This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
File: D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft (raw, json)
Hash identifier: tnDn4lC4qDlSsUkC0d2dCRFCBBDCnvTb0/9p8zcMxEA=
Subject key identifier: 8B:9D:93:BB:2E:E5:6A:15:E5:EF:32:75:D1:AA:A4:2C:06:5B:36:E6
Authority key identifier: D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
Certificate issuer: /CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Certificate serial: 1DBD81B5CC0B0496EB9188E938F7BA5BDA433011
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
Manifest number: 2A
Signing time: Fri 05 Dec 2025 15:16:54 +0000
Manifest this update: Fri 05 Dec 2025 15:11:54 +0000
Manifest next update: Sat 06 Dec 2025 15:54:54 +0000
Files and hashes: 1: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: jBLip1vbaVOEdwMz5FRM8uDhQKguMwT34WljHdiIAdI=)
2: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: qHilJkR/mRoxRFLrG5X7mYr1LiQh/kX8KgFrgoJYIx4=)
3: D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl (hash: WrgXg5lsDb1YzSWze1NV1wQNs8YCVKigVqa/iIa4OqQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 15:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bd:81:b5:cc:0b:04:96:eb:91:88:e9:38:f7:ba:5b:da:43:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
Validity
Not Before: Dec 5 15:11:54 2025 GMT
Not After : Dec 6 15:54:54 2025 GMT
Subject: CN=8B9D93BB2EE56A15E5EF3275D1AAA42C065B36E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:05:a5:93:31:64:4c:ac:d9:91:7f:92:a6:
b9:6e:8e:6c:63:c5:30:33:2e:8c:42:d4:a1:b3:4b:
6b:e4:3e:dd:b2:5c:30:5a:f5:50:b8:82:e6:db:61:
d7:fd:0c:ab:7f:66:19:c8:3b:7b:5a:c7:fb:63:e7:
76:b3:8d:7e:53:72:f8:31:03:35:57:e5:a6:c0:8c:
f0:69:0f:87:a6:9d:5e:c9:c7:f6:36:fe:8f:f3:c3:
93:b7:47:68:2e:55:f0:d9:ce:2e:33:a4:f8:f7:ef:
a3:40:a6:9c:d2:57:ca:c7:41:de:ab:da:6d:dc:f4:
18:55:d0:f5:1c:8b:c5:56:9d:b2:1c:cb:33:90:bb:
ac:18:d4:95:c2:5e:35:1d:84:f6:47:f1:ac:23:48:
91:35:f4:83:a0:26:a1:c7:92:4b:3c:39:ed:52:3f:
3a:b1:8f:b2:d4:cb:28:d6:35:30:1c:a0:3a:60:20:
c1:a0:94:10:80:2d:f9:16:d5:d2:1d:9a:e5:30:87:
eb:b3:4c:07:9e:0e:cd:1a:1b:09:b9:c1:95:bc:85:
7f:8f:58:a5:4d:8b:2b:0b:30:39:f7:dd:d1:21:cb:
03:b2:c9:8a:f7:bf:f4:7c:e6:c9:dc:f6:38:f7:53:
af:24:07:ee:93:74:4a:42:96:1b:77:a2:06:8a:77:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:93:BB:2E:E5:6A:15:E5:EF:32:75:D1:AA:A4:2C:06:5B:36:E6
X509v3 Authority Key Identifier:
keyid:D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ac:d3:ff:37:8a:44:13:a6:68:4e:13:ba:80:8e:fa:ec:ec:
e4:8a:53:15:f6:5a:b4:fa:bb:78:fe:01:30:20:82:6e:0c:7f:
38:39:97:8e:53:dd:57:3a:b6:9b:72:92:2d:6f:bd:aa:dc:50:
cf:cc:b9:3e:67:ea:d8:f3:53:ee:d3:a0:fa:41:c1:bd:19:45:
93:df:5b:c7:90:fb:3d:68:98:76:d9:89:ab:a6:6b:55:2e:d5:
8a:4d:fa:40:43:13:2b:03:5c:59:ca:17:75:b1:8c:9e:d7:a5:
f0:61:8e:74:b6:20:e5:31:cf:10:e3:30:c9:e1:db:d7:20:10:
71:2f:d5:98:e2:fe:e8:97:f3:7b:bf:ac:e5:01:0d:37:ac:3a:
9b:37:66:b0:26:b9:d0:6b:cc:ed:6a:8b:10:dc:96:57:25:1f:
5f:49:66:15:51:00:70:22:6f:11:e1:fd:e9:37:6a:76:0d:24:
ff:3a:66:ba:1e:01:36:80:39:34:72:3f:2c:73:a2:49:1f:0f:
5d:ef:0b:3b:a5:4b:16:58:38:46:7f:ed:66:ef:f9:8a:fc:1f:
a3:fe:b0:79:20:fd:14:67:5a:24:33:63:eb:26:63:c2:e6:61:
f1:b8:e0:87:08:e1:ab:5d:ad:10:d0:d6:22:74:24:05:58:8f:
28:f5:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:07:40 2025 by rpki-client