This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
File: 60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json)
Hash identifier: Twa6ohOAPOYT/N2oSD1GeMS/rje8nOiIykpKbd+nmA8=
Subject key identifier: CE:EA:59:8D:73:60:D0:AC:03:F1:0B:7C:85:37:3C:1A:4F:2B:96:20
Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Certificate issuer: /CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Certificate serial: 56EA009FC079FBCDFBEB535C4BC5A1A588F0744E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
Manifest number: 5C
Signing time: Fri 05 Dec 2025 21:37:05 +0000
Manifest this update: Fri 05 Dec 2025 21:32:05 +0000
Manifest next update: Sun 07 Dec 2025 00:30:05 +0000
Files and hashes: 1: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: /OcN5kgKxn9vf8cA6Ce4uiembg6DIZ6/p7h83eg0O30=)
2: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ea:00:9f:c0:79:fb:cd:fb:eb:53:5c:4b:c5:a1:a5:88:f0:74:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Validity
Not Before: Dec 5 21:32:05 2025 GMT
Not After : Dec 7 00:30:05 2025 GMT
Subject: CN=CEEA598D7360D0AC03F10B7C85373C1A4F2B9620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:ec:d0:04:05:29:20:99:a5:55:40:2b:1d:
0e:89:ec:aa:d6:e5:c2:7e:19:42:98:e2:2d:db:2e:
1e:af:06:03:a1:b8:6c:cd:1e:41:d3:b9:97:dd:89:
24:95:a0:b9:38:54:99:19:44:25:7a:17:7c:b3:83:
20:d9:cd:7a:31:d8:d9:67:86:55:62:51:d7:1e:39:
77:2b:4c:f1:79:fc:cd:54:47:83:1f:2f:18:67:9a:
ea:f8:70:46:b8:ff:89:ee:28:02:7c:c7:bc:87:d7:
9f:84:f5:bf:4c:4f:a7:5b:65:86:ba:3c:7c:b8:4b:
66:5d:78:05:8a:f4:2a:f6:28:51:f5:32:fb:a2:90:
23:b1:fc:58:8f:1c:02:26:f9:55:4c:71:ef:81:b8:
5a:65:f8:0f:38:d5:0b:d4:33:fc:07:f9:19:f0:32:
8e:6d:4c:39:2a:a5:10:e1:3e:f7:e4:8d:16:74:74:
7f:e5:27:b3:c9:1f:58:17:79:a5:21:22:de:42:e9:
74:ef:b0:09:85:58:ed:41:67:1f:50:78:26:ef:fa:
38:e5:3a:fe:07:04:76:18:a4:9a:af:5a:74:f5:4c:
1f:28:c4:5a:21:61:02:48:bb:06:30:91:07:b6:65:
d9:5f:85:64:c8:5e:cf:5b:08:b6:2a:24:a2:f4:2a:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:59:8D:73:60:D0:AC:03:F1:0B:7C:85:37:3C:1A:4F:2B:96:20
X509v3 Authority Key Identifier:
keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:95:47:ac:f3:b5:55:bd:20:0d:fe:a9:3b:bc:a5:89:07:
57:85:e8:ef:d2:ad:03:19:80:d5:8d:14:d4:54:1b:e3:57:77:
ac:bc:8b:ff:d2:0c:ac:f1:e1:c5:6a:2e:b0:55:e0:ca:9a:64:
59:fe:af:71:fe:59:ad:36:bb:8b:d2:e2:96:be:9a:eb:2b:06:
2b:94:c2:c0:bd:f1:01:10:16:49:6b:ba:b0:81:18:f8:01:43:
0b:0f:53:dc:06:48:c1:75:99:39:74:48:dd:63:22:fc:fe:54:
45:02:ba:fb:be:19:d3:4b:de:16:a7:08:94:81:a8:6b:d7:62:
86:b8:54:cc:ba:f9:99:2b:42:91:ed:d8:23:8d:8c:cf:ab:97:
bb:a3:5b:bf:99:90:9c:b2:f6:60:2a:3b:cc:af:69:c9:57:27:
50:94:9a:ef:a8:4f:68:76:4c:19:65:4c:98:d9:ab:41:66:ca:
77:bf:de:c6:d3:92:9a:ed:8b:0d:f4:42:4c:cc:71:a8:5d:53:
b1:6e:e1:bb:b2:18:28:fb:f3:4f:6e:34:9a:a0:9c:23:e4:1d:
80:ac:23:9f:fa:86:9f:2c:fa:a4:29:bb:e2:7e:a7:9c:14:f1:
cb:6a:58:65:77:ca:fb:ff:11:8d:ee:d9:59:68:47:86:c1:2f:
87:5f:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:29:21 2025 by rpki-client