This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
File: CD466D427F1FD3AB41CF878A569898A79B337545.mft (raw, json)
Hash identifier: 96wR+M1gfHmmcbKNC5OOGBHTa91iEb6mj8dH9lpdx+k=
Subject key identifier: A7:2D:C9:18:19:96:8F:0D:35:15:27:FC:8B:34:0E:68:75:CA:D6:0D
Authority key identifier: CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45
Certificate issuer: /CN=CD466D427F1FD3AB41CF878A569898A79B337545
Certificate serial: 2D4C47C6E8B14699662F07AB170DA5AFD244C132
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
Manifest number: 2D
Signing time: Fri 05 Dec 2025 20:30:33 +0000
Manifest this update: Fri 05 Dec 2025 20:25:33 +0000
Manifest next update: Sun 07 Dec 2025 00:03:33 +0000
Files and hashes: 1: 323830343a393539633a3a2f33322d313238203d3e20323734353333.roa (hash: a9F7vSdRDqTEgN/gtYRAs3XRaP7P5JpCBU0ige+1hgk=)
2: CD466D427F1FD3AB41CF878A569898A79B337545.crl (hash: 5qRlxVZhaHaYT4Q5OgBN7Y9jysLbJq5YKLPyun/mNfw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl
rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4c:47:c6:e8:b1:46:99:66:2f:07:ab:17:0d:a5:af:d2:44:c1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD466D427F1FD3AB41CF878A569898A79B337545
Validity
Not Before: Dec 5 20:25:33 2025 GMT
Not After : Dec 7 00:03:33 2025 GMT
Subject: CN=A72DC91819968F0D351527FC8B340E6875CAD60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:b2:57:9e:f2:69:14:63:36:0b:1e:a2:86:
5d:91:17:30:a0:25:af:a7:b3:12:39:72:33:31:db:
33:dd:e1:31:49:96:52:b9:88:b5:4d:86:e4:f8:be:
8c:02:a4:c3:21:f4:7e:cf:8b:ad:3f:cc:c8:10:10:
dd:2f:04:36:8b:f4:17:1c:22:2d:1b:bc:f1:20:74:
59:cf:a7:85:4e:e3:1b:71:30:b9:9a:60:1a:67:ca:
1c:43:cc:87:8c:a4:1f:ff:d8:1a:4c:13:fc:d5:d5:
e7:f5:37:8c:35:53:50:13:4a:67:fb:4a:b5:0b:b0:
af:db:2a:b5:81:2f:04:dd:0f:34:8f:b4:e1:16:32:
46:a8:25:7b:21:fe:25:49:3d:47:4a:6c:7b:af:75:
b2:c8:12:27:4b:0b:85:94:4d:d6:8e:60:31:2a:1a:
0b:79:f2:cc:33:25:ab:a9:21:f7:ea:99:4f:48:8b:
11:29:dd:17:fb:92:3e:84:88:44:92:84:dd:b3:27:
25:4b:5d:6e:79:76:bb:0e:15:e4:31:4e:bc:b5:d2:
ef:e0:33:fd:5a:d1:34:1c:81:22:58:0c:76:bb:63:
c2:86:2d:65:1f:c4:44:64:0f:46:94:ed:6d:36:fa:
d6:ee:64:29:2b:fa:b8:5a:b8:0f:21:46:01:8c:15:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2D:C9:18:19:96:8F:0D:35:15:27:FC:8B:34:0E:68:75:CA:D6:0D
X509v3 Authority Key Identifier:
keyid:CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:88:96:ab:d9:68:8d:a7:52:61:3b:d8:93:5a:7d:7d:87:
