This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
File: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json)
Hash identifier: j5fIne6rRxDKVgMIh9Q0V/vanGjb5hsby2TBmVk6pRs=
Subject key identifier: 38:85:BA:6B:3A:6B:65:E3:C0:99:EA:7A:DE:C4:FA:EE:CF:96:EE:2C
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Certificate issuer: /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial: 688AD16C9C4E47D9AFE886CD78E6659E0CB4AC43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
Manifest number: 0332
Signing time: Sat 06 Dec 2025 05:23:22 +0000
Manifest this update: Sat 06 Dec 2025 05:18:22 +0000
Manifest next update: Sun 07 Dec 2025 07:41:22 +0000
Files and hashes: 1: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ahehKlt3W03bvotZ/SKfxhWvDlNr0XGgSJ6YRYOsDlI=)
2: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: 2+aJnh2Q9Ds6NmQQtQrdd3EFoTKUAvkgTSsvPWnE2Ek=)
3: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: DfNh3RPmk1F6vaI2opWHLQmcJPeKWdVIEju80Ku5GeM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8a:d1:6c:9c:4e:47:d9:af:e8:86:cd:78:e6:65:9e:0c:b4:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Validity
Not Before: Dec 6 05:18:22 2025 GMT
Not After : Dec 7 07:41:22 2025 GMT
Subject: CN=3885BA6B3A6B65E3C099EA7ADEC4FAEECF96EE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:b7:12:ae:19:3d:51:7d:80:cd:94:08:ff:
fd:e1:d5:2e:ff:a6:a0:ad:c7:dc:60:1c:f7:25:d2:
cc:6b:79:3b:17:90:9c:25:d3:79:f1:57:de:dc:8a:
fb:64:65:fc:c4:62:e0:f6:f8:56:ae:c4:7e:7f:64:
67:ff:58:3e:9e:ae:29:67:2c:2f:99:e5:4e:b0:da:
ed:f5:4a:65:bc:f9:60:b1:8d:90:14:e5:95:fa:b3:
da:8c:22:5b:71:30:e5:ca:6e:9c:5a:bc:6d:a5:ef:
9f:1f:4c:d6:d8:8a:85:64:0a:77:dd:37:0c:29:49:
06:92:9e:27:27:f9:85:d0:dc:57:ef:a3:33:c0:9f:
96:ef:1f:09:d4:f6:03:25:46:1c:49:74:9b:44:1d:
9c:78:14:6f:00:db:56:b6:ae:09:72:63:55:40:e8:
4b:98:68:55:19:38:09:e3:33:cb:fd:91:ee:49:17:
88:21:3a:0f:40:75:79:54:f4:a5:1b:22:3a:32:d4:
5b:ed:fc:7e:9b:b0:da:fe:7a:52:46:92:7a:62:f9:
08:20:e1:ba:7a:aa:92:ff:9e:a4:a2:cc:db:a6:33:
9b:c1:74:39:14:15:00:e5:4f:55:ad:6e:16:59:2f:
a2:05:3f:3d:4f:69:19:d0:f6:a2:fc:8f:cb:e8:96:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:BA:6B:3A:6B:65:E3:C0:99:EA:7A:DE:C4:FA:EE:CF:96:EE:2C
X509v3 Authority Key Identifier:
keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8e:85:66:c8:23:47:36:b2:df:dd:41:11:6b:c5:6d:29:fc:
ff:7c:b5:fc:e1:9d:96:2c:af:d1:69:40:c6:cc:d3:6d:9f:fb:
8a:0a:5b:80:17:82:6d:5f:9e:e3:f3:08:83:08:d7:58:10:b0:
5b:5a:16:69:5e:a1:4a:ff:0c:d7:78:4e:6b:45:8c:d6:32:f2:
bd:12:e7:0d:b0:0a:84:49:e2:16:6b:59:4c:29:53:e9:65:75:
6a:dc:2e:4e:0f:f7:a5:d5:8f:58:63:05:06:58:f8:1d:b0:50:
cd:f1:9d:28:94:e9:99:89:85:7c:d1:b3:0f:3d:89:f8:1c:c3:
1a:37:12:66:e3:88:f7:5d:34:be:a0:b1:67:1a:52:a8:f2:d6:
7b:2c:7b:a0:8e:e2:e7:8b:26:59:b0:78:bf:c4:4c:3c:64:85:
6b:59:49:c2:54:4f:fe:f0:61:9f:72:65:e5:08:85:64:5c:a6:
cc:f3:a3:f0:78:33:b2:c4:b0:1e:d7:13:20:41:4b:7b:ef:ab:
f5:20:be:8e:9f:56:ee:30:dc:00:b0:e0:78:67:94:a4:b0:d2:
79:fc:f9:6f:6b:19:f4:40:fb:05:84:02:b9:2d:97:d9:1d:cb:
72:cf:ae:19:15:0a:77:49:33:68:12:55:ff:82:6b:0d:a3:c3:
e4:88:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:38 2025 by rpki-client