This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
File: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft (raw, json)
Hash identifier: ODM2wJeCCJ+/GO9ekZOyqyfXVfILZ+zEUVBb/WtxEJ4=
Subject key identifier: AB:7D:7B:07:24:F2:E2:FE:99:BD:65:44:E9:F0:F0:47:EB:FC:40:DA
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Certificate issuer: /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial: 78E4E086A62990E455237E541809DF92740FA170
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
Manifest number: F8
Signing time: Sat 06 Dec 2025 08:41:42 +0000
Manifest this update: Sat 06 Dec 2025 08:36:42 +0000
Manifest next update: Sun 07 Dec 2025 12:11:42 +0000
Files and hashes: 1: 34352e3136392e3139302e302f32342d3234203d3e20323638313331.roa (hash: 1arKiTMmd2wiJhxrLN/csmN5OxeZEvisOYN30+Mb+zM=)
2: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (hash: 76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=)
3: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (hash: pD7uON0MR1cx9vrRl3bnWsw8Pci3XbwtAVzSZrjF0nU=)
4: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (hash: YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=)
5: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl (hash: vBcH6u/eAA4pQ8BLGCLShOVKqBZ4DFvqSLAMyYsJa/g=)
6: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (hash: m6476XY9hw1HT0KFo3xqMgTPgV2DyCBCaY7VP3otwhE=)
7: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (hash: 4ezrZSIPRM2pWqs0nvSc684pzx0RAIeuMtmRPXlLzec=)
8: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (hash: o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=)
9: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (hash: vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=)
10: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (hash: YLRZFFurNnhOHIp+/ksNrdmT9wg1MccOCRFRPdpkpZE=)
11: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (hash: lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=)
12: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (hash: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI=)
13: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (hash: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=)
14: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (hash: ouhAyOcH2VayZfDA15PmGMIddBURZIqd8LmFxV/D8kg=)
15: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (hash: VMtWnY/47+9VSdifVKXNAHzknKkgZcf9Z5+e1w7prrA=)
16: 323830343a353837383a343030303a3a2f33342d3334203d3e20323638313331.roa (hash: bec0x/Cqckg2a+aVdlOWK1zgbnr5jAeqZG2vSjYskV8=)
17: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (hash: gNfhoQu/TfDOi2RqItKVnvpLsxNGPBsfnb6MxhNe3qk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 12:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e4:e0:86:a6:29:90:e4:55:23:7e:54:18:09:df:92:74:0f:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Validity
Not Before: Dec 6 08:36:42 2025 GMT
Not After : Dec 7 12:11:42 2025 GMT
Subject: CN=AB7D7B0724F2E2FE99BD6544E9F0F047EBFC40DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:f3:de:89:d4:9a:b9:c2:c6:23:24:83:f4:
