This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
File: 71238E97CC73F492E8BD23DB6B3EA12536850E88.mft (raw, json)
Hash identifier: atgFJR/vLEFt5OXXBnpmp8BKGAxxWq4Sw30K73ODdzs=
Subject key identifier: CA:DF:DD:F3:13:12:66:F9:03:28:E5:F5:88:86:D0:CB:50:60:0F:CB
Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
Certificate issuer: /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Certificate serial: 701C1FF5AE48BD22440F29A935E3180EB3E838DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
Manifest number: 020E
Signing time: Fri 05 Dec 2025 22:35:08 +0000
Manifest this update: Fri 05 Dec 2025 22:30:08 +0000
Manifest next update: Sun 07 Dec 2025 00:28:08 +0000
Files and hashes: 1: 71238E97CC73F492E8BD23DB6B3EA12536850E88.crl (hash: SdsXJRO/128nI5jHVk7WtivdOZrD3Ckw2RaPNXN+hY8=)
2: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (hash: ST5sKKJMcOBgKpX2M249j1DXH+kY2hJv5oEFgqx1pOo=)
3: 323830343a343866343a3a2f33322d3634203d3e20323637313535.roa (hash: yXnnsOV19PP7dYa4WTWInOHdG2GRhu4PLnG5X9h7/aA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1c:1f:f5:ae:48:bd:22:44:0f:29:a9:35:e3:18:0e:b3:e8:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Validity
Not Before: Dec 5 22:30:08 2025 GMT
Not After : Dec 7 00:28:08 2025 GMT
Subject: CN=CADFDDF3131266F90328E5F58886D0CB50600FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:08:a2:23:72:30:4e:3c:06:c2:90:10:59:
fc:ce:fc:00:4a:d2:80:7f:72:7c:ec:27:43:e2:9e:
d0:4e:b3:8e:aa:f0:41:f5:9f:5d:4d:1a:2e:22:6e:
51:5e:13:84:f1:b0:e5:60:9d:ac:06:d7:1d:bb:88:
fc:dd:c5:5c:3e:9f:cf:50:66:14:2a:fb:6a:46:b2:
56:fc:05:bc:cf:11:df:70:e4:7c:8e:4a:e1:63:7d:
7f:f7:4c:5e:30:1b:9f:a3:67:df:90:df:ad:d3:4d:
73:ac:a2:73:83:54:8e:3c:e6:c2:85:42:99:b3:7b:
8c:76:0c:b3:33:de:6b:5c:e5:86:c2:18:ad:04:75:
8c:ba:92:d4:25:a3:e1:c8:bb:64:48:5f:f2:a8:0d:
3c:f1:bf:38:1b:ca:8a:94:84:2a:c2:81:3f:08:c8:
0b:a5:0b:4b:ba:fb:8f:d2:7f:f1:46:b5:27:27:7d:
b6:64:1f:3b:e9:50:4d:1c:b0:77:a7:e4:80:27:b4:
b4:59:7b:65:d4:f8:3b:c8:1b:33:94:72:6a:5e:fb:
15:89:96:55:5f:06:94:98:5a:a9:20:1f:9a:f5:f3:
2d:df:e6:ec:b3:ae:37:ae:08:18:79:f6:cd:61:7e:
7f:df:26:41:fe:b3:48:af:08:79:95:d5:f0:32:f3:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:DD:F3:13:12:66:F9:03:28:E5:F5:88:86:D0:CB:50:60:0F:CB
X509v3 Authority Key Identifier:
keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2a:cb:8d:a2:0a:46:7b:e1:49:8a:a0:3e:64:8e:89:8d:d4:
82:87:65:6c:82:cb:23:5b:c1:d5:b5:82:3a:a1:32:cb:05:e5:
02:aa:85:cc:25:e6:ff:b7:a5:4b:12:24:44:dd:1a:ca:cb:ec:
6f:d8:0d:c7:92:ad:f7:35:c3:26:8e:53:57:7e:51:a3:d1:38:
ae:11:75:91:95:8f:f5:a6:c3:5a:2a:8e:b6:75:69:0b:b2:7d:
47:36:66:98:b0:6a:70:f8:32:df:2e:da:00:b1:40:c8:6e:8b:
d5:f9:99:45:94:48:33:9d:10:45:91:af:e9:f6:e6:a9:61:13:
9a:77:d2:fc:ac:52:67:77:7c:08:b3:c9:73:b9:8a:da:6e:2c:
26:2d:3a:3e:88:31:cb:43:f0:d2:ad:ac:7e:93:59:45:0c:a8:
bf:cf:89:c6:a6:f8:a3:66:15:da:e2:3f:db:b0:71:98:d5:3d:
ae:5b:36:b9:f2:e9:59:81:19:fb:b4:58:7e:fe:f9:95:a6:06:
8d:43:ed:80:fb:22:9d:9c:d0:a7:86:3d:d1:df:e1:43:55:29:
4b:c2:e0:e5:c9:a3:4a:f5:83:d3:72:a9:dc:c1:3e:e3:2e:58:
2d:5f:cf:80:20:9a:f4:68:70:67:f8:aa:58:c6:b6:4c:4a:0d:
3f:c7:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:22 2025 by rpki-client