dec 2025 10:01:16 +0000
Manifest this update: Sat 06 Dec 2025 09:56:16 +0000
Manifest next update: Sun 07 Dec 2025 10:08:16 +0000
Files and hashes: 1: B5DD4020A528875D48DAF97E54B14DA3177CB1D0.crl (hash: OjaRvcWi4rNgkIr2IZ07SWZ+MpFFW1WlXumJgMViMdw=)
2: 323830343a393534383a3a2f33322d3332203d3e20323734353131.roa (hash: jTmV754AonkwigYC9b9TgO2xK1qg5mJnkbOgTzsvf8c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.crl
rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 10:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:25:01:39:99:8d:64:9c:2a:80:fb:23:03:99:a9:8a:f8:93:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5DD4020A528875D48DAF97E54B14DA3177CB1D0
Validity
Not Before: Dec 6 09:56:16 2025 GMT
Not After : Dec 7 10:08:16 2025 GMT
Subject: CN=6926E7ECB3C09991A8F70CDEB24906B015292354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:61:4c:2f:99:a3:0d:1e:32:2e:28:64:40:
90:09:3e:d8:ee:b8:4d:8b:86:23:20:b4:be:ec:b2:
7c:85:ec:e9:88:fa:3e:5e:83:7e:cd:75:e5:a7:77:
7b:c3:89:85:6f:94:0e:fd:5d:2b:65:ec:a0:c3:5b:
3b:f3:d0:b9:9e:cb:34:e3:c0:60:16:6d:92:3c:ee:
de:64:8b:d0:20:ef:56:19:5c:fb:68:4d:78:7f:cf:
57:fc:da:55:db:68:36:14:11:70:40:0b:26:bb:8b:
3f:c3:16:df:fc:9e:70:39:79:d1:8f:5c:8a:d7:ba:
3d:9d:5c:87:b3:94:a8:b7:83:86:1a:c5:19:31:eb:
59:2d:56:40:de:79:85:35:dc:08:81:01:c5:fc:24:
fb:49:a7:b3:e7:b4:19:e4:4b:14:65:a5:6d:ed:04:
6b:d9:c9:b7:26:d5:56:e7:47:50:83:1d:cd:9d:e0:
d3:0b:b0:9c:20:dd:e6:86:05:04:aa:80:3a:7f:2b:
25:f6:2f:9a:fd:e6:1e:d7:83:c8:22:a1:f9:04:8a:
c5:75:6d:65:be:86:54:91:7a:6d:c2:6d:b5:6a:c7:
cd:09:ca:1f:26:4f:2d:05:72:99:9b:68:40:66:3a:
a8:69:0f:5f:b7:83:39:43:bf:f3:2a:fb:b1:20:a4:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:E7:EC:B3:C0:99:91:A8:F7:0C:DE:B2:49:06:B0:15:29:23:54
X509v3 Authority Key Identifier:
keyid:B5:DD:40:20:A5:28:87:5D:48:DA:F9:7E:54:B1:4D:A3:17:7C:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FuWu6sNF6ZdBRvqHEgDV8t7xCnRLHobmr4snPJrYbQw/0/B5DD4020A528875D48DAF97E54B14DA3177CB1D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:00:51:f6:fa:fa:6f:06:9a:0f:f6:48:20:0d:6d:49:ca:fc:
d9:55:e6:b1:a2:61:ce:4a:4f:e1:09:8f:5d:df:38:f0:80:f3:
57:cf:2b:f1:8b:ed:79:8f:1f:5a:7a:b7:01:27:9b:59:df:b2:
84:32:e2:44:bb:7d:bd:72:6f:3b:c4:a1:49:69:65:fc:d3:3e:
e9:b7:e2:3e:42:96:ef:c1:9c:dd:a7:b9:15:6c:a2:5f:57:5b:
5f:98:1c:86:a9:87:7b:b9:13:f1:da:7d:e3:53:0c:c1:8c:aa:
1a:8b:47:d7:20:40:25:49:9c:3e:8d:cc:9f:26:49:28:08:b8:
8a:eb:b7:29:5f:79:dc:45:ff:85:f4:36:c3:a8:13:7a:bc:b1:
14:1a:54:47:a6:1c:91:06:63:23:96:45:03:86:cd:64:c0:f1:
f3:b3:36:4c:b4:d5:f9:f1:cf:f6:4b:97:cf:c1:8b:eb:b7:91:
4d:18:99:fd:93:7a:c8:81:19:1c:81:24:8e:f4:8f:32:bc:2f:
1d:bd:84:71:ee:ea:e8:46:68:06:be:e8:6e:51:d2:d2:61:44:
77:83:4c:cb:b2:2a:d9:cc:a7:18:27:2a:70:ba:01:38:a6:b2:
ad:ed:0a:c6:28:46:03:ab:54:17:f9:f7:de:3f:72:62:f5:82:
de:b7:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:21:00 2025 by rpki-client