This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json)
Hash identifier: DKb8v9ktjPx13Q4S7ulc200L7wRl4zEp28rOsdBY8J8=
Subject key identifier: 6F:9B:30:27:FE:F4:F9:B5:C8:33:18:87:43:EE:E6:61:BB:DA:58:11
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial: 21AC17128A43C077978D8415FA4731428F1AEBE6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
Manifest number: 032B
Signing time: Sat 06 Dec 2025 01:19:00 +0000
Manifest this update: Sat 06 Dec 2025 01:14:00 +0000
Manifest next update: Sun 07 Dec 2025 01:27:00 +0000
Files and hashes: 1: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=)
2: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=)
3: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: x4Y2UGT1n/hXD0998/LuQ3nG5D/BD2NZVVlFSyWl7iQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 01:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ac:17:12:8a:43:c0:77:97:8d:84:15:fa:47:31:42:8f:1a:eb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Validity
Not Before: Dec 6 01:14:00 2025 GMT
Not After : Dec 7 01:27:00 2025 GMT
Subject: CN=6F9B3027FEF4F9B5C833188743EEE661BBDA5811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:05:d3:98:14:4a:99:ed:d2:f3:f2:c6:ed:
aa:50:be:85:3c:b7:58:5d:7a:5f:8a:ee:8f:f7:88:
95:92:ba:e6:81:4e:cb:7e:69:03:43:a9:fa:da:79:
52:63:12:69:18:1a:c8:79:c8:c2:39:7d:e2:f7:75:
eb:14:2d:b3:0b:ac:d9:03:10:2a:af:80:e4:e0:de:
9a:9a:7b:a9:ce:12:f2:ac:a8:fd:43:a1:ed:a5:2f:
cd:18:58:6a:cc:18:00:db:8e:0f:c7:2a:97:d6:a3:
bd:8f:0c:1d:2d:3e:c1:6f:a9:90:8b:5b:01:fb:eb:
eb:24:e0:0d:b2:81:d8:40:61:26:83:22:76:01:de:
9f:51:07:5c:ff:dc:95:2a:2e:0a:c8:f0:da:09:40:
5f:1e:d5:58:c0:15:99:1c:f1:4c:e8:9f:bc:5c:56:
36:42:6d:fb:38:06:22:40:3d:ef:82:24:21:13:ec:
06:02:12:16:5b:30:f1:d1:4b:35:a8:54:0f:a2:63:
19:96:d5:74:59:9e:fa:4c:6b:12:e2:3a:16:26:fb:
db:f6:7f:31:e7:97:27:99:6a:76:60:26:b2:df:bf:
d3:65:9e:ed:6a:cc:74:a1:3d:ed:b7:a6:bc:05:ca:
75:2c:65:9c:b4:ac:db:4f:89:36:66:40:20:51:43:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:30:27:FE:F4:F9:B5:C8:33:18:87:43:EE:E6:61:BB:DA:58:11
X509v3 Authority Key Identifier:
keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8a:7e:83:c8:af:16:38:3f:9e:14:5b:38:cc:b6:82:ef:e2:
59:a9:59:87:0b:89:6e:bc:b3:5b:71:9e:b5:8d:56:81:9b:87:
b5:d1:98:b3:cc:53:37:39:c0:1d:7e:f0:f1:d4:2d:ea:24:86:
6e:99:ad:6f:55:2b:74:4e:40:66:b2:05:65:07:57:9d:0e:5e:
bf:f7:e5:84:8c:23:29:d2:d8:ae:e9:09:0c:1f:f6:36:a7:00:
b0:e2:d4:1d:33:0f:ae:41:49:ce:d4:68:98:3d:7b:6a:b5:a6:
73:65:a6:91:0c:10:44:fe:13:07:6e:05:d2:85:be:06:1c:e3:
b3:7e:91:d6:33:fe:bc:5a:10:ef:73:b5:f3:3e:cd:9b:70:ea:
eb:58:22:b2:dd:44:55:38:fc:53:53:cd:9f:b9:da:d7:6b:59:
7e:04:1c:99:f3:7b:eb:fe:3a:bd:cb:48:3d:a9:7a:13:b3:2d:
de:fe:a8:af:f6:fb:f9:e0:42:8f:2a:3d:61:35:86:f5:5f:76:
ed:e3:d7:cf:0c:6b:fa:a0:18:de:96:c0:f1:70:55:c1:bb:7b:
c5:b7:72:ed:8d:33:5f:98:ec:cb:a8:9b:16:8c:42:1f:06:2b:
4d:65:cb:40:d1:64:87:2b:ce:de:0c:f0:7b:cd:b1:9a:d8:f7:
13:48:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:13:37 2025 by rpki-client