This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
File: 620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft (raw, json)
Hash identifier: OH7p2AbK1v2MYrl0CzUr7UhyGb3iBm0K9CQ7Ca4WhME=
Subject key identifier: 66:A4:6B:7D:76:16:19:64:75:60:4B:EA:95:CB:24:EC:37:0C:46:5C
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Certificate issuer: /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial: 46433861459BDFC4544B2C61077F9D2753464AE1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
Manifest number: 032A
Signing time: Fri 05 Dec 2025 23:43:51 +0000
Manifest this update: Fri 05 Dec 2025 23:38:51 +0000
Manifest next update: Sun 07 Dec 2025 02:31:51 +0000
Files and hashes: 1: 323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (hash: yeyv1frSPYBG6BvaPn4CI2nT+sQRdSMMArQPEapcBm0=)
2: 34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (hash: vmUqtdLNe6sx3wOlzgRDPBjYrf5oAD5yUM/mEpGrWK0=)
3: 620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl (hash: eawQG9upk9G4nRMEKYguk2oG2TfOB+p/zROtrUJ/I3Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 02:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:43:38:61:45:9b:df:c4:54:4b:2c:61:07:7f:9d:27:53:46:4a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Validity
Not Before: Dec 5 23:38:51 2025 GMT
Not After : Dec 7 02:31:51 2025 GMT
Subject: CN=66A46B7D7616196475604BEA95CB24EC370C465C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:2c:7a:40:1d:80:05:f3:56:59:ce:d1:a0:
4c:42:65:4e:14:5f:69:f3:65:fe:05:bf:48:4b:09:
ae:28:f5:b1:91:69:9a:8a:82:de:6e:a0:f9:07:30:
a9:73:34:10:27:37:40:8c:20:aa:aa:de:89:e9:0a:
d7:d2:f7:1d:85:0e:8b:ae:f2:39:30:11:41:b4:c2:
5d:21:f4:cc:78:d0:1a:89:2d:66:05:15:16:21:32:
0e:26:67:61:6a:11:10:1a:ff:34:66:1c:90:12:47:
16:89:17:c5:5f:f2:b5:94:c8:e4:66:45:e6:39:b3:
39:65:a4:44:05:74:b8:d5:5f:a7:04:38:aa:e7:8c:
81:bf:08:94:59:53:2d:02:73:79:eb:39:29:9f:64:
9d:63:73:90:dc:06:92:47:e8:79:ee:79:a5:2f:a9:
4e:25:ce:83:b1:99:ce:ab:75:f4:4d:cd:b9:c3:b1:
97:48:1d:51:cf:aa:de:97:f0:bb:7f:bc:78:ed:1d:
43:63:1b:37:93:ba:19:82:6f:f9:27:76:4e:a8:cd:
fa:f7:a2:f4:fd:72:37:4f:d0:0e:cf:69:fe:f4:ff:
ab:20:6e:ee:75:75:6c:49:37:dc:81:2b:28:af:6d:
b4:f8:39:a7:2e:cd:8b:b7:5b:c6:3f:ce:ac:a0:bd:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A4:6B:7D:76:16:19:64:75:60:4B:EA:95:CB:24:EC:37:0C:46:5C
X509v3 Authority Key Identifier:
keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:05:71:e7:87:4d:60:13:8d:93:16:8b:d3:40:5d:c2:5c:
31:36:53:10:92:81:64:e4:14:d0:b0:3f:78:45:83:54:a1:13:
21:c9:9b:d8:25:03:4d:29:ba:c8:03:a1:93:2c:97:5b:fa:80:
8f:85:6b:fc:bd:31:62:b4:13:5a:d7:d5:fd:0b:3c:4a:b3:03:
13:21:a6:9c:e9:d8:be:23:57:70:98:b7:d9:5b:4a:1a:53:26:
37:a3:53:60:70:b3:46:4b:ca:06:cd:43:a5:52:09:d8:a0:83:
92:f5:85:69:dd:53:83:ac:a2:72:ee:e3:bc:f6:17:c3:c8:25:
05:e2:be:67:42:69:b4:ac:e3:d0:51:d6:02:24:15:c4:5b:bf:
9c:76:57:3c:3f:0d:8a:4e:cb:bb:62:af:09:03:42:aa:30:85:
d8:43:fd:85:35:a8:1f:c4:ed:9e:e9:dc:85:4f:b8:48:d5:0f:
5a:b6:6c:94:61:16:42:7f:a6:cc:0a:25:0b:b0:47:df:b1:cd:
08:c8:05:ef:77:a6:5e:fd:65:59:b0:7d:d7:69:28:a4:8e:04:
0d:ec:61:7b:12:33:8e:a6:f9:a7:d8:08:55:74:45:b0:ba:5d:
cd:a4:f1:32:e7:3c:01:b2:22:91:a8:7c:fc:b0:0e:22:c9:e2:
78:9c:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:32:15 2025 by rpki-client