This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
File: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft (raw, json)
Hash identifier: RVSQjapxyVYBHjcZyqtSDXu0EYQbEVzOUC+IBpWR1+Q=
Subject key identifier: 76:B5:40:0F:CA:0F:F7:74:05:E9:9B:01:49:34:2B:4C:FB:1C:2F:C2
Authority key identifier: CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
Certificate issuer: /CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Certificate serial: 2AD584F3888ED2F5B29D2C9519AA509EEB1AC1A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
Manifest number: 0A
Signing time: Thu 18 Dec 2025 00:59:18 +0000
Manifest this update: Thu 18 Dec 2025 00:54:18 +0000
Manifest next update: Fri 19 Dec 2025 03:38:18 +0000
Files and hashes: 1: 323830343a373034303a3a2f33322d313238203d3e20323730373135.roa (hash: sNgEF06hBcueOscjyGonLqPiAr/nqxGOmW+2KVDrBsY=)
2: 3138392e3132372e3138302e302f32322d3234203d3e20323730373135.roa (hash: RhjZm2uSbdJQigxky7M1jCcFaL9XEEChqLcnVSTm+sM=)
3: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl (hash: Rthwly2scUaJ+uSOND3l0NJzmficWEC3BE0QboD1sOA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 03:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d5:84:f3:88:8e:d2:f5:b2:9d:2c:95:19:aa:50:9e:eb:1a:c1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Validity
Not Before: Dec 18 00:54:18 2025 GMT
Not After : Dec 19 03:38:18 2025 GMT
Subject: CN=76B5400FCA0FF77405E99B0149342B4CFB1C2FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:f0:f0:5d:db:14:75:a1:17:ab:a6:3a:13:
68:bd:35:69:fa:21:8b:ac:04:ef:84:a6:56:58:13:
35:e1:1f:ac:bd:ef:89:73:32:d4:1b:7a:b1:31:0a:
d7:19:6a:8d:d0:87:3a:0e:8c:5c:2f:45:33:c2:93:
d0:73:8b:cf:c0:b8:c7:4a:4f:a7:f3:87:a8:97:e8:
54:8b:6a:d1:75:be:f1:50:24:1a:10:5e:3b:ee:85:
a0:2f:85:16:5f:8e:8a:58:3c:7e:37:6f:86:7a:71:
90:80:c5:27:f4:99:dd:6b:9f:43:27:8d:7c:39:b5:
3d:92:eb:56:b8:97:f0:32:61:b7:89:06:00:7b:32:
42:62:18:08:51:5c:37:63:f3:93:59:bd:30:da:4e:
a7:76:18:a3:eb:9e:17:e5:4d:52:44:56:ce:09:a9:
eb:1d:7a:fe:27:84:ca:42:23:03:4a:62:0a:17:c7:
ed:be:79:e0:41:19:01:70:5c:2c:a3:82:ed:6b:6c:
e1:19:26:46:d8:7e:d9:c5:bd:da:2b:18:ce:19:16:
d3:74:f9:3f:23:c4:1d:ff:a4:97:27:9b:a0:0a:7a:
a6:cb:71:ed:0f:52:df:7f:9c:4f:56:2b:54:8e:cc:
81:3e:b7:7d:0e:0a:85:bb:f1:5d:ea:a9:90:53:ae:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:40:0F:CA:0F:F7:74:05:E9:9B:01:49:34:2B:4C:FB:1C:2F:C2
X509v3 Authority Key Identifier:
keyid:CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:f1:64:ee:73:a2:b3:c8:0f:89:76:fa:b6:46:86:04:ad:
2f:63:24:65:00:01:93:59:2b:8c:09:71:77:61:4d:fc:f7:9d:
a2:7d:11:26:ca:e5:25:eb:6b:39:6f:65:88:f5:60:0f:f9:1d:
55:50:f0:e1:09:12:bc:20:72:68:f3:c1:ed:8f:85:bb:ee:dd:
a1:0c:dc:62:82:04:4d:a9:9e:7a:df:31:2d:c5:4f:5a:cf:87:
5e:3f:11:c6:15:cc:da:5c:d0:cf:82:3f:e8:51:62:85:10:95:
7b:aa:78:65:28:81:a0:e3:ee:64:bd:14:18:ad:07:3a:b1:7a:
e2:84:e5:e7:1d:93:04:41:b6:bd:55:8f:94:00:8a:11:cd:07:
2c:57:df:6d:6e:96:c4:00:8c:fb:e8:31:0a:76:6f:df:af:b8:
f8:2f:94:f4:51:35:7a:4e:8f:ee:14:7d:6b:35:00:1c:33:7f:
8a:ed:47:5a:ec:12:da:6b:32:ee:4c:75:49:f6:83:21:b6:66:
61:99:88:be:9c:9d:db:7b:1b:c6:4d:8f:f2:b4:8e:72:86:c1:
75:80:c3:f8:51:33:8a:6e:01:cf:44:a2:f9:8b:b3:49:35:29:
09:fc:64:6b:ff:2f:c7:15:9d:4c:bf:9d:28:6e:c2:8b:99:13:
18:a2:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:55:29 2025 by rpki-client