This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
File: 5123FB1095A3958EA116FBD4615EF7B626346FBD.mft (raw, json)
Hash identifier: Qsy4V8Tc8zlbK5ozKX6FQQD2vXbnfxW4tN8M+4Ple4E=
Subject key identifier: F2:EA:36:2A:A6:D9:D3:A8:D6:2D:DD:CD:85:B9:38:89:97:CB:02:6F
Authority key identifier: 51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD
Certificate issuer: /CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
Certificate serial: 2F28AD3830A3084D44DA1D71F9738AD04CFB1258
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
Manifest number: 01A8
Signing time: Sat 06 Dec 2025 15:44:59 +0000
Manifest this update: Sat 06 Dec 2025 15:39:59 +0000
Manifest next update: Sun 07 Dec 2025 19:29:59 +0000
Files and hashes: 1: 323830343a386231633a3a2f33322d3332203d3e20323733373132.roa (hash: IB5+WuMlTRHx6oMJ1YuC2n9MCqBKQX94bxMY4efgebk=)
2: 5123FB1095A3958EA116FBD4615EF7B626346FBD.crl (hash: 8fNLnlPbxPYcny3ab0yU4ZjHQq/+48gGiMhh7iWYj/w=)
3: 3137372e31322e3134312e302f32342d3234203d3e20323733373132.roa (hash: +gijL34u95r5yJznPEdZ7rZonx8s0h1ozytTyOKmXJg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.crl
rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 19:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:28:ad:38:30:a3:08:4d:44:da:1d:71:f9:73:8a:d0:4c:fb:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
Validity
Not Before: Dec 6 15:39:59 2025 GMT
Not After : Dec 7 19:29:59 2025 GMT
Subject: CN=F2EA362AA6D9D3A8D62DDDCD85B9388997CB026F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:62:28:b0:0e:dc:85:1f:02:5e:d2:90:3d:
d3:76:17:fa:e1:9a:8f:4a:50:75:32:45:25:4e:e3:
82:85:b6:b7:df:47:5e:50:f1:6e:41:c9:34:5e:c5:
1f:76:fa:bc:fa:39:13:d6:57:7f:ed:bc:09:0b:a1:
a5:5a:ee:bf:ce:fd:5e:3d:57:d8:4a:07:55:ad:85:
7e:c8:83:64:44:80:ab:5c:34:51:23:00:44:f5:22:
10:e3:c3:01:37:06:bc:2e:44:49:92:94:2a:78:03:
38:18:e3:4a:be:a4:df:88:92:d8:12:ad:54:2d:8b:
84:1b:ba:8b:17:31:58:8b:ec:5b:4d:08:2c:e5:fa:
ea:9c:f6:09:63:75:31:34:a2:50:aa:14:a9:6f:13:
d3:70:f2:66:a5:d0:6b:5b:2e:a2:0b:19:0a:62:53:
c4:e2:c4:29:76:19:4e:69:0b:4a:6c:85:87:f0:c9:
b5:b0:45:7f:5a:a1:53:73:fb:f5:c4:99:98:45:68:
9a:f3:17:c6:ce:11:c4:81:df:38:8a:3c:dc:ce:2f:
94:a0:41:66:28:06:25:4b:da:ab:e5:af:c6:b9:2b:
76:4b:40:63:30:65:93:55:05:7b:4f:55:eb:08:97:
f0:0c:55:2e:40:d8:ec:be:88:ed:54:f6:e7:28:00:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:36:2A:A6:D9:D3:A8:D6:2D:DD:CD:85:B9:38:89:97:CB:02:6F
X509v3 Authority Key Identifier:
keyid:51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0e:ff:d3:25:5e:ad:1a:03:fc:8b:f9:dc:b5:de:a4:7f:d6:
81:30:0d:cf:f3:fa:6f:4f:35:9f:3d:65:23:af:63:18:e1:75:
d5:b2:6e:dd:8d:00:c0:8c:ba:d6:79:c3:2c:ee:70:7c:4b:cf:
40:92:77:40:cd:76:e9:49:0f:4d:0d:71:60:eb:8f:e0:1c:2b:
dd:dc:1d:9a:6e:cb:c9:3c:96:87:b9:5b:d2:7b:2f:fb:2d:a9:
49:4d:5c:40:37:aa:49:ed:e9:ca:94:73:34:12:90:55:0a:6b:
48:23:3b:b3:cb:74:c7:b6:e5:c7:6e:88:e1:7c:dc:b5:c8:b0:
77:cd:fa:c1:95:b9:7b:cd:00:af:e9:6c:1b:37:d1:e3:e3:26:
b3:be:2c:56:7c:62:ad:92:c6:1f:5e:73:56:12:5d:8d:84:86:
75:7e:ea:48:e0:3b:c5:e7:7a:e4:15:e2:21:c3:f9:10:c4:3e:
e0:7f:ab:90:f8:90:8d:ca:47:98:04:fd:a5:e2:53:6e:ea:ac:
95:ec:1b:d7:69:a4:9b:f1:7b:ee:c9:20:a5:bb:e5:ec:14:c5:
31:76:ab:7d:3d:af:fa:18:0d:66:5b:15:77:3c:6f:d5:cb:09:
56:d8:0c:c8:dd:5e:d5:09:a1:c9:f3:04:b4:00:d1:86:ce:a5:
89:2e:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:11 2025 by rpki-client