This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft
File: 2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft (raw, json)
Hash identifier: xKRzu2Lvtx178W+1jfcahfDpHDe+znmZAHA1y+o6MuU=
Subject key identifier: 8E:1C:9E:99:4E:89:22:DC:3B:3E:6A:7B:CC:2F:C4:2D:D1:84:FF:2A
Authority key identifier: 2A:13:E5:40:25:F9:AF:5E:B9:5F:1F:B0:CB:06:9B:C4:43:10:79:36
Certificate issuer: /CN=2A13E54025F9AF5EB95F1FB0CB069BC443107936
Certificate serial: 3D3DB23A309A00A9142A9F6EAFC3B38320BF4C58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft
Manifest number: 0333
Signing time: Sat 06 Dec 2025 14:18:51 +0000
Manifest this update: Sat 06 Dec 2025 14:13:51 +0000
Manifest next update: Sun 07 Dec 2025 14:28:51 +0000
Files and hashes: 1: 323830343a343430633a3a2f33322d3438203d3e20323637363138.roa (hash: JThm13vt5TbRKIfTnx4P4C68eawxbCLIHMV3BTISSQA=)
2: 34352e37312e38382e302f32322d3234203d3e20323637363138.roa (hash: qiK4B1q/mEqhWxVP31EOV/jhMfI3fIRg9yGJJ1u+v4o=)
3: 2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl (hash: YzPI7BSBJBsCrfp89Gr+AXv7dVhlDqF4OZuqbhEcZwI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl
rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 14:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3d:b2:3a:30:9a:00:a9:14:2a:9f:6e:af:c3:b3:83:20:bf:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A13E54025F9AF5EB95F1FB0CB069BC443107936
Validity
Not Before: Dec 6 14:13:51 2025 GMT
Not After : Dec 7 14:28:51 2025 GMT
Subject: CN=8E1C9E994E8922DC3B3E6A7BCC2FC42DD184FF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:06:58:94:9b:a7:cf:d9:c0:35:32:e1:6e:
09:0a:e6:85:2e:fd:f7:4e:42:e0:6d:57:15:a1:4c:
d8:a3:0c:8a:be:e5:e6:9c:19:0f:61:4c:7d:36:da:
87:72:8d:2c:ac:3e:99:32:34:5f:6e:b4:28:95:a7:
fa:24:db:53:4b:f5:ec:58:a9:62:bf:9d:32:53:81:
fe:04:05:0b:87:27:96:3a:96:00:3b:87:2c:6f:01:
62:32:c3:44:a1:54:26:f6:bb:ed:f8:a8:5d:b8:73:
c5:02:36:4f:d1:99:40:5b:8c:8f:88:c8:37:e6:4e:
f5:ab:16:53:d6:28:d8:dc:94:41:b4:90:51:01:7b:
fc:eb:a7:02:51:9d:a1:63:61:7e:18:3d:78:2d:84:
aa:84:0a:86:71:4f:d9:f6:5d:f0:df:d2:df:54:df:
56:66:c4:84:6a:7a:ad:59:ce:ab:b2:4d:e9:c1:0f:
5e:23:8a:23:58:d9:72:65:59:95:e8:98:0c:d9:33:
81:5c:21:b3:8d:96:69:35:d5:7a:ba:86:5f:dc:c3:
8a:66:0e:6f:d3:c7:2e:a3:19:67:5e:ad:fd:a2:f3:
08:da:3b:1f:78:1b:70:56:72:2b:5e:5e:ee:ad:92:
0e:88:af:fe:84:c3:0d:bf:13:d9:13:7c:4c:04:20:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:9E:99:4E:89:22:DC:3B:3E:6A:7B:CC:2F:C4:2D:D1:84:FF:2A
X509v3 Authority Key Identifier:
keyid:2A:13:E5:40:25:F9:AF:5E:B9:5F:1F:B0:CB:06:9B:C4:43:10:79:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:42:ef:83:4f:01:ce:86:44:c8:6f:6c:ed:94:2f:c4:a5:af:
60:4c:9a:d2:65:38:14:e9:f9:da:15:32:59:4f:22:e6:f7:ea:
45:d7:ae:7d:1f:01:9b:4c:33:33:dc:8b:82:cf:7f:f7:5a:b7:
cd:57:a5:25:76:f2:bc:fb:2a:35:b5:6e:40:8c:5b:13:72:9e:
6c:42:7a:ca:36:80:4f:23:04:b0:26:d1:c7:0e:22:7b:37:3d:
63:29:06:c5:13:9b:ae:e2:87:f8:46:ff:8d:56:2d:39:bf:20:
b8:92:9b:f9:bb:55:f0:8e:3a:b3:66:8b:bf:47:35:4e:69:2d:
59:74:c6:26:53:80:7c:9f:d0:7b:66:e2:0c:4d:d9:17:e6:ed:
c8:4e:5a:44:2c:9c:6a:73:82:8a:8c:15:2c:c6:02:5f:52:b0:
e6:98:52:66:d8:ae:6e:96:b5:5c:b1:e7:d1:42:21:a5:6d:54:
6b:0e:b2:e5:ca:13:80:12:37:f7:e1:cb:59:a7:f2:50:13:1f:
18:fa:9b:05:e5:72:5d:db:85:19:23:5a:70:93:8f:1a:52:c5:
34:eb:05:fc:f7:aa:fa:9d:7d:6d:2a:ea:f1:40:d2:76:21:02:
53:b2:79:fb:1b:7a:ac:ff:20:73:01:61:71:7b:7c:a4:52:62:
a9:be:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:07 2025 by rpki-client