This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
File: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft (raw, json)
Hash identifier: +RO5ZylAU9sgo2NXffTQlw7w66GWYgjT/jGCRjO5Wm8=
Subject key identifier: 9A:BE:6C:75:BC:5B:3B:93:EB:0A:62:07:D9:88:9A:62:10:3F:C2:59
Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42
Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
Certificate serial: 491DFF0F1D72C8D2090B1C170091F3FACB5B7BF1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
Manifest number: 01AF
Signing time: Sat 06 Dec 2025 00:54:12 +0000
Manifest this update: Sat 06 Dec 2025 00:49:12 +0000
Manifest next update: Sun 07 Dec 2025 03:22:12 +0000
Files and hashes: 1: 323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (hash: N2nTtvb8JXqHz8HSxYE4bRZRkUdpeFoYlVaINLv7iHM=)
2: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (hash: mJq4dFqiva5H7E/DVQTNnmaU+jNCkwWuNtHA92VtrOU=)
3: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl (hash: kHjGUOCbvI4Iq91vzdlYxtP7r4EUTCZAxFFQEhaRU0g=)
4: 323830343a366262343a3a2f33322d3336203d3e20323730343138.roa (hash: iXw8eyww30FtkaY4pIbyQVccKqIHDDzs1Oowd0Qxomg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl
rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1d:ff:0f:1d:72:c8:d2:09:0b:1c:17:00:91:f3:fa:cb:5b:7b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
Validity
Not Before: Dec 6 00:49:12 2025 GMT
Not After : Dec 7 03:22:12 2025 GMT
Subject: CN=9ABE6C75BC5B3B93EB0A6207D9889A62103FC259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:7e:8f:95:45:f7:f2:9a:fe:c4:20:ef:46:
72:09:42:1f:5e:5e:54:ce:1b:28:e1:b9:1b:4e:7d:
c9:87:1a:9e:7c:bf:5e:a5:5e:8a:6d:78:2b:b3:5d:
c8:98:97:5b:1f:5c:41:23:66:72:9e:a6:81:7c:72:
15:e3:4e:c2:b3:f0:0a:38:30:4e:a8:ad:8d:9e:7a:
ea:36:31:99:4e:96:e9:4c:63:92:eb:98:66:88:1b:
53:82:a0:e0:d5:c3:3a:8d:9b:17:37:2e:b1:7b:59:
05:e2:6d:ab:c0:fc:45:05:6a:5d:94:f2:63:59:2d:
65:04:7f:af:59:13:35:eb:96:87:07:85:3c:57:9a:
09:23:5e:c4:40:ea:a7:2a:ab:dc:6f:5b:7a:6c:e2:
2f:2b:f2:34:f3:4c:fa:4b:1d:a5:50:30:e2:30:ee:
14:dc:df:c9:71:9f:77:0e:20:57:5b:0d:14:3b:10:
d8:f3:28:cb:13:07:93:6f:e9:01:3b:21:31:85:e9:
43:e9:aa:32:b2:21:43:d1:71:8e:6d:77:96:87:b8:
dc:ed:25:79:91:b7:ca:a1:b7:54:0e:b0:b8:dc:05:
5f:ea:e4:69:59:3c:f3:72:63:ff:69:b4:37:40:92:
b7:fc:99:f7:6e:67:dd:c9:2f:35:dd:5b:e8:03:56:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:6C:75:BC:5B:3B:93:EB:0A:62:07:D9:88:9A:62:10:3F:C2:59
X509v3 Authority Key Identifier:
keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:07:9b:f2:c3:30:6c:b5:39:04:3f:7f:a8:4b:a5:c1:83:72:
c0:6b:ad:0e:af:42:cc:91:34:0a:78:cf:96:04:9b:28:70:20:
95:40:a3:03:d4:9f:af:c4:07:be:ed:71:85:a6:04:4d:9e:43:
1c:27:c0:98:2e:bc:27:e5:63:a2:d6:b7:53:37:c6:0f:29:28:
a3:f1:f8:79:95:0b:db:01:f1:cd:1c:20:44:1b:e9:57:43:ce:
d0:0f:8f:bb:71:e2:7e:db:29:35:83:3a:dd:c3:dd:50:74:1d:
36:6a:08:8d:ca:b7:25:f9:ea:a5:ac:3e:b1:1b:ef:1b:32:ab:
e5:35:2f:13:e3:47:32:87:39:1a:87:a9:26:f9:62:cb:16:70:
81:1b:b9:6d:9b:7e:6f:5f:9e:0d:15:a7:e7:ee:fd:e1:8e:06:
c8:5a:e5:4f:74:90:c6:6c:00:f0:25:c8:4a:04:8e:03:ec:4f:
50:69:4b:11:bb:7d:7a:e6:b6:d1:99:ee:3d:1a:66:7a:89:7c:
cb:09:79:c2:f1:16:aa:ca:f4:df:fd:0e:a9:0f:5b:74:94:4d:
ce:b4:24:21:40:30:0c:c5:e9:a4:cc:8f:3c:a9:61:9e:41:48:
3f:a4:a5:eb:c6:92:30:1e:e0:16:b0:77:02:bb:09:ff:ba:d5:
04:71:38:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSR3/Dx1yyNIJCxwXAJHz+stbe/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx
ODhERTg0MjAeFw0yNTEyMDYwMDQ5MTJaFw0yNTEyMDcwMzIyMTJaMDMxMTAvBgNV
BAMTKDlBQkU2Qzc1QkM1QjNCOTNFQjBBNjIwN0Q5ODg5QTYyMTAzRkMyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0n6PlUX38pr+xCDvRnIJQh9e
XlTOGyjhuRtOfcmHGp58v16lXopteCuzXciYl1sfXEEjZnKepoF8chXjTsKz8Ao4
ME6orY2eeuo2MZlOlulMY5LrmGaIG1OCoODVwzqNmxc3LrF7WQXibavA/EUFal2U
8mNZLWUEf69ZEzXrlocHhTxXmgkjXsRA6qcqq9xvW3ps4i8r8jTzTPpLHaVQMOIw
7hTc38lxn3cOIFdbDRQ7ENjzKMsTB5Nv6QE7ITGF6UPpqjKyIUPRcY5td5aHuNzt
JXmRt8qht1QOsLjcBV/q5GlZPPNyY/9ptDdAkrf8mfduZ93JLzXdW+gDVlj9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmr5sdbxbO5PrCmIH2YiaYhA/wlkwHwYDVR0j
BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5
YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1
MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5YUcvMC9D
REVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJweb8sMwbLU5BD9/qEulwYNywGutDq9CzJE0CnjPlgSbKHAglUCjA9Sfr8QH
vu1xhaYETZ5DHCfAmC68J+Vjota3UzfGDykoo/H4eZUL2wHxzRwgRBvpV0PO0A+P
u3HiftspNYM63cPdUHQdNmoIjcq3Jfnqpaw+sRvvGzKr5TUvE+NHMoc5GoepJvli
yxZwgRu5bZt+b1+eDRWn5+794Y4GyFrlT3SQxmwA8CXISgSOA+xPUGlLEbt9eua2
0ZnuPRpmeol8ywl5wvEWqsr03/0OqQ9bdJRNzrQkIUAwDMXppMyPPKlhnkFIP6Sl
68aSMB7gFrB3ArsJ/7rVBHE4UQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:55 2025 by rpki-client