This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier: PdrgmmkWW1Mp+k4AuaP2m7Mdz93PettxHpyhP+RnCjo=
Subject key identifier: 22:40:87:30:58:E2:BA:46:18:0D:54:0B:4E:FC:E1:4E:ED:F6:62:21
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial: 4DCD290FDFDCA48D93D84E0DD306BE2582C87F80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number: 0154
Signing time: Sat 06 Dec 2025 00:57:04 +0000
Manifest this update: Sat 06 Dec 2025 00:52:04 +0000
Manifest next update: Sun 07 Dec 2025 01:24:04 +0000
Files and hashes: 1: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: vYkaxxeQASPINcQspGMMeK/AtnTULJJJ0inZyxUiWWM=)
2: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=)
3: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=)
4: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=)
5: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 01:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cd:29:0f:df:dc:a4:8d:93:d8:4e:0d:d3:06:be:25:82:c8:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Validity
Not Before: Dec 6 00:52:04 2025 GMT
Not After : Dec 7 01:24:04 2025 GMT
Subject: CN=2240873058E2BA46180D540B4EFCE14EEDF66221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:3e:9c:08:0d:74:28:2f:9d:73:0c:ea:d4:
f7:5c:b5:92:2a:3c:79:af:ab:e4:ca:5c:02:9a:4e:
f6:b5:b4:9f:67:8d:0c:00:72:9e:49:04:8f:23:c8:
aa:7b:2f:c4:da:98:bd:d8:67:ba:8f:89:48:73:b7:
0b:3c:31:6f:04:d5:89:7a:a1:d7:3f:0b:8f:d9:09:
3e:eb:d1:75:25:6f:2a:41:9d:30:1d:e2:7f:b0:e4:
e6:29:c2:85:4a:66:b2:84:99:08:f0:1a:21:9f:74:
5f:c3:7b:f8:ec:12:81:c0:95:7b:75:50:d6:4a:ea:
0e:73:78:be:c6:36:da:05:cf:55:a3:e6:d6:f6:00:
d8:77:b2:7d:f1:b8:77:2e:16:de:06:01:75:cb:33:
32:b9:63:74:7b:3d:88:c3:60:a1:0d:f0:2d:9a:49:
37:31:01:87:68:5e:5b:86:33:78:af:55:cd:5b:8a:
e6:63:a4:68:4a:a2:83:0e:65:7c:ed:38:81:99:6a:
03:6f:1b:7c:b5:38:68:54:49:2c:0a:3b:4c:ee:7c:
86:31:a7:fe:6e:96:12:0d:ce:a1:0c:bd:a0:bb:db:
77:b8:82:fb:0c:ca:00:76:03:14:04:04:05:0d:13:
e4:72:c6:c4:6f:5a:dd:e6:9b:b2:c1:ac:50:1e:6d:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:87:30:58:E2:BA:46:18:0D:54:0B:4E:FC:E1:4E:ED:F6:62:21
X509v3 Authority Key Identifier:
keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6b:c6:38:46:60:d7:33:0a:5e:2d:83:25:aa:92:f5:76:35:
93:bb:76:d5:bb:f0:e4:59:5b:74:50:18:b2:d9:09:da:50:46:
3c:53:b4:45:f3:a0:b3:20:c0:e2:c9:13:0b:13:54:38:35:ec:
d7:27:01:c7:bc:07:4a:bf:21:2c:09:d5:78:ef:0f:67:73:e2:
06:3f:89:c9:bd:8a:32:cd:ee:43:d9:a6:3a:d0:a5:69:50:1b:
52:3a:f4:ea:fc:35:08:00:ef:0a:85:5d:8b:87:79:75:1a:c1:
1e:ab:29:45:9e:ea:f1:4a:a9:19:3d:a5:56:3d:e8:d5:03:d9:
3e:32:de:82:56:d6:2b:66:71:6b:a2:51:cd:39:f7:80:bf:27:
9a:0f:4d:b5:39:bc:4d:1b:a4:63:ae:87:7a:9b:f1:45:33:1f:
da:dd:fb:69:69:7d:33:9e:ab:96:1d:bd:7d:b4:5c:dc:30:0a:
2f:d2:a9:52:88:b8:06:69:bb:83:c2:8e:2c:fc:5d:07:69:4b:
89:62:e4:b8:c8:65:5a:79:1a:f3:d9:bd:f0:02:4d:6c:75:1a:
2d:80:6d:dd:38:17:6e:b2:24:25:b4:9e:3e:90:cf:db:14:65:
7d:11:13:0c:92:27:b1:0f:65:22:c1:22:05:f0:95:8e:0d:89:
26:7a:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:15:06 2025 by rpki-client