0c:1c:75:8d:c4:51:21:20:aa:cd:87:5e:cd:d3:4a:
3f:d3:8f:7f:c0:f9:a5:6d:64:b3:9d:0c:db:86:12:
80:4e:ce:6d:c3:8d:c6:ec:e8:ee:58:45:b1:68:36:
5a:d0:fa:07:44:70:75:10:e1:5c:8a:99:f8:c3:d8:
aa:60:01:55:df:92:34:7f:cf:15:78:b4:2c:96:d9:
a4:aa:6a:e4:b3:a9:ce:80:b1:55:ad:97:e6:25:22:
c2:81:55:21:18:d0:fa:35:fc:0d:04:ce:bc:f1:dd:
15:31:36:e4:ed:e9:3b:65:74:d5:13:60:99:4c:64:
16:8d:1d:6f:a7:11:3f:12:7f:40:b9:0e:59:15:1d:
7a:f1:a8:f0:bb:28:37:b7:6c:eb:7b:c4:32:10:06:
61:57:a6:87:6c:ef:01:78:a3:23:0e:7e:55:0d:8a:
2b:98:2d:dd:6f:26:34:62:cc:b4:1c:df:dc:bf:7a:
0c:db:cc:0c:6c:42:ae:19:cc:98:cb:dd:bc:b1:67:
a6:31:7f:52:68:3a:84:07:08:99:f5:39:8d:70:1d:
c8:01:15:f7:09:94:e5:17:a1:87:0e:9f:1a:ac:e0:
ae:b3:de:f4:09:2e:f7:67:3e:ac:84:4c:68:31:35:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:7B:07:24:F2:E2:FE:99:BD:65:44:E9:F0:F0:47:EB:FC:40:DA
X509v3 Authority Key Identifier:
keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ce:aa:14:3f:61:02:a8:ad:38:82:44:3e:b1:bf:03:0a:f9:
8b:2f:b4:9b:04:a8:1c:f8:12:1f:a9:61:5e:de:7c:98:86:d4:
bc:70:3f:2e:77:c7:6b:81:71:93:17:0e:ab:9f:26:29:49:96:
6c:e8:b3:c2:4c:a8:0e:32:9b:3f:a7:64:db:18:c0:38:9e:10:
5f:74:7b:2c:e4:af:c1:30:6b:cc:1f:dc:05:91:02:c8:eb:f6:
52:ab:dd:71:b0:0f:31:27:7d:96:ca:9a:44:a3:33:13:5d:4a:
a9:dd:f1:16:fb:46:69:bd:12:03:ad:79:7c:5f:fa:c1:ce:22:
e6:ab:6c:01:d2:74:37:f8:03:c0:91:3e:af:90:12:15:c3:1f:
a7:29:51:5e:42:95:be:13:76:9a:e4:c3:fe:7b:e2:62:31:20:
25:35:34:23:28:1a:d6:df:08:ed:95:66:97:e2:a1:ec:33:cf:
ae:6c:67:53:9f:d3:f2:c1:bd:72:1e:d0:d3:c5:dd:c8:9a:ee:
67:e9:fe:61:b2:31:b7:57:fd:54:53:54:94:3a:a6:f3:e0:82:
68:ed:f3:fd:31:6e:ab:2d:c5:8d:40:10:3a:19:b2:71:f5:13:
48:f8:78:fd:b3:8e:02:d7:28:a7:7f:d7:68:5b:41:1d:03:84:
74:33:b9:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeOTghqYpkORVI35UGAnfknQPoXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNTEyMDYwODM2NDJaFw0yNTEyMDcxMjExNDJaMDMxMTAvBgNV
BAMTKEFCN0Q3QjA3MjRGMkUyRkU5OUJENjU0NEU5RjBGMDQ3RUJGQzQwREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IPPeidSaucLGIySD9AwcdY3E
USEgqs2HXs3TSj/Tj3/A+aVtZLOdDNuGEoBOzm3Djcbs6O5YRbFoNlrQ+gdEcHUQ
4VyKmfjD2KpgAVXfkjR/zxV4tCyW2aSqauSzqc6AsVWtl+YlIsKBVSEY0Po1/A0E
zrzx3RUxNuTt6TtldNUTYJlMZBaNHW+nET8Sf0C5DlkVHXrxqPC7KDe3bOt7xDIQ
BmFXpods7wF4oyMOflUNiiuYLd1vJjRizLQc39y/egzbzAxsQq4ZzJjL3byxZ6Yx
f1JoOoQHCJn1OY1wHcgBFfcJlOUXoYcOnxqs4K6z3vQJLvdnPqyETGgxNTBfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUq317ByTy4v6ZvWVE6fDwR+v8QNowHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5GQkcvMC9B
MENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKM6qFD9hAqitOIJEPrG/Awr5iy+0mwSoHPgSH6lhXt58mIbUvHA/LnfHa4Fx
kxcOq58mKUmWbOizwkyoDjKbP6dk2xjAOJ4QX3R7LOSvwTBrzB/cBZECyOv2Uqvd
cbAPMSd9lsqaRKMzE11Kqd3xFvtGab0SA615fF/6wc4i5qtsAdJ0N/gDwJE+r5AS
FcMfpylRXkKVvhN2muTD/nviYjEgJTU0Iyga1t8I7ZVml+Kh7DPPrmxnU5/T8sG9
ch7Q08XdyJruZ+n+YbIxt1f9VFNUlDqm8+CCaO3z/TFuqy3FjUAQOhmycfUTSPh4
/bOOAtcop3/XaFtBHQOEdDO5+A==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:06 2025 by rpki-client