This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json)
Hash identifier: IxJE8/imUhVFdEqNSwyrq3qDK/wMJBXFqcWae5a+OJ8=
Subject key identifier: 81:06:3A:7E:BD:7B:77:77:B7:4B:87:18:0A:5C:14:83:B5:F5:E1:95
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 593ADE782B9983E42411C302FAE25B7C4E4FE393
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
Manifest number: 0331
Signing time: Sat 06 Dec 2025 03:43:56 +0000
Manifest this update: Sat 06 Dec 2025 03:38:56 +0000
Manifest next update: Sun 07 Dec 2025 06:09:56 +0000
Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: cqNAq1M/qrcpvCBrQPXPCYhQpRaI+pyDyzPF4oKr/rA=)
2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=)
3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: YRwpO+qV9F49NAjD4t6i+dZs654OmXK5qpgT8nKdEac=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3a:de:78:2b:99:83:e4:24:11:c3:02:fa:e2:5b:7c:4e:4f:e3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Dec 6 03:38:56 2025 GMT
Not After : Dec 7 06:09:56 2025 GMT
Subject: CN=81063A7EBD7B7777B74B87180A5C1483B5F5E195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:a0:e2:76:c4:19:c3:0b:66:fb:0c:f2:c7:
8e:3c:ba:f6:7f:2e:34:3b:72:7e:b2:0a:0e:bf:97:
ed:09:3a:29:93:6e:30:c6:f5:0e:66:59:4d:cc:24:
32:d4:0f:37:23:db:0a:bd:46:8b:ea:74:80:bf:8b:
e1:82:c8:be:e8:fc:5f:e5:56:9c:ce:7e:41:e3:b8:
48:43:fa:e0:8d:4e:29:b5:2b:cd:5b:d3:f6:5c:30:
61:db:3c:d7:89:49:5f:94:90:91:fa:b0:38:eb:64:
53:12:4b:ad:51:e2:7b:35:e9:03:b5:8a:73:26:55:
62:b3:01:ad:c8:20:67:4e:c1:e7:9a:9a:cd:92:16:
ae:73:2d:ad:4c:a6:0d:95:5b:19:ec:28:f9:a2:12:
e2:cd:fe:95:19:b2:1d:b0:1b:cb:52:d6:96:9f:a3:
df:d9:11:03:8f:5e:f6:5a:82:5c:65:0c:4d:e2:0c:
e5:23:39:f5:10:35:59:d2:5e:23:ef:be:c9:71:46:
0b:08:69:b2:39:1d:d7:fa:38:bc:38:59:91:87:ec:
cc:9d:f0:d3:ab:87:06:61:3b:d8:9e:8d:71:c2:57:
59:3b:0c:e7:f6:bd:e1:5d:37:23:19:88:8c:f4:5e:
da:9a:e2:d0:19:4c:f1:65:ee:6c:68:5a:bb:b0:be:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:3A:7E:BD:7B:77:77:B7:4B:87:18:0A:5C:14:83:B5:F5:E1:95
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:97:93:1c:2b:a5:31:ce:3f:2a:d8:a3:44:fb:8f:7d:60:
4e:16:3b:0a:a3:33:7f:b6:92:75:dd:bf:18:33:e6:eb:6f:5e:
ad:35:0c:d0:0a:ca:74:19:bb:3a:6d:d2:27:50:b1:ec:eb:2d:
83:5c:f3:86:64:3c:b0:1e:bc:54:d3:7c:1d:a0:ff:06:a6:a7:
d1:1f:cd:3c:bf:78:0a:55:cc:68:63:ac:d8:b3:d2:72:a7:ac:
28:58:bc:3d:61:8f:e5:70:da:c7:a3:5e:f9:5c:fa:72:d1:5b:
bf:4c:69:1c:dc:20:87:fa:cb:99:cb:b3:29:91:b8:0e:49:7b:
dc:37:8b:15:59:7c:0a:0e:a1:12:fb:60:c2:15:44:9e:73:2a:
2b:fa:76:d1:6b:22:04:30:06:5f:48:36:1e:7e:c2:47:28:d7:
7e:87:bf:af:d3:a4:36:cd:12:cd:dd:7a:46:81:c2:21:eb:c5:
c5:2c:01:d5:74:d8:0b:ec:c0:77:3b:de:2e:4c:a2:9c:d1:13:
db:9c:56:ee:45:b0:31:9c:b1:13:6d:4f:aa:8b:d7:56:38:79:
93:67:6f:b3:6d:a2:e6:0e:c8:34:94:6f:4a:98:b5:ed:15:8c:
07:b5:03:93:c1:5c:51:10:89:e2:cd:8a:91:32:f0:6d:da:ab:
fc:9e:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:04:14 2025 by rpki-client