This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
File: C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft (raw, json)
Hash identifier: /WJMuSrN+Ki8FgosA9hfnbZnSBk/F28Mg8XnyQEyL4o=
Subject key identifier: 3F:70:B3:04:08:41:61:F9:B6:03:B9:73:A1:87:04:07:76:20:D1:E8
Authority key identifier: C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C
Certificate issuer: /CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
Certificate serial: 2F9A460F62DA9EA0205B0DDE349572ECA1F76034
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
Manifest number: 029F
Signing time: Sat 06 Dec 2025 00:01:17 +0000
Manifest this update: Fri 05 Dec 2025 23:56:17 +0000
Manifest next update: Sun 07 Dec 2025 03:52:17 +0000
Files and hashes: 1: 34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa (hash: hLHkvLsGpJUXipaNRn8rVZlZBXCNPoEdkA9Y4xOz53w=)
2: C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl (hash: BiXCiLWBGLl3hWLi7C62VfZxUQx+rj3i9k5VHHaDHd8=)
3: 323830343a363665383a3a2f33322d3334203d3e20323639353930.roa (hash: T9wlzqEhjBverhIhH54eBxpS9tBXrooBqMemvBh2Gus=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl
rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 03:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9a:46:0f:62:da:9e:a0:20:5b:0d:de:34:95:72:ec:a1:f7:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
Validity
Not Before: Dec 5 23:56:17 2025 GMT
Not After : Dec 7 03:52:17 2025 GMT
Subject: CN=3F70B304084161F9B603B973A18704077620D1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:be:3c:66:39:de:e9:76:34:7e:f8:4b:4f:
76:24:61:4d:3d:5f:90:66:c5:be:22:ec:66:2a:2c:
2a:a9:c0:52:f0:d9:d1:99:2b:ef:c4:fa:77:95:3d:
25:fe:f5:cc:3e:5c:7f:57:63:73:df:5d:dd:e9:45:
bc:0d:f6:52:06:89:e9:34:54:ca:f8:bd:49:bc:65:
6d:d9:9d:9f:a1:4f:a4:fb:4e:91:87:0a:69:e0:a2:
93:b1:88:d2:2e:f9:bb:db:e0:0a:36:aa:e2:7e:2d:
ad:10:c0:86:1e:20:fa:77:ca:b1:3f:87:71:35:8d:
c7:d2:11:ad:12:1e:70:92:b0:a3:21:1f:31:22:02:
ae:ff:4c:b2:04:3c:23:10:9a:ea:0d:1d:05:bd:95:
3b:21:9a:6f:31:e8:0f:a8:c1:01:5d:cd:ca:5d:89:
0a:7f:30:11:33:47:f9:6e:b3:63:bf:3d:a6:79:fd:
54:59:25:ef:92:1f:1a:96:e5:97:ff:82:ff:86:22:
de:92:c6:20:a7:e0:fe:b0:aa:bc:df:13:57:d3:7b:
3d:a6:29:be:24:75:36:5d:2c:bf:57:f0:8a:c9:8a:
db:e7:df:d9:66:cf:c8:16:81:48:d1:36:51:3f:64:
db:7f:f4:31:2e:84:73:72:e8:65:2d:2c:3f:a4:cd:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:B3:04:08:41:61:F9:B6:03:B9:73:A1:87:04:07:76:20:D1:E8
X509v3 Authority Key Identifier:
keyid:C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:0f:28:b0:54:03:f9:07:45:4c:cf:d8:83:4c:44:a0:d0:
50:7f:13:0e:d7:ee:95:53:28:19:9b:c0:07:7f:79:7c:95:1b:
b8:d1:6c:53:1f:39:e2:c6:59:90:b8:c7:5d:2b:a2:a7:5b:fe:
0c:af:87:ae:29:3a:8a:4c:a1:f1:91:95:89:cc:94:90:f8:13:
8a:4b:c9:f5:4e:21:50:d9:e9:b2:11:11:ad:73:46:dd:d4:3b:
5a:78:6f:bd:81:fc:50:e4:03:b4:05:ad:39:5c:3f:a5:1c:1e:
8a:78:14:9f:54:40:3e:f5:19:b6:90:51:e5:c1:f5:dd:f6:14:
eb:d1:ee:78:7c:41:f6:8c:c2:57:09:d6:4d:ad:f3:83:63:ad:
46:12:74:c0:3e:2f:49:74:aa:17:99:2f:2c:fc:c2:98:b4:47:
94:93:77:f7:1f:bc:e5:85:16:48:99:e8:ee:76:f3:de:c7:7d:
ea:98:0d:12:b3:3a:89:d4:0d:c6:6a:67:28:f9:81:14:75:8a:
30:be:c6:28:49:92:9b:c1:20:ef:77:5d:db:53:16:10:cb:a9:
05:ae:ec:b6:93:a1:6b:07:2b:dc:80:f3:bc:1b:4d:cf:c9:14:
8c:00:4c:50:fd:d0:22:40:86:3f:36:c1:d8:bd:b2:36:43:c6:
43:12:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:31:18 2025 by rpki-client