This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
File: A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft (raw, json)
Hash identifier: njqLMh/C5u5UEGW3AzxRVAWvjUqEoOlnOh2SEuIIy8w=
Subject key identifier: 25:BA:D9:B9:A8:81:CC:F8:DE:70:36:27:B1:3C:8A:22:37:67:D2:5A
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Certificate issuer: /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial: 5FD73CAE55C7D2933B0DABF74B06D4DF831EF979
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
Manifest number: 02C0
Signing time: Sat 06 Dec 2025 06:13:48 +0000
Manifest this update: Sat 06 Dec 2025 06:08:48 +0000
Manifest next update: Sun 07 Dec 2025 06:44:48 +0000
Files and hashes: 1: 3136382e302e3139322e302f32322d3332203d3e20323733353137.roa (hash: 8qdsPI5x8CVH/mlrFVkkCVAnvbqWmU1D/2gHHda3qig=)
2: 323830343a386664633a3a2f33322d313238203d3e20323733353137.roa (hash: 4l2CtiYgrvBy/A92kVg7Hm+FkGGTJkGXYmtPO4rSlHg=)
3: A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl (hash: NUV+I/jSrMmYN5SdAsF+JvpzJp5g56OPxD51cxBSTiw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl
rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d7:3c:ae:55:c7:d2:93:3b:0d:ab:f7:4b:06:d4:df:83:1e:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Validity
Not Before: Dec 6 06:08:48 2025 GMT
Not After : Dec 7 06:44:48 2025 GMT
Subject: CN=25BAD9B9A881CCF8DE703627B13C8A223767D25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:e6:f3:6f:71:52:9c:bc:79:b2:32:96:4c:
75:19:0a:69:e3:3d:0d:4c:7d:14:91:aa:10:13:12:
b0:e0:30:e3:57:4d:26:da:21:84:3e:aa:aa:25:61:
91:33:61:68:6f:96:16:47:fb:a9:fc:6b:5f:25:04:
b0:61:9b:c7:c1:07:35:30:a0:87:b4:ef:7a:a9:2e:
88:0d:69:12:15:dc:6d:b7:59:ec:e6:ce:ef:3c:80:
d6:78:c9:3f:33:81:bb:96:b2:70:a3:e9:1e:8e:04:
da:8b:fb:3d:7c:03:88:f6:7b:fc:70:87:27:20:7c:
2c:18:d6:de:3a:29:b3:58:db:01:2a:a3:4b:b1:d4:
06:1b:49:d7:4d:7c:bf:0e:56:78:86:86:63:65:27:
d5:f3:c3:cf:05:a1:f9:38:4c:1d:07:31:17:7e:cc:
02:be:d5:0c:87:45:63:25:34:6f:28:a8:b0:74:31:
88:65:63:2b:6d:75:32:dd:a8:21:31:7f:03:1f:4a:
26:68:66:03:2e:d8:6f:c0:4d:1a:d0:23:d1:a3:3d:
1a:5e:63:81:3b:2f:19:1b:f7:0f:ec:c7:82:87:38:
95:63:09:06:ed:de:5a:06:04:d8:4d:00:30:95:e0:
45:a7:71:61:c3:b0:ec:57:9d:60:b6:fb:ac:17:58:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:D9:B9:A8:81:CC:F8:DE:70:36:27:B1:3C:8A:22:37:67:D2:5A
X509v3 Authority Key Identifier:
keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:44:eb:75:eb:62:30:8d:39:58:b0:51:cd:78:c6:f3:5c:2d:
91:cf:76:e0:e6:87:f9:cc:bc:07:32:48:b4:dd:2e:ff:bb:8e:
6c:d2:09:84:f8:12:c6:00:05:ee:bf:52:f5:33:2b:e3:05:b5:
d6:65:d4:ff:ad:0a:6a:f1:d7:fc:cf:a1:99:3c:ed:31:1a:47:
0e:60:d5:3e:b0:e6:19:3d:6c:f8:9a:cd:3a:23:c6:c0:2e:4c:
86:14:99:31:ee:b5:81:28:85:06:2e:55:e1:cb:f4:67:6b:f7:
76:36:c5:a1:d4:31:b0:41:f9:77:4d:12:d1:5b:90:66:16:57:
f6:6b:51:5d:a0:8f:9d:00:d6:93:59:c7:c2:4a:3c:72:82:06:
7d:4b:ef:18:72:1f:f6:d6:ae:43:e4:58:26:2c:56:75:55:46:
ec:17:82:f5:10:b6:82:98:d1:b3:f1:02:00:7e:07:76:b2:40:
67:9e:73:37:12:8c:80:ba:55:0a:a9:15:70:4a:47:22:87:94:
e0:58:fa:2f:ea:ac:49:ea:93:30:cd:06:74:9f:9b:cc:05:59:
18:d5:05:84:81:7c:ed:34:b2:3b:98:0b:d4:1f:5a:11:0a:7c:
1e:f3:4b:ac:d8:4c:ee:3f:64:0f:d1:6b:56:d2:d3:54:58:10:
e2:7f:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:08:47 2025 by rpki-client