This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft
File: C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft (raw, json)
Hash identifier: 6t09vKxCP8Rt9KaWPAM4bUTU9utgAU+ZkI4B0fCM6bU=
Subject key identifier: 36:1E:D6:79:83:0A:59:19:29:82:4F:43:11:4B:0E:BC:74:65:42:A6
Authority key identifier: C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8
Certificate issuer: /CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8
Certificate serial: 4241EC4F96D0DE82668738F2CFCF055CCDAA3CB2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft
Manifest number: 15
Signing time: Fri 05 Dec 2025 18:44:53 +0000
Manifest this update: Fri 05 Dec 2025 18:39:53 +0000
Manifest next update: Sat 06 Dec 2025 18:49:53 +0000
Files and hashes: 1: C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl (hash: L+imZLP3VB0RGuVpQMugS8en6QL8FWDPRwcWabz8lyk=)
2: 323830343a386532633a3a2f33322d3438203d3e20323733343038.roa (hash: G/XiXJWvUHjXdetYZOinPftE6hcIH1QMqPHq2b2n+qI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl
rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 18:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:41:ec:4f:96:d0:de:82:66:87:38:f2:cf:cf:05:5c:cd:aa:3c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8
Validity
Not Before: Dec 5 18:39:53 2025 GMT
Not After : Dec 6 18:49:53 2025 GMT
Subject: CN=361ED679830A591929824F43114B0EBC746542A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:10:74:42:e5:96:5a:a4:2b:61:ad:ff:6b:
75:e6:52:45:15:2e:9b:83:b4:58:c4:3a:04:c8:69:
53:29:0b:d6:74:36:2e:c7:80:db:9f:a3:9f:5a:b5:
2d:73:da:53:56:b6:f3:64:23:07:f9:28:86:26:c1:
3c:f2:70:fc:01:11:b8:36:c0:85:d8:02:36:4a:c3:
76:16:df:76:d3:7b:b4:ce:a7:2e:57:52:fd:0e:28:
76:f1:a7:2b:a2:a9:e9:44:8d:50:e9:78:34:50:de:
d8:b5:b3:44:97:a4:06:63:28:5f:74:44:cc:8e:90:
d2:66:4a:02:e0:53:25:c9:05:86:44:d4:4d:84:97:
88:cb:09:6e:52:5c:07:e2:ef:83:3b:a4:2a:75:74:
46:18:ee:45:8f:d3:87:56:45:08:76:1f:74:9d:73:
b9:ba:df:c0:1f:cc:c0:b6:b9:f2:0c:b4:48:6f:4c:
96:ee:e6:03:b1:31:e4:9d:3d:c4:c5:16:cd:7e:4e:
b0:15:f6:03:f7:6b:17:e6:e7:4c:47:eb:63:c6:ec:
aa:6d:0d:b7:a3:92:2a:16:1f:47:c9:68:1d:81:5e:
4d:23:d7:cc:6a:c8:03:7f:69:df:45:26:d3:1d:da:
15:7f:3b:b9:79:ad:5c:ed:03:74:08:cc:69:7f:7f:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:D6:79:83:0A:59:19:29:82:4F:43:11:4B:0E:BC:74:65:42:A6
X509v3 Authority Key Identifier:
keyid:C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b8:e1:73:7b:65:1a:32:57:b0:d1:1e:a5:3d:38:a7:9c:49:
c3:72:43:cf:1f:55:90:9b:1b:c2:34:b5:f8:a2:b2:e4:e2:47:
a6:79:5b:b8:7e:df:d2:58:83:fc:d1:c0:e2:e6:04:9f:60:e4:
88:e0:e9:66:fe:6f:85:c4:67:42:ae:0f:a3:9c:9b:c9:da:1c:
72:af:94:fb:23:4c:97:a1:27:d2:9a:04:60:6c:96:75:55:f2:
4d:91:e9:c1:07:ef:9c:f8:ee:8c:f4:c3:29:91:f9:94:43:11:
e2:72:c7:47:ed:0d:b7:82:59:1e:ae:c7:80:ee:61:63:3e:e5:
ea:0b:87:bc:74:2d:2c:d8:fe:75:0b:34:ee:82:78:e2:c4:dd:
28:b0:33:e8:bb:85:15:23:17:bf:60:9e:a4:d5:0e:03:3f:df:
3e:3d:8a:80:aa:a2:2a:aa:bb:48:48:eb:8c:d3:92:86:cc:ed:
c3:f6:6d:46:30:af:cd:04:10:4b:69:4a:11:4a:4d:f3:e9:45:
62:6e:ac:73:54:88:42:96:39:b3:b2:d4:30:18:e2:6f:40:6e:
16:e8:f2:91:1d:d6:f5:e0:a7:01:d7:54:e3:18:36:c2:6f:3f:
b1:26:ab:3a:03:9b:c1:29:11:f5:a9:40:12:f2:3b:00:7b:9c:
2b:fc:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:57:50 2025 by rpki-client