This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
File: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft (raw, json)
Hash identifier: aVFHTWrhWt9AsT8e4odjmbu2i3p3SYMht2dvBkKEoIM=
Subject key identifier: F1:1B:64:01:D6:4D:F6:11:B1:1B:2C:54:D3:EF:85:49:41:7B:F0:94
Authority key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
Certificate issuer: /CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Certificate serial: 73180AE00CDB703709EC8361460E42FCCEC38A33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject info access: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
Manifest number: 032D
Signing time: Fri 05 Dec 2025 14:19:52 +0000
Manifest this update: Fri 05 Dec 2025 14:14:52 +0000
Manifest next update: Sat 06 Dec 2025 14:49:52 +0000
Files and hashes: 1: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl (hash: 4iHrbS0BBuUHotwl6YJtvUdN1/BlFJ/S0cPTHH41s4E=)
2: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: 8HJEKPfJsJ9cUBPI5dVpHTR/hYHRd/Hg9OtQORwVD/Q=)
3: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: mLr+uiC6lfZpqhMzaY1jB2Xz68LEez2gkuQCR+mbw+s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl
rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 14:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:18:0a:e0:0c:db:70:37:09:ec:83:61:46:0e:42:fc:ce:c3:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Validity
Not Before: Dec 5 14:14:52 2025 GMT
Not After : Dec 6 14:49:52 2025 GMT
Subject: CN=F11B6401D64DF611B11B2C54D3EF8549417BF094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:02:73:87:dd:07:e0:32:c9:0e:15:0b:5f:
38:e5:44:1b:a0:05:5f:61:d5:6d:9a:c8:b0:9b:9f:
58:2d:14:35:0d:8a:20:a2:75:01:f5:de:b6:2f:91:
2b:c8:b4:4f:90:93:82:1b:b5:2e:05:44:06:a2:c9:
bc:98:33:c0:35:80:47:58:e3:79:64:b4:cb:4b:e0:
e5:37:78:7c:58:56:e8:c6:a2:63:7f:45:cc:4d:93:
87:04:07:ba:eb:12:99:23:a4:49:8a:0a:28:94:7d:
c4:98:c5:a0:b7:78:8b:81:2a:a1:c5:29:a4:ac:63:
1d:34:c7:13:0b:80:92:63:6f:32:93:1f:da:32:33:
2a:c2:a4:20:b0:58:65:d0:cc:07:2f:5e:19:5f:44:
d7:d2:f5:c0:0c:74:18:85:69:6e:5d:49:55:ce:0e:
f1:c5:32:59:9e:f6:87:7d:9b:2a:70:4d:4f:cc:38:
16:77:14:38:c7:7f:75:56:a2:40:c1:f7:da:5b:3e:
14:72:56:d4:4d:22:2f:f8:6c:98:4f:ff:d2:f1:06:
c1:c1:0d:ae:f0:3c:ba:9a:8a:cc:0e:00:a4:d0:a4:
68:8c:69:c1:ab:58:6a:16:37:4d:9b:55:d0:90:70:
f6:b4:99:61:f9:04:f7:b1:71:22:72:c6:20:be:84:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:64:01:D6:4D:F6:11:B1:1B:2C:54:D3:EF:85:49:41:7B:F0:94
X509v3 Authority Key Identifier:
keyid:2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:20:d7:30:e3:26:2f:00:93:a3:2b:0c:30:ca:c8:f9:6e:
f6:90:c6:4d:e3:12:8b:b8:0b:31:df:ec:29:c8:78:9c:ba:4e:
3d:ee:5a:00:1a:4e:c1:dc:87:a3:41:e5:f4:e1:95:bd:6b:67:
b1:ed:b9:c9:86:29:fb:d4:56:2a:84:5a:cc:4c:f6:4e:18:e0:
58:36:4f:7f:a0:13:eb:3d:af:a7:a5:ed:3d:dc:e6:17:46:b5:
d6:80:ef:84:33:f8:ca:a2:ad:a5:dc:8c:6b:05:2e:c1:2a:be:
71:a9:24:72:29:92:50:8c:89:25:ed:9f:d0:f7:15:7f:fa:66:
e6:9a:d2:5d:77:38:92:ba:0a:61:0b:8d:04:08:05:74:a5:f9:
ae:67:ed:7d:42:0d:f0:dd:60:48:9d:0f:11:2f:ec:30:17:04:
b5:94:38:e3:aa:26:3d:f5:b9:f5:71:4c:98:c8:73:6c:eb:b4:
83:88:34:b4:c8:ff:70:ca:51:62:bb:c8:2a:f9:54:86:fb:06:
1b:79:29:0a:e3:fd:3f:59:f7:fc:35:da:88:bd:a9:75:bf:d8:
e7:1c:6a:b1:f7:fa:8d:93:a5:ed:45:83:5b:4d:6c:cd:9c:1e:
2f:52:55:eb:d7:41:92:5e:ba:78:a0:16:02:a7:cb:b3:d9:1b:
35:6c:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:23 2025 by rpki-client