This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/ECB9D2499C67506B8B2331B0A15DE208CB338B55.mft
File: ECB9D2499C67506B8B2331B0A15DE208CB338B55.mft (raw, json)
Hash identifier: X/ZGbA2h73YSDwnpalrx/VV8SxUQjei4T2AWcGD7YfM=
Subject key identifier: 63:25:F3:96:91:BB:43:67:E4:74:33:AF:D8:9D:E4:0D:E3:49:7D:1D
Authority key identifier: EC:B9:D2:49:9C:67:50:6B:8B:23:31:B0:A1:5D:E2:08:CB:33:8B:55
Certificate issuer: /CN=ECB9D2499C67506B8B2331B0A15DE208CB338B55
Certificate serial: 6BB4579223C58DDEA0620F724B4D1E3B9B458090
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB9D2499C67506B8B2331B0A15DE208CB338B55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/ECB9D2499C67506B8B2331B0A15DE208CB338B55.mft
Manifest number: 3A
Signing time: Fri 05 Dec 2025 23:57:56 +0000
Manifest this update: Fri 05 Dec 2025 23:52:56 +0000
Manifest next update: Sat 06 Dec 2025 23:59:56 +0000
Files and hashes: 1: 323830343a376562383a3a2f33322d313238203d3e20323731363433.roa (hash: cYOmzsL2C5IsuN6OHvr6K7uJejHAU7IduvvhH0lgecU=)
2: ECB9D2499C67506B8B2331B0A15DE208CB338B55.crl (hash: QGHbiUIF/+OEUVwv4qzHtxTJ8CtFpX9SP7JUusVzlrU=)
3: 3230302e3139342e3138302e302f32332d3332203d3e20323731363433.roa (hash: 1vm/iPsC5KbmrRFwYjXblap/GaMNcmarX3xt+MJsJvU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/ECB9D2499C67506B8B2331B0A15DE208CB338B55.crl
rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/ECB9D2499C67506B8B2331B0A15DE208CB338B55.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB9D2499C67506B8B2331B0A15DE208CB338B55.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b4:57:92:23:c5:8d:de:a0:62:0f:72:4b:4d:1e:3b:9b:45:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB9D2499C67506B8B2331B0A15DE208CB338B55
Validity
Not Before: Dec 5 23:52:56 2025 GMT
Not After : Dec 6 23:59:56 2025 GMT
Subject: CN=6325F39691BB4367E47433AFD89DE40DE3497D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:48:4c:99:34:2f:8c:29:d9:1b:a4:a0:16:
e2:84:ed:92:0f:45:b9:b6:78:87:94:b9:3c:0d:71:
cc:9b:07:4e:88:10:3b:d5:f6:8a:d9:24:64:a6:6a:
02:2b:a8:ef:73:29:ee:ea:d0:10:1c:90:2a:8d:5c:
5d:09:af:61:35:75:fa:4d:80:da:08:5e:0f:ae:0e:
42:94:b7:b2:ad:15:89:9f:fb:33:66:97:81:39:01:
27:f7:76:53:c2:32:80:db:d4:04:75:a1:bb:ec:01:
89:b0:68:69:95:87:a5:60:aa:9e:d4:96:3c:5e:ec:
7f:32:b4:68:f6:28:78:3f:87:35:d2:5a:08:59:61:
11:6f:63:7b:6f:e8:6c:35:63:92:30:15:c4:01:c9:
6b:70:bb:b8:26:11:f5:b5:53:69:4a:22:61:28:02:
35:0d:0d:b7:5a:1e:10:b3:b2:89:71:52:61:bd:47:
30:0d:a4:dd:41:60:1a:d5:86:0f:6d:4e:55:cd:74:
94:ca:53:7e:5f:56:92:08:ce:46:45:75:5a:bc:16:
c6:71:a3:7f:a2:ce:4d:44:2c:10:86:fd:ac:22:83:
7f:6d:d7:57:fa:f7:3c:1d:50:49:6f:6d:df:e7:6a:
27:25:64:bc:bc:ab:d4:b2:75:e9:f3:42:6d:b4:09:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:F3:96:91:BB:43:67:E4:74:33:AF:D8:9D:E4:0D:E3:49:7D:1D
X509v3 Authority Key Identifier:
keyid:EC:B9:D2:49:9C:67:50:6B:8B:23:31:B0:A1:5D:E2:08:CB:33:8B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/ECB9D2499C67506B8B2331B0A15DE208CB338B55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB9D2499C67506B8B2331B0A15DE208CB338B55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/ECB9D2499C67506B8B2331B0A15DE208CB338B55.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:b7:43:fc:6e:43:a3:79:70:02:19:17:e2:75:ea:18:f9:
53:b4:d0:f5:01:9b:74:4a:77:39:e2:71:ed:c3:ec:bd:0b:a6:
7b:ec:28:e4:b0:f7:31:1f:8a:18:7c:76:99:24:be:1f:5e:71:
47:71:30:3f:c2:6e:87:ca:61:35:b2:44:7f:12:24:75:8b:2a:
d6:73:56:e4:9c:4c:9b:29:5f:25:61:25:a2:fb:3f:f8:fd:d1:
1d:fc:7a:ef:a1:18:36:68:d5:f0:55:18:db:6d:1a:25:39:70:
3b:af:a0:f1:34:48:8c:2f:92:2c:2a:a8:2c:24:49:1b:4c:9a:
08:6a:9f:63:75:42:27:0d:b4:75:76:31:ee:b8:ef:8c:c3:be:
0d:58:49:4e:ff:39:ed:36:d6:b5:bb:f7:cb:42:2d:95:21:e4:
bf:b9:35:e1:87:5c:93:c9:e0:11:8d:e4:3b:90:07:05:04:10:
5d:81:d6:ea:a3:e3:2b:b4:db:0c:91:84:f6:d8:4f:ed:3c:00:
bb:a9:96:7f:f1:0a:6b:8f:3d:8e:c2:e6:b8:ec:0a:18:d7:09:
89:58:d3:7d:98:a2:67:72:d3:57:19:89:80:51:62:a8:c3:38:
32:f8:f0:ff:eb:af:9b:97:20:5a:55:76:3c:67:fd:e7:a0:77:
b8:98:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:59 2025 by rpki-client