This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft
File: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft (raw, json)
Hash identifier: GnVmFKty58Tascl0Ox3/CzXftPJeyH7JiF/p/jhR0AU=
Subject key identifier: 28:1F:28:AC:ED:B2:E1:06:BC:F2:D9:9E:B0:FD:8F:C1:89:DF:64:DE
Authority key identifier: 0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7
Certificate issuer: /CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7
Certificate serial: 63ECF8BA3B183D61797469386A675C26D5E29D48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft
Manifest number: 36
Signing time: Tue 02 Dec 2025 19:28:46 +0000
Manifest this update: Tue 02 Dec 2025 19:23:46 +0000
Manifest next update: Wed 03 Dec 2025 21:38:46 +0000
Files and hashes: 1: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl (hash: BjxN4x99/2QrHixCkerBK/spmXnpr81qe4WdLFbrRyw=)
2: 323830343a386565383a3a2f33322d3438203d3e20323733343535.roa (hash: NVUJownjGnvFSmtuDbAZ9K64Gu/5n2+eB4lx6uENZ3s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ec:f8:ba:3b:18:3d:61:79:74:69:38:6a:67:5c:26:d5:e2:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7
Validity
Not Before: Dec 2 19:23:46 2025 GMT
Not After : Dec 3 21:38:46 2025 GMT
Subject: CN=281F28ACEDB2E106BCF2D99EB0FD8FC189DF64DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:78:a1:89:96:da:3d:e3:40:88:1b:36:1b:
93:1f:1f:a5:55:4a:4f:73:17:66:9c:bd:44:b1:60:
74:ab:61:31:61:26:c2:6c:25:38:15:ef:f6:71:db:
ad:65:99:a0:2e:a6:a3:5a:4f:eb:89:33:49:c6:14:
92:fb:b6:0d:b7:5c:c1:23:aa:01:0b:97:8b:75:f5:
a5:00:63:5b:02:de:18:d1:34:a3:02:d1:c1:a1:e6:
99:2c:37:95:20:0f:6d:bd:b2:20:f5:bd:a7:3a:06:
db:8b:b1:79:50:a7:ef:d3:83:8d:1f:b0:6e:ad:ce:
c6:95:7a:4a:9e:43:c6:13:ae:8a:76:64:98:2c:1b:
50:ef:bd:50:c3:e0:d9:e2:94:4e:b9:91:e0:ca:2b:
c1:90:44:c9:e8:22:11:e7:6f:42:20:74:75:5f:a1:
a5:a9:d6:6f:e5:6e:6d:f5:89:54:17:1f:4f:1d:47:
62:cf:80:4a:d9:4b:e3:bc:0b:98:61:10:d5:31:23:
5d:6e:4d:1d:d0:1c:06:ae:09:d9:88:63:f4:cc:95:
6d:f5:c9:4f:c0:40:87:3d:e7:6d:22:b4:b3:67:89:
b0:cc:21:2f:2b:66:92:eb:cc:57:28:dc:52:c8:c5:
a3:14:6f:40:79:b0:0f:a9:7d:3f:f8:1b:27:7b:be:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1F:28:AC:ED:B2:E1:06:BC:F2:D9:9E:B0:FD:8F:C1:89:DF:64:DE
X509v3 Authority Key Identifier:
keyid:0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c4:a6:c4:0c:af:a6:1c:8a:73:df:ad:3d:2b:6f:b4:19:9e:
e8:87:b3:cc:07:29:a2:ec:1c:18:59:79:7c:b7:94:19:3a:60:
d8:eb:15:5e:d5:c7:9d:b0:1f:c0:21:7b:43:b5:a3:49:53:d0:
d6:7c:d5:46:d9:33:6d:28:59:6b:2e:cc:25:d0:2c:4e:87:f2:
cd:eb:2d:77:d8:e4:f5:a9:01:56:11:a6:26:d2:a2:fd:06:da:
97:fc:7c:10:18:5b:66:8e:fd:9a:80:4b:da:36:5b:92:6c:a7:
cc:0f:1d:3c:60:ba:ee:b0:e2:ec:0f:44:cb:a7:da:b8:75:29:
73:da:c2:8e:8e:5c:ba:81:9f:6d:d4:77:8c:79:38:75:32:2a:
cf:1b:31:d4:6e:7d:dd:36:fa:73:a9:72:32:ca:ba:8f:c5:fa:
3a:76:6d:5c:56:09:92:9f:94:d4:db:1f:a5:5a:af:cb:29:a2:
62:68:71:7a:cf:e2:51:94:e6:d1:0a:bc:bc:c7:34:f2:b8:12:
42:fe:28:3a:6a:cd:b6:5e:8f:f1:71:1e:f4:b1:66:53:56:89:
89:39:4d:90:8f:19:63:b4:6c:e5:f0:aa:d2:29:03:9b:05:6a:
5b:d7:f3:44:06:91:b9:7d:c4:81:9c:d2:16:ff:31:3a:7f:64:
c3:6a:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:32 2025 by rpki-client