This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
File: A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft (raw, json)
Hash identifier: 5DTlKm8s2Xkn2MvfRObw2BR99wxDK6+0KefYlbSQacc=
Subject key identifier: 4A:7A:37:DD:A6:7E:D2:7C:0F:67:98:3F:B4:7B:7E:3E:FE:5F:1B:8A
Authority key identifier: A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38
Certificate issuer: /CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338
Certificate serial: BE79AB624FD32E5D18C991FAB0B6639FB721FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
Manifest number: 06
Signing time: Fri 05 Dec 2025 19:16:30 +0000
Manifest this update: Fri 05 Dec 2025 19:11:30 +0000
Manifest next update: Sat 06 Dec 2025 21:52:30 +0000
Files and hashes: 1: 323830343a356562383a3a2f33322d3438203d3e20323632383636.roa (hash: 5E0Ifwta81LchCt92H2rxh4tPOU70g5Au1TMHbfMgYU=)
2: 3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa (hash: d2HfhAlckHg4C6fC1rT/Khe5GGcuY40/8fSPstNqiY8=)
3: A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl (hash: Ox+EL/B/VcovDnYtLa4VfT+h/82BgP7mAJ4ROLa/AFM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl
rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 21:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
be:79:ab:62:4f:d3:2e:5d:18:c9:91:fa:b0:b6:63:9f:b7:21:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338
Validity
Not Before: Dec 5 19:11:30 2025 GMT
Not After : Dec 6 21:52:30 2025 GMT
Subject: CN=4A7A37DDA67ED27C0F67983FB47B7E3EFE5F1B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:05:40:16:e9:f2:2d:61:f7:52:23:35:cd:
18:61:73:64:bf:f1:1f:b6:1e:3f:68:08:aa:0e:97:
7f:dc:42:90:f1:9b:21:0e:d1:e4:77:02:e8:7b:0a:
5b:26:7a:03:df:d6:45:49:d7:a6:a4:84:20:a6:59:
6d:94:b3:9b:85:b4:af:37:e0:10:49:32:b2:64:35:
be:89:32:1d:cc:58:d8:2c:f6:45:57:e0:d3:0a:e9:
2e:0d:a9:5e:87:83:9b:1c:86:7a:8c:76:2a:b1:25:
dc:9d:21:84:a0:69:3e:8a:97:1e:df:69:6d:c3:4c:
b2:97:c6:b4:31:fc:73:11:e1:fc:ab:61:c8:df:82:
06:8f:94:5f:a0:f8:98:55:08:3c:dd:83:78:6a:44:
1b:24:48:3b:68:af:dc:0c:a9:de:aa:01:85:c3:1f:
42:fc:8c:1f:b5:2a:60:77:7f:03:24:68:e9:81:42:
d9:30:c6:90:4d:01:4a:81:7b:c7:97:7c:cc:1e:6b:
6d:71:22:ea:19:7c:00:ec:5a:16:de:81:6a:e3:8e:
ba:94:40:cd:22:a2:58:16:7b:c7:eb:9a:ed:f4:56:
3a:33:ee:65:b5:79:73:82:2a:21:a1:64:a5:d0:4b:
9a:bb:b2:58:d1:5f:0f:14:1b:13:ea:58:1c:27:ea:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7A:37:DD:A6:7E:D2:7C:0F:67:98:3F:B4:7B:7E:3E:FE:5F:1B:8A
X509v3 Authority Key Identifier:
keyid:A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:59:14:dd:53:0c:b5:a3:83:ff:2e:6e:04:51:88:39:d9:cb:
c2:dd:e0:6f:91:f3:79:ca:00:30:12:2a:17:8c:3b:fb:d3:b7:
99:ae:f3:bf:3f:b9:e0:c3:1e:11:52:a2:2c:a8:98:7b:e2:ec:
90:53:e1:a0:19:07:4f:30:5b:bf:25:7c:92:74:49:e6:59:a2:
02:e9:3c:6a:63:e4:2f:c4:7c:07:61:9a:65:28:7f:60:33:6f:
27:5e:ff:a8:31:bf:7f:d9:52:12:f4:b6:cf:3d:e1:50:60:fa:
79:b3:1a:59:83:97:c1:d5:9e:2d:70:7c:26:60:33:5d:07:6a:
9b:e1:ef:08:92:5a:c8:b1:81:a9:68:c6:c6:46:d9:4d:ac:b7:
a5:86:c7:06:fd:80:81:9e:62:77:29:8c:7d:75:8c:4b:f2:c9:
7f:d2:08:30:42:c7:b4:3e:ba:46:1b:c9:ee:e8:76:13:29:4b:
03:f2:62:d1:18:b7:2a:a2:1b:fe:70:8c:a5:6d:02:fb:6e:e8:
41:5e:c9:06:00:62:a8:f0:aa:73:22:0f:31:fe:78:10:24:b9:
4d:f1:ff:50:19:ea:aa:65:55:1e:9b:2a:dd:c4:a6:cc:de:57:
59:c0:8b:49:47:a4:22:d0:4c:46:ab:4c:7d:7f:58:1c:c1:dd:
a7:63:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:45 2025 by rpki-client