This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
File: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json)
Hash identifier: zn3r8qtvNLNtx8vOedmX7nSkAKKhEpd6CQc3+W172eU=
Subject key identifier: 18:FD:CC:5B:BC:5B:86:40:19:BD:75:C1:82:E9:48:3A:31:B5:E7:14
Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF
Certificate issuer: /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
Certificate serial: 5534D3B037A30583F5282EF5ECF7B81D5F11442A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
Manifest number: 0222
Signing time: Sat 06 Dec 2025 07:00:12 +0000
Manifest this update: Sat 06 Dec 2025 06:55:12 +0000
Manifest next update: Sun 07 Dec 2025 07:13:12 +0000
Files and hashes: 1: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: e9xJaInW33whF4X8v7rIZGVyo6OPe0QcRSQcXmAmJsM=)
2: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: DW5oS1R955VazVvFo2R1EAEemFMcMD7OxbUjMQkgwCM=)
3: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: tuN+EyMbBuM+4QcgMreh6GUCrLuRnxQ1/cjBpJyn3Bc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl
rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:34:d3:b0:37:a3:05:83:f5:28:2e:f5:ec:f7:b8:1d:5f:11:44:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
Validity
Not Before: Dec 6 06:55:12 2025 GMT
Not After : Dec 7 07:13:12 2025 GMT
Subject: CN=18FDCC5BBC5B864019BD75C182E9483A31B5E714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:54:3b:f2:56:30:2a:05:f8:83:87:0a:83:
80:0c:fd:5b:2c:f7:4b:d5:e2:b4:79:59:1e:51:81:
8f:52:68:e2:61:a8:3c:f5:67:19:cf:91:be:b8:f4:
37:e3:5a:ef:c1:25:68:fd:0b:c2:b3:50:11:5c:ad:
3b:ed:e7:60:06:5d:3c:4d:2b:74:09:26:33:28:f2:
63:dd:44:6c:f2:45:c4:76:2a:d1:67:f0:7d:3b:cf:
b1:ae:8b:c8:18:1e:43:b3:d6:7e:10:1d:a3:6a:ae:
e2:30:d6:ec:f6:a5:85:d2:6b:f4:88:a1:c0:d3:6b:
27:1c:e6:b1:72:3b:41:4f:59:36:54:2e:16:aa:14:
e7:96:50:1e:fd:07:3e:02:7e:fd:0d:dc:09:bb:f1:
c0:53:a6:52:37:94:19:e8:46:e8:9e:85:e3:7e:0c:
c2:22:a2:a1:d0:45:22:0f:f3:6c:06:b5:0a:9c:23:
e7:c1:65:b8:a9:4c:4d:68:97:f4:48:b0:9f:ce:fc:
96:9d:21:75:64:3b:23:91:31:f6:33:31:20:63:04:
7f:30:bb:94:a5:8d:ad:e6:f0:7a:f9:9f:fc:1b:39:
5e:f4:a2:56:1f:0a:99:a5:83:88:bf:34:04:86:66:
f4:e5:13:2c:71:58:7d:72:9f:60:a1:57:92:8d:15:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:CC:5B:BC:5B:86:40:19:BD:75:C1:82:E9:48:3A:31:B5:E7:14
X509v3 Authority Key Identifier:
keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:4e:af:3f:e9:fd:ac:c0:3c:f0:83:9c:aa:c3:43:32:88:
32:bc:8b:04:8e:57:0d:fd:c2:af:f8:a3:ad:dd:e7:e0:27:7c:
8a:f5:a1:1c:6b:c9:7a:bc:d9:9d:33:5b:a6:86:6a:4d:dc:67:
da:2e:9c:b2:11:d2:b4:b4:71:62:bf:0d:d3:9a:2e:4f:a6:bc:
3f:11:ba:5a:76:f4:5c:bd:91:ba:1e:1c:fe:fc:0f:08:3f:9d:
21:18:3a:94:fb:21:6c:d3:a4:07:51:bb:96:69:b4:a3:f6:92:
4d:88:73:6b:ef:6f:5a:c4:8a:11:9b:02:dd:27:f5:40:9c:e9:
64:a2:81:2b:c4:4f:e4:26:5a:72:39:23:47:ef:a1:bc:8e:a8:
ef:d3:3e:9d:21:b0:b9:3f:a1:2f:8a:23:d1:94:24:40:bc:b2:
07:bb:4e:bf:9c:1a:f6:14:67:a4:f1:ac:ad:eb:c8:aa:f4:5a:
a0:34:30:e2:94:fb:54:fb:f5:2b:c1:75:83:cc:ce:56:69:dc:
bf:a0:d7:9c:f5:04:56:74:a2:d3:7f:a6:41:22:a6:31:f1:5e:
1a:45:bf:9c:2a:35:b3:b7:53:a1:72:f0:cc:5c:1f:89:2b:10:
fb:3f:ba:e4:b7:0d:5b:30:b4:68:7d:24:c2:83:da:fe:cf:d7:
f2:1d:97:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVTTTsDejBYP1KC717Pe4HV8RRCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFBOTBGQUNBMERGNzFEMjdFQTQwMDkzN0I5NDIzQTNC
RDhGMDVCRjAeFw0yNTEyMDYwNjU1MTJaFw0yNTEyMDcwNzEzMTJaMDMxMTAvBgNV
BAMTKDE4RkRDQzVCQkM1Qjg2NDAxOUJENzVDMTgyRTk0ODNBMzFCNUU3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNM1Q78lYwKgX4g4cKg4AM/Vss
90vV4rR5WR5RgY9SaOJhqDz1ZxnPkb649DfjWu/BJWj9C8KzUBFcrTvt52AGXTxN
K3QJJjMo8mPdRGzyRcR2KtFn8H07z7Gui8gYHkOz1n4QHaNqruIw1uz2pYXSa/SI
ocDTaycc5rFyO0FPWTZULhaqFOeWUB79Bz4Cfv0N3Am78cBTplI3lBnoRuieheN+
DMIioqHQRSIP82wGtQqcI+fBZbipTE1ol/RIsJ/O/JadIXVkOyORMfYzMSBjBH8w
u5Slja3m8Hr5n/wbOV70olYfCpmlg4i/NASGZvTlEyxxWH1yn2ChV5KNFePVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGP3MW7xbhkAZvXXBgulIOjG15xQwHwYDVR0j
BBgwFoAU2qkPrKDfcdJ+pACTe5Qjo72PBb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5
cWUvMC9EQUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQTkwRkFDQTBERjcxRDI3
RUE0MDA5MzdCOTQyM0EzQkQ4RjA1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5cWUvMC9E
QUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYiJOrz/p/azAPPCDnKrDQzKIMryLBI5XDf3Cr/ijrd3n4Cd8ivWhHGvJerzZ
nTNbpoZqTdxn2i6cshHStLRxYr8N05ouT6a8PxG6Wnb0XL2Ruh4c/vwPCD+dIRg6
lPshbNOkB1G7lmm0o/aSTYhza+9vWsSKEZsC3Sf1QJzpZKKBK8RP5CZacjkjR++h
vI6o79M+nSGwuT+hL4oj0ZQkQLyyB7tOv5wa9hRnpPGsrevIqvRaoDQw4pT7VPv1
K8F1g8zOVmncv6DXnPUEVnSi03+mQSKmMfFeGkW/nCo1s7dToXLwzFwfiSsQ+z+6
5LcNWzC0aH0kwoPa/s/X8h2Xog==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:31:47 2025 by rpki-client