This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File: D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier: UCyPl3jGOkdOqraJ1trHIw5f7cbpNnL6AyL72O/Z2xg=
Subject key identifier: F9:D0:AC:28:16:48:7A:8E:54:50:3F:B4:F8:64:93:74:60:FA:55:C9
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial: 7261B7FAD0153C170FE3B460FC3D907879F0936A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number: 01D8
Signing time: Sat 06 Dec 2025 06:46:16 +0000
Manifest this update: Sat 06 Dec 2025 06:41:16 +0000
Manifest next update: Sun 07 Dec 2025 09:20:16 +0000
Files and hashes: 1: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: iyFn8dmCWg3WyydJEml+Y2v5BY14GrWXyZ7/DRDXmgA=)
2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: ymgJuTMZWv+63/VwPVmOxio8KOfxsIABsf+i4ONWEss=)
3: D1FFDF44055E16082D529730642377D751467152.crl (hash: S45mp0NEQSLQ15YMJjokBDYDfryGhPgOXDfFsnKQKvk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:61:b7:fa:d0:15:3c:17:0f:e3:b4:60:fc:3d:90:78:79:f0:93:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FFDF44055E16082D529730642377D751467152
Validity
Not Before: Dec 6 06:41:16 2025 GMT
Not After : Dec 7 09:20:16 2025 GMT
Subject: CN=F9D0AC2816487A8E54503FB4F864937460FA55C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:c2:41:bb:4c:a2:46:79:14:31:be:30:68:
c8:03:36:34:83:b9:77:54:a9:5e:e5:69:94:64:6b:
a4:c6:7d:75:1e:42:67:98:7b:d5:1a:c1:2c:75:cf:
2c:2d:e8:88:e9:2b:92:41:4e:f2:5e:b8:3e:05:8b:
fd:03:bf:72:aa:50:9b:e2:7d:22:01:27:01:ba:c0:
64:af:69:48:a3:29:d5:9c:20:25:7d:67:f0:1d:8a:
c1:7b:d7:03:4c:80:ee:4a:d1:69:19:59:57:ba:aa:
45:66:ce:47:0f:40:33:57:bd:39:59:10:d7:c8:b6:
0f:6f:1a:28:f5:dc:8f:75:da:9e:78:44:70:6a:54:
22:90:d0:35:d1:4c:a2:6f:33:fb:13:b6:c5:a1:2a:
3e:62:33:86:d8:92:65:bd:2a:24:1f:76:5c:1e:d7:
f6:7b:32:b5:c1:c7:21:5e:03:5d:da:10:9d:7c:85:
ec:b7:22:f1:fb:47:9e:38:0b:49:4b:81:0e:57:cd:
c2:ac:e1:e7:b6:c2:f9:92:b0:20:4b:6a:43:91:3a:
38:5e:8a:3a:dd:bc:bc:e4:ad:ab:6f:b2:91:bc:a2:
a3:45:da:1c:83:c1:a0:c7:63:8a:ff:07:d8:d2:f6:
b0:93:5a:93:4a:d5:b9:2f:76:6b:83:5d:1f:83:fb:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:AC:28:16:48:7A:8E:54:50:3F:B4:F8:64:93:74:60:FA:55:C9
X509v3 Authority Key Identifier:
keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:e9:3b:8a:67:fd:89:f7:4d:80:9d:00:2f:fb:00:d8:57:
fe:ab:0f:77:d7:0b:86:d2:8d:68:c0:64:97:d9:50:02:45:62:
3e:cf:4b:e9:4e:55:51:c7:e9:be:6e:ca:41:b6:d0:f7:1a:70:
de:74:10:f2:af:cd:57:41:f8:88:8a:ce:4e:3e:02:6a:db:39:
09:48:1e:cc:de:77:04:c9:cb:f6:0a:6b:6e:b5:4e:1c:c1:4f:
c1:11:e1:f7:cd:61:79:94:d8:bf:a7:5c:a2:90:2b:0e:7d:ee:
e9:08:58:ef:ed:60:3f:b1:1d:03:7d:13:ca:c4:7e:38:4c:be:
08:cf:2e:f5:9b:d1:a6:c7:ad:b3:37:97:68:37:d0:7d:5f:f4:
eb:1f:ce:b5:19:85:11:a7:9b:ad:4c:11:92:f4:3c:48:d5:3a:
40:36:cf:54:29:3d:31:2b:eb:70:0f:74:be:31:3e:75:6c:d7:
ac:c9:7a:1d:4e:51:77:eb:9f:94:11:bb:52:cd:20:5f:b1:e9:
88:e7:13:6f:d3:d6:26:90:15:20:d1:f5:3b:c6:f7:f1:d0:f0:
3a:5c:7b:74:3b:00:59:4c:f4:d5:a0:d0:c2:ca:27:97:bf:fe:
88:4c:9d:40:ca:41:6b:fb:7f:e6:10:e1:b8:9b:ae:25:83:a3:
b2:14:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:18:41 2025 by rpki-client