This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json)
Hash identifier: GQh522wNxDtbbiSw4rjss7NLv3IqWvIbmBirfn6GWjk=
Subject key identifier: 34:55:61:55:56:AF:73:C1:72:75:74:BE:6F:06:46:54:BF:FA:63:DD
Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E
Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
Certificate serial: 27F36715F413C839994635F34E65A6DD939D2C40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
Manifest number: F8
Signing time: Fri 05 Dec 2025 17:49:29 +0000
Manifest this update: Fri 05 Dec 2025 17:44:29 +0000
Manifest next update: Sat 06 Dec 2025 18:12:29 +0000
Files and hashes: 1: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: tMFXHgdWUsrrhcIMElv30zmH4ViMygcvzllk7/lQAOk=)
2: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl
rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 18:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f3:67:15:f4:13:c8:39:99:46:35:f3:4e:65:a6:dd:93:9d:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
Validity
Not Before: Dec 5 17:44:29 2025 GMT
Not After : Dec 6 18:12:29 2025 GMT
Subject: CN=3455615556AF73C1727574BE6F064654BFFA63DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:91:bd:86:50:54:84:52:b5:91:36:9b:98:
a2:dd:d2:b8:89:55:7f:7b:2b:c6:d6:48:9d:50:cd:
b5:fe:05:ea:03:dd:51:ad:50:b3:2b:be:3a:84:44:
49:d4:37:8f:43:82:b2:af:32:30:61:39:ba:aa:84:
68:ea:74:93:83:52:78:87:ae:be:f2:64:eb:66:d6:
e7:e9:42:a6:9a:8f:60:88:5f:56:5f:93:1c:e6:46:
fb:ec:17:35:b6:3c:bc:fb:0b:09:40:2e:54:8b:d4:
39:ce:75:80:e3:42:e9:bb:e1:be:d1:ca:3c:e8:23:
a1:33:06:0a:9c:ec:8a:7c:4f:08:49:a3:73:dd:c2:
9b:75:a4:23:8b:59:84:bb:5e:a3:33:d1:d9:3a:f3:
5e:ff:b1:34:17:ef:b3:a2:1b:56:ed:64:5a:d0:38:
b0:cd:17:f6:4e:10:43:94:49:a7:48:a0:10:c8:91:
c1:84:66:ce:3f:06:c5:1e:44:6c:3a:cc:81:bc:d0:
59:63:36:b9:ba:92:3b:6f:da:88:d7:64:e7:c4:ad:
9d:8b:16:96:11:0d:08:36:2a:48:4c:1e:ee:9f:12:
41:f8:bd:3c:38:00:3d:e2:49:eb:e3:08:a4:1a:4a:
08:e1:35:fa:6e:66:ae:00:8c:4c:34:29:e0:af:eb:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:55:61:55:56:AF:73:C1:72:75:74:BE:6F:06:46:54:BF:FA:63:DD
X509v3 Authority Key Identifier:
keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7d:6b:64:a4:9f:78:aa:4b:a7:c9:e9:72:17:5c:48:60:1f:
10:20:7c:9c:6f:9b:71:c3:fe:7c:df:f8:08:3b:c6:ab:a9:40:
7f:59:81:63:b5:70:ad:1b:8f:f8:49:30:4d:d7:be:e4:7b:2d:
37:a2:f3:78:2a:41:63:c3:1c:18:25:a6:9e:74:02:72:30:2b:
17:77:c5:b1:83:d9:bc:8a:94:1b:37:16:57:c3:5b:97:21:19:
32:27:32:d4:ab:69:7d:66:80:aa:2f:37:85:41:22:cd:34:d8:
71:ef:12:3c:e8:1b:e7:7c:c5:f4:f3:3e:51:32:ab:08:53:1c:
51:48:3b:e5:52:b4:93:b5:ba:74:34:bb:31:1b:07:17:9c:9d:
d5:31:29:e2:83:b0:48:77:5f:eb:78:31:ba:67:f8:c0:7f:0d:
a0:53:08:a3:80:ca:a8:ba:78:55:0f:db:0d:40:70:85:b6:58:
48:22:8d:bc:48:e1:01:72:fe:26:ba:ea:a7:0f:da:03:ef:29:
e8:77:f0:fa:64:95:83:25:51:10:18:54:8f:a7:dc:91:a9:13:
a7:cd:9d:d2:6e:62:8e:12:88:cf:bc:d5:70:42:ec:96:fa:aa:
8f:a6:ba:ea:c1:6a:58:d8:1e:82:ea:fc:be:27:ef:82:26:f4:
23:16:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:23:04 2025 by rpki-client