This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
File: 8B5B625A528EC464925ACB69248E90494483E3F7.mft (raw, json)
Hash identifier: Cl+3Gnap6Tknzw4vVZQbUUje6HtqJKzD3SphXTabLEY=
Subject key identifier: 31:DB:14:C6:27:82:3E:C2:1E:2E:DC:C5:9A:C2:5D:1B:31:87:26:94
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Certificate issuer: /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial: 58741E94797D23DBDDCFE92A70FA81176AA16BB5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
Manifest number: 0328
Signing time: Sat 06 Dec 2025 11:47:42 +0000
Manifest this update: Sat 06 Dec 2025 11:42:42 +0000
Manifest next update: Sun 07 Dec 2025 13:26:42 +0000
Files and hashes: 1: 3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (hash: ObqAafyNZ+1poxt3i+2GRujB4s5MDqvrCcZ2DXBseOg=)
2: 8B5B625A528EC464925ACB69248E90494483E3F7.crl (hash: fFEUAuT51ii8IvxCvpK+mCr9m+DcuQfFdsLDMWcLWk0=)
3: 323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (hash: +ywXOGrXavmStWRwGu8rjCt+9m/hLwPwyeyFSJ0U5qM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 13:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:74:1e:94:79:7d:23:db:dd:cf:e9:2a:70:fa:81:17:6a:a1:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
Validity
Not Before: Dec 6 11:42:42 2025 GMT
Not After : Dec 7 13:26:42 2025 GMT
Subject: CN=31DB14C627823EC21E2EDCC59AC25D1B31872694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:43:ef:af:4b:4c:66:25:02:c9:27:c3:5e:
42:35:61:bb:64:24:eb:b2:85:1c:2a:12:0d:98:14:
84:e1:b9:21:eb:e5:e6:7b:c8:ff:4a:5c:42:9b:f4:
db:a6:70:2e:a6:bd:e4:d8:4c:b8:da:0c:5e:02:50:
9c:33:25:2c:60:ae:e3:92:c6:c7:cf:14:19:01:7f:
59:97:f9:a8:09:52:4f:62:ff:5e:8e:63:14:77:5f:
94:d9:1b:22:95:5d:b1:3f:f4:bd:85:d1:ac:d2:65:
cd:bb:87:ac:a1:c5:ec:95:4b:74:93:9c:a2:9c:64:
dd:1a:24:de:a8:fe:05:da:46:f8:11:bd:1b:c9:36:
bf:b7:8a:73:aa:8c:af:a8:ca:d3:ac:65:4f:33:1c:
52:00:8a:d0:c6:33:50:23:76:4e:45:a7:43:21:d9:
9e:d0:9a:e6:dd:2c:5b:4f:d5:23:46:86:5d:c0:8e:
3e:85:7a:f9:42:9c:bf:50:90:83:c1:96:40:ab:b5:
a2:31:c4:42:4d:a9:3f:f1:bc:a5:c8:3e:60:8d:58:
ee:16:4e:b9:73:37:84:d1:5d:4c:b5:32:60:59:87:
d6:46:40:53:f8:e1:01:32:3d:13:a1:35:84:b1:01:
ff:5f:e0:01:2b:16:41:ed:fa:1a:f1:5c:3c:27:05:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:14:C6:27:82:3E:C2:1E:2E:DC:C5:9A:C2:5D:1B:31:87:26:94
X509v3 Authority Key Identifier:
keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ac:fa:2e:9f:2c:7e:de:45:4f:6c:18:db:8a:96:4a:e0:2a:
40:f7:c1:e2:f1:14:18:40:cb:74:fe:7a:f9:b0:3b:71:01:93:
6e:05:46:93:89:e4:1f:9f:95:53:4e:19:80:75:d1:be:ea:08:
34:8f:f2:97:9e:58:7a:f2:f4:f2:fc:69:55:97:ae:7f:a9:d0:
35:81:a5:2f:a6:a1:7d:d2:05:79:22:09:6f:70:e5:47:cb:87:
27:00:a7:43:63:3e:fb:ec:2b:13:f5:f9:b8:a8:6b:8f:fc:6f:
46:ed:90:02:d4:3b:b2:87:25:da:4b:23:29:eb:48:ac:e0:2e:
9d:b5:a6:16:d0:13:5e:0c:ff:23:33:72:c9:4d:34:54:db:66:
d7:a2:b4:3d:65:9b:b1:42:3c:52:0d:22:9a:b5:32:33:bc:79:
79:76:75:d2:1d:b3:a9:f3:50:fd:8f:e2:c5:58:1c:b3:34:0f:
e5:57:d3:60:ab:a1:7d:92:b2:54:27:8e:fe:86:69:0a:4f:c4:
26:c1:36:e2:60:0f:9b:b4:fc:15:13:df:80:3a:5c:0e:9b:2b:
d4:6a:47:e0:28:7a:e5:68:9f:99:f2:b7:79:f9:ca:dd:b2:46:
f9:11:aa:51:f8:fd:b3:6d:60:9e:e7:5e:d5:4d:f5:b0:af:9b:
d7:13:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:39 2025 by rpki-client