This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
File: 98980CEC2611F43F690D06E91CE7253FC1396E1D.mft (raw, json)
Hash identifier: gMFT4JgA0QMJWpRBp5QO5zNtDMd+7bSIF2miogkVZbY=
Subject key identifier: DF:F0:C2:A2:BF:98:1F:9A:CB:F0:E6:69:F2:05:85:0F:78:FF:53:31
Authority key identifier: 98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
Certificate issuer: /CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Certificate serial: 33CBEB49354F9ECF795D9BF8A3F4CC00C26EA7A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
Manifest number: 017B
Signing time: Sun 21 Dec 2025 19:40:36 +0000
Manifest this update: Sun 21 Dec 2025 19:35:36 +0000
Manifest next update: Mon 22 Dec 2025 22:39:36 +0000
Files and hashes: 1: 98980CEC2611F43F690D06E91CE7253FC1396E1D.crl (hash: /xp4zDYPhZ0FzKaUIDOApN6vh1kSTv7dtilmVTPc5Mo=)
2: 3137392e302e37362e302f32322d3234203d3e20323731333631.roa (hash: RRR55kh3PsEBtltJnYpzmvXcONn+w6LhmOV77SpKi/w=)
3: 323830343a376135383a3a2f33322d3438203d3e20323731333631.roa (hash: UghSLn3A+ytTKvqndTJ2o9qFeZaiTsBd07Fh0T7LKt4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl
rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 20:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:cb:eb:49:35:4f:9e:cf:79:5d:9b:f8:a3:f4:cc:00:c2:6e:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98980CEC2611F43F690D06E91CE7253FC1396E1D
Validity
Not Before: Dec 21 19:35:36 2025 GMT
Not After : Dec 22 22:39:36 2025 GMT
Subject: CN=DFF0C2A2BF981F9ACBF0E669F205850F78FF5331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:d0:68:0e:e6:4a:2d:5f:0e:9a:27:7e:70:
3b:9a:f9:ff:2e:32:96:17:68:9c:5e:4b:f5:f0:7c:
7b:97:b8:5b:19:83:4d:54:4c:ca:b2:17:96:01:48:
94:21:80:f0:96:14:22:17:5b:3a:4f:61:8a:63:24:
57:4a:55:a6:33:00:d5:ac:4d:75:78:ae:99:70:5d:
79:c8:34:87:ad:92:57:fe:bc:dd:2a:d9:2c:9c:fe:
9f:d8:45:4a:f2:37:25:13:a3:0d:f5:85:d6:1a:0c:
a4:21:1e:0a:7e:f7:d4:b6:4c:f3:1d:28:39:b1:62:
74:94:93:54:e1:42:8c:f8:65:e6:ff:04:f6:54:c7:
e3:6e:30:a9:1a:bb:a6:f3:08:3c:b4:83:a2:18:c9:
bd:84:01:f9:62:87:17:ad:e3:ca:ae:0c:94:1a:83:
2e:62:86:40:c4:a5:6b:0b:f7:fc:86:be:0c:18:09:
30:4f:dc:aa:42:9e:4d:df:4c:f0:c1:16:18:3e:b8:
7b:82:cd:70:b9:b1:36:56:22:b1:f4:d7:16:6a:6a:
1d:d4:fa:8b:0b:03:10:82:32:cb:c9:6c:f7:31:03:
c0:09:f3:7b:e0:76:63:e2:26:f6:01:bb:ca:d8:10:
3e:97:08:e5:8e:2b:99:73:e0:5e:52:dd:fc:d0:05:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F0:C2:A2:BF:98:1F:9A:CB:F0:E6:69:F2:05:85:0F:78:FF:53:31
X509v3 Authority Key Identifier:
