This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
File: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft (raw, json)
Hash identifier: 1YVNmnEfSAND9Jehh4h6KSgei+om72LQguftVoHflJQ=
Subject key identifier: D2:3F:31:23:5D:DE:DC:55:83:E2:36:00:6E:C7:1C:A3:91:8C:E6:E2
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Certificate issuer: /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial: 4A87380358928A44BFD2C152C3CAECDDCCE4DFAD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
Manifest number: 019E
Signing time: Sat 06 Dec 2025 02:28:09 +0000
Manifest this update: Sat 06 Dec 2025 02:23:09 +0000
Manifest next update: Sun 07 Dec 2025 04:45:09 +0000
Files and hashes: 1: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (hash: xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=)
2: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl (hash: +YiKYTgUtWzE2v3f1o8FQHyk0V0gR03WRGCU7Rm/JTE=)
3: 323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (hash: bustMz7M+5CMeM9CRQbzDoUPI+6nwA7yTMNCHpORS1E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:87:38:03:58:92:8a:44:bf:d2:c1:52:c3:ca:ec:dd:cc:e4:df:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Validity
Not Before: Dec 6 02:23:09 2025 GMT
Not After : Dec 7 04:45:09 2025 GMT
Subject: CN=D23F31235DDEDC5583E236006EC71CA3918CE6E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:12:73:77:95:d7:46:98:63:7c:fd:4b:ad:
c9:64:29:6b:fc:9a:56:16:08:4a:0f:72:d5:dc:77:
f3:2d:3f:6c:54:db:13:e1:10:bd:b8:d8:a3:9d:9e:
ee:1a:9e:ac:15:25:86:b4:0a:ed:ba:3b:ed:c0:3c:
36:f6:b3:ee:ab:a8:39:40:41:d1:c5:00:2f:3d:98:
33:7e:cd:ac:42:25:f3:0a:3f:27:85:71:5e:6b:22:
14:1c:14:fd:2c:4f:51:28:7a:22:f8:46:d1:24:3e:
ee:75:fc:93:1d:a5:9e:74:ff:ee:99:92:1c:70:3b:
72:a5:ea:c7:a6:4e:db:5e:0e:73:78:11:3c:d6:95:
58:35:f6:7a:12:59:9c:ac:89:1b:0c:ee:2d:6f:bc:
a0:25:41:42:b0:38:1d:5a:75:c8:d2:38:51:ad:eb:
02:ba:ba:84:97:5d:8e:22:0f:f2:fd:f8:49:66:36:
e0:20:32:a9:e2:79:d2:95:39:41:31:ce:d6:d3:c7:
33:ce:88:44:d1:77:d5:44:36:25:82:8c:e8:46:69:
9e:e6:2e:d9:07:2a:41:de:9f:90:47:4e:be:c5:05:
55:a6:fd:ea:cf:42:75:91:19:20:9d:d5:b6:88:bb:
1a:03:d5:bc:79:cf:af:a2:08:01:0e:66:68:de:71:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:31:23:5D:DE:DC:55:83:E2:36:00:6E:C7:1C:A3:91:8C:E6:E2
X509v3 Authority Key Identifier:
keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9d:f4:3c:38:d0:fe:f7:49:f3:69:e0:3d:69:db:84:f1:fe:
9a:b6:69:8e:b2:56:da:05:94:a8:61:d2:b0:82:8e:0b:67:09:
0b:bb:25:c8:5b:04:a8:2c:32:4d:7a:49:b1:7c:72:c0:9a:29:
ea:f1:b7:89:10:c8:fb:92:51:a9:24:28:52:d6:3f:ea:06:a5:
bd:e5:9a:a5:bf:8c:fc:33:61:bc:fb:4a:e9:22:db:aa:7e:32:
86:e4:0c:aa:4e:78:fa:1f:3f:df:25:fc:9d:e2:ec:2e:c3:5b:
0f:cf:5e:84:5b:59:28:80:c9:a5:bb:b9:94:ee:f9:db:19:3b:
d1:43:c8:a4:d5:af:38:b9:24:66:48:d2:72:36:22:43:c8:22:
54:af:87:8e:a2:65:ce:6f:91:4d:b7:c2:01:47:6f:13:cc:ef:
8f:ef:c7:d4:43:46:a9:c7:54:e1:fb:a6:96:4c:7f:a1:ce:65:
10:73:5f:ea:93:63:75:cc:3b:55:38:80:13:11:99:25:4c:19:
10:6f:b6:5b:c8:4e:10:38:85:1f:ff:6a:31:b8:0e:06:19:26:
c6:56:0b:15:37:e0:37:f0:29:8a:e6:7e:77:d5:50:df:0c:c5:
a7:83:b7:1a:8d:4b:a3:21:ce:d2:44:a8:ab:b6:fd:da:23:66:
22:fb:c7:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSoc4A1iSikS/0sFSw8rs3czk360wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1MjdFODJENjAzRkZCRTZEQTJFRjhFRDgyQzdCQjFG
N0EzOUI4OTAeFw0yNTEyMDYwMjIzMDlaFw0yNTEyMDcwNDQ1MDlaMDMxMTAvBgNV
BAMTKEQyM0YzMTIzNURERURDNTU4M0UyMzYwMDZFQzcxQ0EzOTE4Q0U2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ShJzd5XXRphjfP1LrclkKWv8
mlYWCEoPctXcd/MtP2xU2xPhEL242KOdnu4anqwVJYa0Cu26O+3APDb2s+6rqDlA
QdHFAC89mDN+zaxCJfMKPyeFcV5rIhQcFP0sT1EoeiL4RtEkPu51/JMdpZ50/+6Z
khxwO3Kl6semTtteDnN4ETzWlVg19noSWZysiRsM7i1vvKAlQUKwOB1adcjSOFGt
6wK6uoSXXY4iD/L9+ElmNuAgMqniedKVOUExztbTxzPOiETRd9VENiWCjOhGaZ7m
LtkHKkHen5BHTr7FBVWm/erPQnWRGSCd1baIuxoD1bx5z6+iCAEOZmjecfJJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0j8xI13e3FWD4jYAbscco5GM5uIwHwYDVR0j
BBgwFoAUMlJ+gtYD/75tou+O2Cx7sfejm4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05q
UHYvMC8zMjUyN0U4MkQ2MDNGRkJFNkRBMkVGOEVEODJDN0JCMUY3QTM5Qjg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNTI3RTgyRDYwM0ZGQkU2
REEyRUY4RUQ4MkM3QkIxRjdBMzlCODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05qUHYvMC8z
MjUyN0U4MkQ2MDNGRkJFNkRBMkVGOEVEODJDN0JCMUY3QTM5Qjg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWp30PDjQ/vdJ82ngPWnbhPH+mrZpjrJW2gWUqGHSsIKOC2cJC7slyFsEqCwy
TXpJsXxywJop6vG3iRDI+5JRqSQoUtY/6galveWapb+M/DNhvPtK6SLbqn4yhuQM
qk54+h8/3yX8neLsLsNbD89ehFtZKIDJpbu5lO752xk70UPIpNWvOLkkZkjScjYi
Q8giVK+HjqJlzm+RTbfCAUdvE8zvj+/H1ENGqcdU4fumlkx/oc5lEHNf6pNjdcw7
VTiAExGZJUwZEG+2W8hOEDiFH/9qMbgOBhkmxlYLFTfgN/ApiuZ+d9VQ3wzFp4O3
Go1LoyHO0kSoq7b92iNmIvvH7Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:29 2025 by rpki-client