This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
File: DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft (raw, json)
Hash identifier: pomvEvH6yKsf1jN0n7m/uBkara3tJ11JGovhnYkARE8=
Subject key identifier: 82:C7:A1:A1:8A:9B:C8:4A:AE:8C:77:C9:8A:FC:3B:A8:5D:89:16:52
Authority key identifier: DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88
Certificate issuer: /CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88
Certificate serial: 2AC71B5C126C5F42BFF4ADDE710274D19E1343AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
Manifest number: 0155
Signing time: Sat 20 Dec 2025 14:39:39 +0000
Manifest this update: Sat 20 Dec 2025 14:34:39 +0000
Manifest next update: Sun 21 Dec 2025 15:44:39 +0000
Files and hashes: 1: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: gEKEaIZuFtCa2m15vfxLEmbSM0J0ycpP6AHITuG0TkU=)
2: DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl (hash: aQdeBCf34DxbdsCeP281kidymJY5vuN4/gSZb08w+Mo=)
3: 323830343a366264343a3a2f33322d3438203d3e20323730343238.roa (hash: HcbDBo5vEhZDz22x2e4nDgT/2l3+LdsNneneCzQ9yYo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl
rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 15:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c7:1b:5c:12:6c:5f:42:bf:f4:ad:de:71:02:74:d1:9e:13:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88
Validity
Not Before: Dec 20 14:34:39 2025 GMT
Not After : Dec 21 15:44:39 2025 GMT
Subject: CN=82C7A1A18A9BC84AAE8C77C98AFC3BA85D891652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:82:1a:eb:35:50:df:76:7f:f7:f4:d7:b7:
b5:b9:8c:6d:23:af:77:b0:d0:ff:86:48:f1:36:7d:
a6:8b:21:fa:8a:25:2d:b6:7b:38:a5:be:df:31:55:
99:62:e3:c7:65:8f:4d:39:c5:eb:c6:cb:2e:17:fd:
bf:f2:4a:cc:47:4c:11:01:f9:ab:06:f0:5e:c1:34:
81:1e:b5:55:26:e4:af:c1:d2:b8:43:8b:58:3a:23:
3e:71:56:97:03:e2:bc:36:cb:eb:1d:0c:51:1a:2f:
fe:03:ed:09:36:e6:28:a6:c7:8a:13:5d:40:f9:d2:
53:ef:66:3f:b7:4b:7d:2a:ef:d5:bc:00:40:59:f5:
33:d3:b1:f2:7c:25:0e:29:d4:f4:cc:8a:ef:78:ae:
67:98:b1:57:ba:ed:81:9a:00:29:3e:ae:0f:70:45:
08:66:64:84:44:cf:c8:8e:2d:37:a0:2e:f5:42:d8:
98:ca:72:d1:67:4d:4e:9a:0d:a7:40:cc:f4:38:20:
00:97:a2:35:e0:bd:8e:6e:59:88:f8:90:39:fb:bf:
9e:17:5d:4c:7f:74:19:d4:d9:49:c8:5b:59:58:4c:
18:a3:b2:7e:da:cf:6d:11:bf:fc:8e:c7:d5:bb:bd:
d1:e9:6f:69:a4:74:8a:67:12:cb:aa:18:8a:7d:82:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:A1:A1:8A:9B:C8:4A:AE:8C:77:C9:8A:FC:3B:A8:5D:89:16:52
X509v3 Authority Key Identifier:
keyid:DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:33:80:49:01:50:e4:d9:9d:09:87:df:72:35:5d:0f:a1:af:
b2:c7:57:c7:7d:fe:bb:14:9c:2d:8c:ff:08:e6:fe:8f:ac:87:
b2:44:40:92:fe:b6:cf:fd:2a:f7:44:3a:89:ca:2e:d3:de:6b:
80:d3:b9:12:6d:5f:81:7b:23:3d:e1:b2:d6:e0:11:26:b4:b5:
c7:bc:ed:71:08:20:5c:9c:33:56:68:72:92:3e:1c:59:10:21:
e6:d3:e0:e4:e0:fa:62:bb:7c:e1:99:ac:33:d4:47:4e:ad:c2:
a6:23:ca:6f:57:a8:b3:65:f6:70:61:c3:56:10:c5:2f:70:a7:
99:be:bd:41:d3:5b:c1:7d:e1:02:18:f1:00:03:3b:fc:dc:4e:
0c:52:9e:b7:5f:db:92:5d:03:5d:5b:a7:07:6c:6f:1c:39:ed:
b3:7f:25:6b:97:96:63:08:d9:af:4e:db:66:e1:70:95:1b:9e:
13:60:04:ff:3c:98:70:a1:f4:3d:ac:8b:ca:c2:11:a7:7f:ab:
92:65:f3:50:c2:ea:fb:b5:8a:4e:53:4d:ff:d5:0d:da:e9:4a:
5b:14:31:28:7f:c0:6b:5e:29:c2:5a:a0:2f:db:7e:34:83:73:
02:ad:96:fc:e6:53:c7:7e:ff:be:92:0a:c3:8b:0a:d1:2e:03:
7b:d0:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:34:09 2025 by rpki-client