4b:71:1e:0d:52:f1:e7:0d:b4:7e:5c:3c:ff:af:4f:7e:40:22:
b0:39:21:26:43:ed:fe:92:e3:ba:9f:66:2d:43:ea:fe:df:a2:
95:61:ec:20:61:84:f6:ff:f4:46:86:34:fa:1b:3b:66:d8:e5:
2a:08:c8:4e:e5:5e:9c:2b:18:50:4a:db:1e:60:d3:57:84:c6:
15:4b:2e:18:2a:d7:51:dc:65:7b:1b:5b:56:4e:fa:93:d0:28:
ef:e1:4e:fd:30:86:e7:9d:43:33:9c:6d:b0:ae:7e:4b:cc:fe:
16:c9:df:6c:8d:56:0b:1f:d7:1b:6c:33:aa:59:19:25:20:3e:
c7:b1:f1:4c:bf:2c:1d:88:0d:64:aa:2f:a3:39:f6:52:cb:4d:
cd:c2:8c:72:57:3b:2e:7a:55:78:3a:f2:0a:ff:a6:b6:b4:a4:
b5:a6:18:7b:91:68:cb:e2:e9:71:73:47:63:9e:ad:bc:0c:5b:
e2:5a:47:51:f2:e2:9e:ff:a8:59:1d:69:6f:21:eb:11:d2:51:
3a:e6:9b:2d:7b:fa:d3:6f:c1:82:82:b6:cb:0d:a0:7d:f0:ed:
bb:d2:17:21:2c:03:2d:e4:91:39:c7:c4:a1:12:ab:a7:7b:b0:
fe:56:ae:e5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIULUxHxuixRplmLwerFw2lr9JEwTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5
QjMzNzU0NTAeFw0yNTEyMDUyMDI1MzNaFw0yNTEyMDcwMDAzMzNaMDMxMTAvBgNV
BAMTKEE3MkRDOTE4MTk5NjhGMEQzNTE1MjdGQzhCMzQwRTY4NzVDQUQ2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2prJXnvJpFGM2Cx6ihl2RFzCg
Ja+nsxI5cjMx2zPd4TFJllK5iLVNhuT4vowCpMMh9H7Pi60/zMgQEN0vBDaL9Bcc
Ii0bvPEgdFnPp4VO4xtxMLmaYBpnyhxDzIeMpB//2BpME/zV1ef1N4w1U1ATSmf7
SrULsK/bKrWBLwTdDzSPtOEWMkaoJXsh/iVJPUdKbHuvdbLIEidLC4WUTdaOYDEq
Ggt58swzJaupIffqmU9IixEp3Rf7kj6EiESShN2zJyVLXW55drsOFeQxTry10u/g
M/1a0TQcgSJYDHa7Y8KGLWUfxERkD0aU7W02+tbuZCkr+rhauA8hRgGMFR3FAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUpy3JGBmWjw01FSf8izQOaHXK1g0wHwYDVR0j
BBgwFoAUzUZtQn8f06tBz4eKVpiYp5szdUUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Cbm1MWEpNUXNlWVhpTXZoOVoyZnFId2l6S2V0aFRjZkNLSnVaOFdvZkY2
LzAvQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5QjMzNzU0NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DRDQ2NkQ0MjdGMUZEM0FCNDFD
Rjg3OEE1Njk4OThBNzlCMzM3NTQ1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ju
bUxYSk1Rc2VZWGlNdmg5WjJmcUh3aXpLZXRoVGNmQ0tKdVo4V29mRjYvMC9DRDQ2
NkQ0MjdGMUZEM0FCNDFDRjg3OEE1Njk4OThBNzlCMzM3NTQ1Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
i9SIlqvZaI2nUmE72JNafX2HS3EeDVLx5w20flw8/69PfkAisDkhJkPt/pLjup9m
LUPq/t+ilWHsIGGE9v/0RoY0+hs7ZtjlKgjITuVenCsYUErbHmDTV4TGFUsuGCrX
UdxlextbVk76k9Ao7+FO/TCG551DM5xtsK5+S8z+FsnfbI1WCx/XG2wzqlkZJSA+
x7HxTL8sHYgNZKovozn2UstNzcKMclc7LnpVeDryCv+mtrSktaYYe5Foy+LpcXNH
Y56tvAxb4lpHUfLinv+oWR1pbyHrEdJROuabLXv602/BgoK2yw2gffDtu9IXISwD
LeSROcfEoRKrp3uw/lau5Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:41 2025 by rpki-client