This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
File: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft (raw, json)
Hash identifier: gOyvKALTgf3qMooCUADc8Qj+B30E1QpQ6BDzoVX8DkA=
Subject key identifier: 75:55:74:75:76:B0:02:95:5D:BE:03:78:48:5A:D7:B7:BC:87:B5:1B
Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
Certificate issuer: /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Certificate serial: 589CCF28C224C4053A8CAFA4FD131CD9796E917F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
Manifest number: 020C
Signing time: Fri 05 Dec 2025 22:10:53 +0000
Manifest this update: Fri 05 Dec 2025 22:05:53 +0000
Manifest next update: Sat 06 Dec 2025 23:03:53 +0000
Files and hashes: 1: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (hash: jDkzEu3dfEoW/TK85s2VDg93/wRMdxQYYXsBqd5++Ao=)
2: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl (hash: p70rd37uSGtAHgwhSJUyUzds8KS4h30Emc75N7dQQSI=)
3: 323830343a353461383a3a2f33322d3438203d3e20323638363633.roa (hash: m7+hgmJslk8ghgjHVc6HPco/IHPiW92CG2MNjN+UFQs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9c:cf:28:c2:24:c4:05:3a:8c:af:a4:fd:13:1c:d9:79:6e:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Validity
Not Before: Dec 5 22:05:53 2025 GMT
Not After : Dec 6 23:03:53 2025 GMT
Subject: CN=7555747576B002955DBE0378485AD7B7BC87B51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:72:d2:f8:17:6c:8d:85:7b:2e:a2:6b:b1:
b1:f4:bf:e5:d3:6d:5b:33:42:37:50:6b:22:25:d3:
cf:63:8b:ff:10:a2:6b:62:45:b6:79:40:85:4c:ee:
55:a5:5c:f3:ab:cf:79:ab:d3:46:44:3f:a3:1f:67:
0f:5c:78:71:32:75:8f:fd:cd:ed:2f:8c:21:26:d6:
b4:dd:c1:ae:4c:87:7d:24:ce:5a:49:e8:45:df:a0:
47:00:ff:1e:ed:7b:c6:95:69:b7:50:a9:7a:18:56:
14:6e:a5:f9:46:61:d2:d2:e8:6b:28:a3:05:c6:6e:
ee:c1:2a:e0:06:96:b7:19:04:4a:fd:e9:47:79:59:
52:d5:a1:15:ea:25:8d:01:6a:7c:c7:42:81:fc:30:
61:74:d7:9b:3b:76:7d:61:e1:f4:b0:19:e7:af:1b:
60:6e:98:20:0e:31:fa:c6:bb:4a:bb:1d:3e:ad:b6:
07:78:33:e9:36:ea:fc:7e:78:1d:44:a8:5f:99:b0:
e0:12:e1:9a:bf:72:ba:b6:61:70:65:98:e1:95:fe:
40:5f:54:65:97:2d:b2:08:f5:49:06:9c:c2:55:7c:
16:6d:74:d8:21:13:62:6f:b2:0b:35:9f:ce:48:54:
cc:1d:b2:d3:06:cb:8c:66:f5:cf:38:69:7c:96:c2:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:74:75:76:B0:02:95:5D:BE:03:78:48:5A:D7:B7:BC:87:B5:1B
X509v3 Authority Key Identifier:
keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5e:77:55:02:01:82:d8:0a:fa:d4:e6:89:71:2e:e1:5e:b0:
0c:e1:6f:9e:51:e0:57:ba:3d:e3:2f:a2:f8:18:42:9d:8e:e6:
97:63:ba:f6:4a:7e:33:cc:5c:b8:6a:74:4e:1f:82:fc:e6:7d:
85:60:f8:d0:be:1d:b6:9a:1d:61:32:9f:55:da:62:dd:3f:a1:
2f:91:51:28:d5:37:15:4f:b3:4d:db:1b:a0:02:5a:6e:c0:21:
85:66:fe:93:8c:1c:fd:ae:f3:27:7a:3e:01:e6:59:a6:d1:b2:
de:9e:cb:f6:fc:19:84:8a:32:37:14:b2:8c:65:b8:a4:c9:9d:
bd:40:fd:fa:76:db:98:78:bb:52:04:2c:12:54:6e:e6:08:20:
80:fe:39:14:67:6b:0e:d6:14:3a:96:51:14:81:2c:4b:66:0a:
d8:ad:88:fd:31:6b:42:92:de:e3:68:26:8f:8d:87:79:5f:ff:
be:a3:9c:39:32:ff:b9:82:26:8d:7b:5b:40:ef:80:0c:8f:ce:
43:ad:bb:98:37:d8:ad:67:08:d8:bb:eb:e4:92:19:e2:23:18:
7f:3c:66:df:74:d5:8f:47:2f:65:45:43:11:d4:42:f1:d2:8b:
4b:55:36:a4:83:b7:e7:4a:34:f0:ff:68:5f:8f:6f:91:a4:a1:
9d:55:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:19:55 2025 by rpki-client