keyid:98:98:0C:EC:26:11:F4:3F:69:0D:06:E9:1C:E7:25:3F:C1:39:6E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98980CEC2611F43F690D06E91CE7253FC1396E1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/98980CEC2611F43F690D06E91CE7253FC1396E1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:34:75:d1:6a:80:cf:47:6e:d6:9c:76:2e:00:97:b9:f8:5f:
e6:81:f7:37:3d:81:93:ff:f5:2d:9b:08:c3:85:3b:43:bd:38:
e4:df:e1:9c:21:54:1e:f1:58:47:42:85:0f:bd:b7:01:e7:e7:
77:26:96:cf:81:bc:c9:a6:1b:25:16:5e:7f:8e:41:bd:7e:08:
20:0f:3a:73:83:d1:f9:47:7a:0e:8c:78:df:b1:18:16:4c:7f:
fd:ad:d2:69:ee:90:5d:84:dc:d4:e6:15:80:31:11:8c:e7:d8:
7e:60:d2:eb:18:90:47:d9:04:0f:e8:bd:17:53:12:da:77:c9:
c3:dc:2a:28:f8:de:5e:8f:50:12:35:a3:b7:d0:11:b4:97:19:
7d:fd:96:1d:1c:34:24:5f:15:b5:87:9a:87:91:35:ef:c5:90:
84:8f:ae:e3:bb:8c:d7:b4:4e:b7:77:ea:8d:41:82:e7:0f:5f:
84:20:28:5b:9c:b2:53:0f:72:df:36:a7:fc:2c:dc:70:44:67:
72:23:16:f8:f0:74:62:43:34:19:38:e3:37:ee:76:be:cc:e0:
53:d9:05:cb:f2:7d:1e:46:e9:ed:bd:3d:9a:9c:f0:a5:68:26:
45:e7:36:63:f4:0d:90:a9:b1:f1:2a:dd:a5:1e:10:dd:06:4a:
1c:25:fc:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM8vrSTVPns95XZv4o/TMAMJup6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg5ODBDRUMyNjExRjQzRjY5MEQwNkU5MUNFNzI1M0ZD
MTM5NkUxRDAeFw0yNTEyMjExOTM1MzZaFw0yNTEyMjIyMjM5MzZaMDMxMTAvBgNV
BAMTKERGRjBDMkEyQkY5ODFGOUFDQkYwRTY2OUYyMDU4NTBGNzhGRjUzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVtBoDuZKLV8Omid+cDua+f8u
MpYXaJxeS/XwfHuXuFsZg01UTMqyF5YBSJQhgPCWFCIXWzpPYYpjJFdKVaYzANWs
TXV4rplwXXnINIetklf+vN0q2Syc/p/YRUryNyUTow31hdYaDKQhHgp+99S2TPMd
KDmxYnSUk1ThQoz4Zeb/BPZUx+NuMKkau6bzCDy0g6IYyb2EAflihxet48quDJQa
gy5ihkDEpWsL9/yGvgwYCTBP3KpCnk3fTPDBFhg+uHuCzXC5sTZWIrH01xZqah3U
+osLAxCCMsvJbPcxA8AJ83vgdmPiJvYBu8rYED6XCOWOK5lz4F5S3fzQBYsHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3/DCor+YH5rL8OZp8gWFD3j/UzEwHwYDVR0j
BBgwFoAUmJgM7CYR9D9pDQbpHOclP8E5bh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMC85ODk4MENFQzI2MTFGNDNGNjkwRDA2RTkxQ0U3MjUzRkMxMzk2RTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OTgwQ0VDMjYxMUY0M0Y2
OTBEMDZFOTFDRTcyNTNGQzEzOTZFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3MnYvMC85
ODk4MENFQzI2MTFGNDNGNjkwRDA2RTkxQ0U3MjUzRkMxMzk2RTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEjR10WqAz0du1px2LgCXufhf5oH3Nz2Bk//1LZsIw4U7Q7045N/hnCFUHvFY
R0KFD723AefndyaWz4G8yaYbJRZef45BvX4IIA86c4PR+Ud6Dox437EYFkx//a3S
ae6QXYTc1OYVgDERjOfYfmDS6xiQR9kED+i9F1MS2nfJw9wqKPjeXo9QEjWjt9AR
tJcZff2WHRw0JF8VtYeah5E178WQhI+u47uM17ROt3fqjUGC5w9fhCAoW5yyUw9y
3zan/CzccERnciMW+PB0YkM0GTjjN+52vszgU9kFy/J9Hkbp7b09mpzwpWgmRec2
Y/QNkKmx8SrdpR4Q3QZKHCX80A==
-----END CERTIFICATE-----
Generated at Sun Dec 21 20:56:52 2025 by rpki-client