This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft
File: D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft (raw, json)
Hash identifier: i5aKZ31mb0wz16fJYYyYyB2Utkqs1EqBpLBGDnIiY0c=
Subject key identifier: 85:C5:3F:C9:42:36:F2:C8:C2:5B:3B:17:04:12:6C:54:27:4F:C4:23
Authority key identifier: D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E
Certificate issuer: /CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E
Certificate serial: 255AC552D52232EA00FA9E72AF4E610BCBF12E24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft
Manifest number: 13
Signing time: Fri 05 Dec 2025 22:06:03 +0000
Manifest this update: Fri 05 Dec 2025 22:01:03 +0000
Manifest next update: Sun 07 Dec 2025 00:44:03 +0000
Files and hashes: 1: D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl (hash: grR6RivhyARkAPiy6K+BgBba5R2kxmZcHCpfhLt7uhE=)
2: 323830343a326363343a3a2f33322d313238203d3e20323635323432.roa (hash: CqfsmrXQSw0KVMoN7/rDxEOPPqtIUHfuvqYfHXSfdNA=)
3: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (hash: annC1vFjuqC/mmR5eiElDHilugC/qrDMivSD1xl5CoM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl
rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:c5:52:d5:22:32:ea:00:fa:9e:72:af:4e:61:0b:cb:f1:2e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E
Validity
Not Before: Dec 5 22:01:03 2025 GMT
Not After : Dec 7 00:44:03 2025 GMT
Subject: CN=85C53FC94236F2C8C25B3B1704126C54274FC423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:7f:79:34:e1:91:0b:02:f2:fe:19:f6:75:
1e:73:0a:c3:9e:58:20:8d:cc:23:a1:2a:4a:f1:34:
93:69:f3:f5:7c:44:b4:41:59:9b:e7:d7:f8:b5:04:
fa:59:fd:d1:ab:c3:1f:5a:e7:da:4a:02:ac:15:0b:
72:09:86:4e:4d:37:aa:54:0c:33:60:f9:20:48:83:
5a:3e:ec:96:13:e9:9a:d7:38:5a:9d:c6:26:07:bf:
68:1f:10:12:00:fa:63:12:d7:c3:35:c2:55:1a:dc:
16:15:4e:fc:5a:53:9c:53:ce:43:fd:12:f9:da:a8:
fb:9d:b8:be:b1:56:ce:6b:5b:43:68:8e:59:92:87:
65:cb:2c:e4:e5:d6:aa:3a:62:5b:34:d8:0b:7d:88:
49:47:b3:a9:eb:c9:29:7b:47:02:c2:4c:4c:a6:65:
91:0c:78:b1:82:84:33:4d:cc:eb:f6:ff:a0:ed:5f:
ff:12:94:f3:9b:ea:9d:ae:79:36:d1:c5:7f:ad:97:
d3:04:0b:8f:e9:8f:b0:0b:2c:e1:1c:81:4e:35:4f:
20:a2:c6:35:fe:43:8b:13:2d:10:cf:5e:59:86:66:
36:f5:5d:90:14:07:c2:68:89:63:ab:de:b7:21:00:
02:5c:ac:33:66:94:f7:71:b2:96:a1:4b:02:35:0e:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:3F:C9:42:36:F2:C8:C2:5B:3B:17:04:12:6C:54:27:4F:C4:23
X509v3 Authority Key Identifier:
keyid:D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fc:51:05:38:d2:9c:6c:8f:6e:cb:bb:8d:12:c1:2d:e1:e9:
92:08:18:2d:62:4c:00:e2:3a:1d:3d:68:ad:76:52:7a:7e:77:
22:90:23:8e:2c:90:92:1a:3d:7f:cc:3d:38:61:cc:ea:ce:eb:
ca:cf:de:40:87:81:62:0f:cb:cb:29:f0:6a:5e:ef:c8:a1:dd:
1b:f0:2f:5f:66:f4:7b:8e:b4:54:2b:20:7f:ac:c4:93:10:7e:
ab:c4:3a:ce:d6:09:f6:17:d0:a9:3f:d0:0e:94:b1:80:82:14:
02:50:4e:35:10:a6:cb:53:4d:99:4c:b6:be:d3:c8:31:d6:da:
60:99:1b:69:19:38:e9:f6:3d:ab:fc:5c:f1:de:e2:56:61:92:
e1:5e:77:28:fd:af:24:9c:ff:e4:1d:72:8a:b4:49:e7:7f:a0:
a4:bf:04:af:fd:ac:15:5d:da:51:1c:07:5a:fc:10:d3:ed:0f:
e9:a4:a3:34:d0:44:40:7a:d7:af:44:4c:9f:20:fa:a1:99:32:
e5:e2:24:7f:58:56:18:67:93:a9:19:8f:58:96:30:9d:8a:2b:
94:07:40:53:96:f4:98:67:9a:a4:b3:b1:9d:6d:0b:c8:6b:ee:
9b:54:6f:18:ad:b5:c0:07:ee:a2:6c:e7:0c:13:f8:43:c3:8b:
05:18:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:32 2025 by rpki-client