This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json)
Hash identifier: XxfFQmMEw4oItjncAdWlqLb1Mpu4Lv8OSk91G5ITwwo=
Subject key identifier: 0A:93:63:82:E6:AB:8E:72:10:43:37:1A:5E:6A:A0:44:90:C7:DA:AA
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial: 6B705476829B9216D06C72A062C97D7A760CF7FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
Manifest number: 033E
Signing time: Fri 19 Dec 2025 10:15:18 +0000
Manifest this update: Fri 19 Dec 2025 10:10:18 +0000
Manifest next update: Sat 20 Dec 2025 11:00:18 +0000
Files and hashes: 1: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=)
2: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: coPY3W56rBzf0cMyQ1Ylaon/Cmw7UyUtCgXu4YE8kTg=)
3: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=)
4: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:70:54:76:82:9b:92:16:d0:6c:72:a0:62:c9:7d:7a:76:0c:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Validity
Not Before: Dec 19 10:10:18 2025 GMT
Not After : Dec 20 11:00:18 2025 GMT
Subject: CN=0A936382E6AB8E721043371A5E6AA04490C7DAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:11:86:fe:7c:e3:91:69:e5:08:3c:60:e8:
cf:e1:34:37:69:41:d7:f7:36:ff:cf:91:02:82:89:
5c:ab:c7:57:ea:c6:b1:c6:dc:c3:6b:57:c6:8c:8b:
16:d0:bc:f0:db:ce:21:e8:8a:5b:0c:95:51:33:9d:
f8:cc:fa:b1:35:ed:33:31:31:dd:76:71:da:b7:80:
ef:4b:c5:96:c6:41:7b:f6:69:79:0d:df:8e:7d:e0:
3b:ea:29:3b:8a:71:80:bc:1c:8c:ac:19:e3:4a:6b:
11:1a:e7:97:a9:c3:e6:f2:88:fa:1a:b0:53:4a:a3:
ad:b6:ce:71:35:49:54:f8:6d:bd:1a:55:78:51:e6:
74:10:c2:c4:c3:ec:cc:ef:b9:31:b5:ff:45:5b:ef:
5c:3b:84:c3:19:91:cb:98:a8:4b:5f:68:75:e9:e6:
30:2e:6b:b2:95:ea:13:60:a1:8e:e8:cb:e6:fe:22:
c8:98:af:1f:1f:cb:53:e9:32:ff:32:31:c1:fb:ba:
68:ec:85:df:ff:1c:f2:15:04:cd:b3:8e:2c:0e:6f:
03:5f:c3:07:1f:4e:64:7b:cc:99:51:9b:a2:cb:f9:
99:65:c6:3a:c5:dc:fa:ac:59:77:13:a6:01:e1:f5:
2e:3d:99:9e:d2:9e:c6:af:58:90:21:03:6c:20:ec:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:63:82:E6:AB:8E:72:10:43:37:1A:5E:6A:A0:44:90:C7:DA:AA
X509v3 Authority Key Identifier:
keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1d:3e:11:82:b9:ea:69:ba:f7:fd:55:57:1d:b3:e7:27:5e:
52:62:c6:e5:4f:95:bf:3c:76:b3:62:4c:79:11:eb:26:22:69:
55:ad:95:17:d9:19:d6:f7:f5:7f:b1:2c:8b:8a:32:58:1a:fb:
e0:a7:3c:3f:40:96:c1:c4:91:e6:70:09:a6:2a:ca:a0:93:f5:
22:97:dd:40:cf:1d:29:8b:4a:ac:75:aa:cb:50:6e:23:67:3c:
21:53:f7:e8:1a:7f:96:1c:19:83:6b:ab:5f:86:75:05:15:a0:
07:8d:6a:41:27:c1:f4:30:37:2f:f2:dd:ee:0f:f2:6e:c6:b0:
de:af:1f:a1:59:b2:50:66:9f:9d:7c:05:62:a8:71:d2:1d:15:
bb:e0:5c:4d:a0:d8:cc:f4:7a:48:28:e4:77:2a:72:e3:e5:95:
5c:e3:d9:e2:1b:f4:10:bd:e9:52:d3:12:44:60:a5:81:80:43:
06:db:b0:d8:98:61:8d:d8:c7:f2:f6:c9:c7:0e:df:0f:fe:11:
d8:fa:3e:5d:de:c3:00:76:00:3a:4d:57:95:f1:76:c4:06:c6:
08:39:5a:f3:9b:0e:d9:21:e8:cb:71:65:ee:5c:3d:12:a4:b8:
b3:d1:65:92:d2:57:17:95:28:12:b5:8d:24:3d:f1:81:82:71:
41:0f:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:51:16 2025 by rpki-client