This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.mft
File: 1009452148BF025D133579CC61462AB945880968.mft (raw, json)
Hash identifier: IjGq1MVqfQ38zz1a8+DUuZ+MXev0n6ty3oFXOhiECoY=
Subject key identifier: CD:AB:5C:6A:12:78:76:9D:A9:1B:30:D7:39:C9:41:1A:CF:34:E4:19
Authority key identifier: 10:09:45:21:48:BF:02:5D:13:35:79:CC:61:46:2A:B9:45:88:09:68
Certificate issuer: /CN=1009452148BF025D133579CC61462AB945880968
Certificate serial: 33DEEAC94511E4AF143ACD2BF3D331F46EA90F14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.mft
Manifest number: 3D
Signing time: Fri 05 Dec 2025 15:45:32 +0000
Manifest this update: Fri 05 Dec 2025 15:40:32 +0000
Manifest next update: Sat 06 Dec 2025 18:52:32 +0000
Files and hashes: 1: 323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (hash: n1/k/24kjqJXe2r20/x1gaSwnGuGBYSahjcqoj1o5O4=)
2: 3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (hash: nfeBT2oUv3BPTJWe0f99jvnYaGwr9xoeQxUXtRWkrz0=)
3: 1009452148BF025D133579CC61462AB945880968.crl (hash: Gv4YbYlRQQ9HadtfidB2LrNGB7JZn1qFX+658a+cduw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.crl
rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 18:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:de:ea:c9:45:11:e4:af:14:3a:cd:2b:f3:d3:31:f4:6e:a9:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1009452148BF025D133579CC61462AB945880968
Validity
Not Before: Dec 5 15:40:32 2025 GMT
Not After : Dec 6 18:52:32 2025 GMT
Subject: CN=CDAB5C6A1278769DA91B30D739C9411ACF34E419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:b4:7a:15:ff:4e:a9:78:b9:49:c2:84:7c:
25:6b:f4:36:bc:18:e8:50:7c:18:8c:b9:90:5d:9f:
5d:c9:cf:d1:f3:79:37:ba:5e:28:b4:53:a1:f6:cd:
72:22:b4:de:36:6e:24:2f:f9:69:f0:04:5d:f8:cd:
97:e5:35:67:34:26:a9:6f:fc:87:e6:c0:97:94:58:
29:dd:37:13:6c:45:4e:a8:aa:9b:b0:31:93:ea:4d:
23:9c:ed:d3:15:12:44:60:d2:07:86:66:26:8f:10:
21:4c:ed:5e:0b:18:fe:b8:da:10:68:d5:fa:fe:ae:
0d:57:eb:96:8d:53:3a:39:6c:41:05:cf:5f:e6:d7:
81:76:ba:ce:16:76:92:4f:fb:17:b5:3a:b2:6e:d9:
cf:55:3a:fa:d6:f1:86:0b:b4:ae:d0:45:21:d2:13:
d1:7f:5c:14:71:94:cf:91:75:3c:82:fa:d9:a1:6e:
07:ea:5e:82:39:85:5d:8e:9b:f0:65:4c:86:8a:0a:
71:6b:0e:5c:11:75:60:31:94:75:77:21:06:2b:28:
7a:3f:29:a2:fa:cc:e6:ba:de:e0:b2:b3:2f:c9:bd:
3e:f3:ae:c8:23:93:fe:8b:27:41:b6:79:40:31:1a:
8f:90:bd:ab:af:e0:6a:60:75:5f:27:0d:fc:4c:05:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:5C:6A:12:78:76:9D:A9:1B:30:D7:39:C9:41:1A:CF:34:E4:19
X509v3 Authority Key Identifier:
keyid:10:09:45:21:48:BF:02:5D:13:35:79:CC:61:46:2A:B9:45:88:09:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:90:78:56:85:ba:e5:96:eb:84:d4:b3:52:bf:05:1a:b8:26:
98:87:5a:94:53:31:5d:97:df:c5:6e:62:2d:ca:a3:d0:30:b4:
33:7d:ac:5d:d9:b8:c9:ea:99:dc:e1:b7:64:a0:4e:b5:b7:d1:
56:92:a6:e1:52:28:6c:92:64:25:07:02:61:dc:86:e2:9d:76:
c8:b3:95:4f:e1:ef:7b:cd:fa:c5:d1:53:2d:d8:a0:30:ca:f0:
e5:95:c1:1e:d2:83:53:5a:e0:26:69:16:2c:d4:a3:69:67:a0:
a6:cb:4e:59:9a:a0:18:ad:7f:e1:80:c5:ab:d3:44:59:8b:d1:
81:20:1f:d8:3f:4b:1b:3f:3b:2c:21:e9:ba:74:bb:f4:0d:92:
cd:fa:e2:61:d3:61:ce:09:6e:17:df:8f:a2:0a:d5:39:be:60:
6b:d9:24:6a:37:63:e4:20:73:b5:6e:d8:bf:06:fe:53:fb:61:
c4:b5:a3:be:d4:7e:45:3c:6c:bd:02:32:ea:6f:db:3c:b1:c8:
e1:b4:77:c2:b5:96:9a:51:86:d6:17:85:93:f8:68:2c:9a:a4:
7c:b8:3c:d3:5b:95:8a:e2:ef:84:1a:02:72:a8:4f:b4:b6:8e:
e6:8f:3f:82:7a:98:f3:9b:b9:7b:0c:63:8a:e2:af:d9:82:a9:
8b:48:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:43 2025 by rpki-client