This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File: DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier: vyv/+0mSl1vGX5t3JwnyoqUD9Y4wtZhfDCB+yqdwwe8=
Subject key identifier: 2D:42:C1:FB:8B:4A:9B:C4:9D:15:92:1A:ED:75:DB:EB:9F:CC:18:9B
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer: /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial: 0BDB33D8DCB00B5789DC14D6AF75865C95B6C3F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number: 026E
Signing time: Sat 06 Dec 2025 18:23:18 +0000
Manifest this update: Sat 06 Dec 2025 18:18:18 +0000
Manifest next update: Sun 07 Dec 2025 20:21:18 +0000
Files and hashes: 1: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: SfSPWeSli4ahIcwO6tXoTuhUyMxX10D/F7CTs+0cxxQ=)
2: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=)
3: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: FgEv7DHx8gpoUEHmCHDzneQcmOGaXyHJxKnB2umwj5Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 19:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:db:33:d8:dc:b0:0b:57:89:dc:14:d6:af:75:86:5c:95:b6:c3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Validity
Not Before: Dec 6 18:18:18 2025 GMT
Not After : Dec 7 20:21:18 2025 GMT
Subject: CN=2D42C1FB8B4A9BC49D15921AED75DBEB9FCC189B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:cd:09:74:19:78:b2:f7:1b:d9:b2:4e:0e:
96:2f:ad:e6:9f:f8:98:e1:a9:05:10:fe:22:10:d7:
a4:90:ae:0f:6f:8e:e2:c1:77:23:6d:4c:7f:5a:51:
f9:36:12:d6:ae:73:ed:87:b6:7b:92:92:e5:2c:53:
72:18:1c:02:d9:25:34:54:6d:1f:b3:8e:f6:a7:ce:
c6:7d:46:9f:27:2b:f6:ca:52:fa:d6:d8:76:57:27:
b6:55:ae:00:e4:8a:c4:3f:34:ba:3c:93:50:d6:28:
46:48:0b:12:c5:4f:6b:27:d9:ae:b0:a0:1c:d8:b1:
bc:f7:32:ae:ae:9e:91:c1:dc:6d:e7:6c:65:9f:d4:
2c:b8:ff:3c:37:84:41:fb:f6:a8:9f:b3:83:31:c8:
e0:6c:85:4b:83:46:e2:7a:5e:08:9b:ab:43:0d:c8:
44:43:96:cc:63:f7:ba:35:e9:fb:75:a0:95:87:a0:
38:25:be:87:f8:24:8f:89:53:f9:ee:8e:fa:76:f9:
27:6b:0c:3f:6e:32:c0:e5:6c:f4:9f:9d:62:b0:44:
81:54:02:c1:77:71:8e:c5:ca:2e:1c:09:b0:e2:e6:
cc:7b:5f:6e:c2:4c:76:1f:4e:8b:99:ca:c9:cf:52:
28:4d:5d:ac:16:55:5b:56:39:fd:11:2a:25:b3:10:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:42:C1:FB:8B:4A:9B:C4:9D:15:92:1A:ED:75:DB:EB:9F:CC:18:9B
X509v3 Authority Key Identifier:
keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:70:fb:38:a5:f6:3c:b0:83:86:7e:ff:8e:73:1a:8e:93:
c3:fb:50:62:ce:76:b3:ab:a6:5c:c9:77:26:ac:b8:11:2b:0e:
bd:88:fe:86:6b:6e:6c:be:ad:3a:cd:b4:cb:62:d1:ed:87:f0:
61:f8:78:7b:a0:e7:37:fe:3e:ef:03:ce:20:29:0b:c1:03:91:
8f:a8:b7:12:b2:94:02:e5:03:35:fa:46:d2:f7:45:94:f2:35:
3d:7b:45:be:b8:ac:31:0e:39:f0:37:b7:ea:46:71:9b:7c:0e:
a8:25:f5:84:70:f4:23:b9:fd:07:1c:36:81:e7:ea:5c:b6:a7:
3d:3e:67:ac:5f:92:84:e2:2f:6b:09:e2:f5:0a:7c:31:ed:59:
16:dc:64:e4:cf:90:33:04:6c:be:94:3b:76:a9:80:d9:75:67:
66:bd:c1:20:d0:34:f4:77:63:d8:f8:62:dd:a5:16:52:87:e6:
6c:26:b5:43:7e:1d:c6:39:11:6f:8a:32:9a:de:73:c7:78:3f:
1c:45:cf:e2:b2:41:60:ed:c0:28:71:8e:3e:2e:18:3d:06:6b:
27:65:65:16:f8:24:61:d5:dc:ce:4c:8b:a8:a2:8b:05:8d:08:
eb:3a:ec:16:05:ba:ef:3f:00:9d:fc:a5:1a:e4:03:b9:3a:af:
4b:45:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:55 2025 by rpki-client