This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
File: FF2D630E978417F06D6A73D00219A91B07536236.mft (raw, json)
Hash identifier: UjuPQp8WEUgfZ/i+gkAhgARyUcB3mwQzDv1J+6whJE4=
Subject key identifier: AE:53:D4:1B:11:AB:F2:2A:B4:2B:04:3A:62:6B:FF:78:69:73:53:45
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Certificate issuer: /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial: 373ED8F0205D2847CF890DE88F0D2875F0C577D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
Manifest number: 032A
Signing time: Fri 05 Dec 2025 19:20:00 +0000
Manifest this update: Fri 05 Dec 2025 19:15:00 +0000
Manifest next update: Sat 06 Dec 2025 22:21:00 +0000
Files and hashes: 1: FF2D630E978417F06D6A73D00219A91B07536236.crl (hash: kou1a9UjFssPvCTHQKTzijgDp+sPhnTJXtlK7UZOako=)
2: 34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (hash: P+FDo4q/1/uU2jbU+zY6bQE7bN8GbSZfmkm9zHn4U5M=)
3: 323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (hash: exFn0onfAXV7MfaYlTqintcN5pygGREtF31QOKpQVsQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3e:d8:f0:20:5d:28:47:cf:89:0d:e8:8f:0d:28:75:f0:c5:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
Validity
Not Before: Dec 5 19:15:00 2025 GMT
Not After : Dec 6 22:21:00 2025 GMT
Subject: CN=AE53D41B11ABF22AB42B043A626BFF7869735345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:a8:43:40:b3:d8:35:10:81:09:6c:9c:ee:
31:c0:a8:71:a5:6e:0e:7d:4c:90:ed:07:8d:34:a4:
66:3a:9b:10:57:d7:79:6d:d7:55:79:14:3e:db:f8:
42:6f:7e:c0:37:6e:04:28:cf:11:68:ee:a4:44:d3:
b3:c9:0a:88:0b:dc:1f:8a:79:c2:78:5d:01:94:b0:
ea:4a:15:de:ec:03:2c:f9:8a:7b:71:7b:db:c6:ee:
fc:72:f1:87:9c:84:3f:32:80:0d:93:a9:12:41:c4:
00:05:a5:74:02:06:61:8e:7e:43:b6:56:24:5c:bb:
b9:ca:3c:52:0b:90:e0:10:ea:d3:d2:50:75:d3:cf:
f0:54:75:b7:f7:a4:c3:14:9e:a3:0f:d3:d3:dc:ca:
eb:22:21:71:2d:60:30:71:78:22:5c:c6:8f:23:af:
71:e9:f4:10:32:fa:42:f9:08:be:12:65:a6:ab:27:
59:78:45:d4:16:b5:04:0a:c7:5d:72:8f:37:b6:eb:
4b:b8:e8:35:47:23:2f:8b:34:26:1f:b8:ba:2f:2f:
10:0b:d9:aa:5f:b9:0a:57:ed:5e:5b:7d:15:c6:8a:
d9:50:cc:32:43:45:af:2f:d6:05:6a:3d:7f:64:b6:
25:7b:6c:38:2f:36:2d:04:77:a2:11:67:17:1f:80:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:53:D4:1B:11:AB:F2:2A:B4:2B:04:3A:62:6B:FF:78:69:73:53:45
X509v3 Authority Key Identifier:
keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:45:b1:f6:10:9e:44:2b:91:5d:aa:69:25:99:34:3f:a9:
09:7a:21:1d:a1:8f:8f:c7:cf:89:8c:b5:7a:35:f8:69:07:98:
39:60:0e:50:3a:d1:e8:58:19:52:97:66:6d:e7:a6:58:18:24:
54:7b:da:8e:b2:e5:84:b8:f7:31:54:00:45:05:58:f0:3e:c3:
32:13:7b:fd:01:af:9f:67:26:0b:54:a3:f7:e0:ea:d1:1e:37:
b7:cf:b8:c5:f0:39:4b:22:f3:ca:4c:06:6a:e6:27:06:2a:b8:
66:47:a7:82:a8:d0:b6:1b:5b:bf:1a:9f:36:45:5e:36:21:46:
85:92:52:eb:3a:ce:82:21:73:5d:f0:d2:25:f7:46:27:fe:aa:
5e:8b:7c:0a:ba:34:b8:b5:59:fe:dd:07:3f:bb:40:7d:c0:ce:
fe:8e:ae:82:b7:e5:7a:2f:75:5b:b8:3c:17:e8:f8:dc:a3:52:
23:ed:92:d4:a3:40:41:0e:3c:70:c1:52:92:4c:24:eb:ff:8b:
92:58:1e:b1:c4:6a:73:cb:97:7f:ae:49:b5:9a:43:96:43:38:
d2:41:e8:a7:dc:3d:a8:2b:53:20:6b:0a:31:21:9b:34:50:e8:
2d:7d:ee:09:04:25:d5:b9:4e:ad:c8:61:94:79:b1:e4:d3:ed:
3e:54:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:09:19 2025 by rpki-client