This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
File: 39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft (raw, json)
Hash identifier: y3e4f8T9+RmESuCr0k3s5Ejb0vsT3SQppsrEXQbYz/8=
Subject key identifier: E0:63:21:12:8F:D9:90:E7:E4:E6:EA:C3:F7:E6:E2:65:3E:B5:FD:73
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Certificate issuer: /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial: 58096FEAD21659507E51E9521F468205F85EF2D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
Manifest number: 01AD
Signing time: Sat 06 Dec 2025 06:54:22 +0000
Manifest this update: Sat 06 Dec 2025 06:49:22 +0000
Manifest next update: Sun 07 Dec 2025 10:08:22 +0000
Files and hashes: 1: 3133312e37322e3138302e302f32322d3332203d3e203631373337.roa (hash: uAMdtVL40b9ds6awCiCsmPZthB3stigLIOnewfJ/Lc8=)
2: 323830343a316239633a3a2f33322d313238203d3e203631373337.roa (hash: 3lYqpwlwZpeKcmP1B5up2XOzGqyWwLy1Z0IaEI+U//Y=)
3: 39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl (hash: 4q7D8tbMnj44gNESJkEZXTerYhBwT5Mxqv+8SSi9nxs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 10:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:09:6f:ea:d2:16:59:50:7e:51:e9:52:1f:46:82:05:f8:5e:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Validity
Not Before: Dec 6 06:49:22 2025 GMT
Not After : Dec 7 10:08:22 2025 GMT
Subject: CN=E06321128FD990E7E4E6EAC3F7E6E2653EB5FD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:89:7e:3e:14:39:4a:06:6d:2d:2f:8f:e4:
9f:4a:f5:d2:7f:c5:6f:4f:e0:19:82:87:24:9c:98:
59:7a:18:4b:15:a5:18:9f:d2:3f:e3:5f:b9:72:2b:
58:80:5b:39:02:d1:8b:5e:71:c0:df:7a:09:28:bc:
c7:4c:7c:0b:21:e7:f0:49:40:c3:61:c0:20:a3:18:
44:52:72:98:fe:67:cd:42:70:c1:3c:54:92:3e:c0:
cd:64:92:b7:f6:3b:36:78:15:bf:5a:50:4b:fc:17:
ab:2d:65:06:7c:78:aa:b0:bc:6f:c1:f4:7d:f0:a3:
3d:c8:8f:5b:cc:00:b9:32:67:ab:fc:84:ac:58:48:
57:13:67:cb:cd:a2:8d:f8:05:bf:e5:1a:a1:57:2b:
94:90:62:53:1e:99:93:72:5b:6c:73:8f:16:82:57:
5f:ac:fb:52:3f:02:ef:3e:9d:a3:3b:66:66:1d:6b:
0a:c0:5c:7f:a1:d4:fc:fd:f0:f0:69:8e:88:fa:46:
45:6c:bd:5a:e1:08:5e:9c:70:69:99:8a:5a:32:c9:
47:29:5a:25:1c:fd:8b:7b:91:2c:4b:fa:7e:2e:31:
aa:1f:f5:8a:ec:4e:8a:c7:ac:6a:f7:0d:89:c2:69:
a6:dd:58:53:b6:bb:02:78:22:f7:f9:45:85:1b:b5:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:21:12:8F:D9:90:E7:E4:E6:EA:C3:F7:E6:E2:65:3E:B5:FD:73
X509v3 Authority Key Identifier:
keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:af:71:ee:36:b6:f4:1a:7b:50:65:21:15:2c:4a:1e:34:db:
83:5c:da:b3:16:0d:c2:38:19:c8:5a:24:bf:ff:21:5b:73:83:
66:70:5e:e1:36:8e:d4:90:07:e0:15:92:78:30:a0:7b:0b:71:
e9:12:7f:2c:03:ce:8a:e0:a7:b1:0d:12:5a:3a:d4:fe:75:66:
06:fd:1e:ed:48:b4:fb:27:9a:aa:3c:f7:56:b9:a2:69:ca:ec:
96:96:01:27:ea:cc:0a:0a:fd:5e:a0:ab:48:67:0b:6c:66:dd:
0b:ab:6c:e6:26:c1:6a:99:f9:f0:fb:a7:56:25:44:89:53:be:
d3:6b:c5:d9:b7:db:ac:79:2b:65:ce:ec:c5:09:20:28:f1:95:
0d:a9:72:54:8b:c9:f8:27:73:0a:10:fb:0e:88:c1:8a:10:9c:
84:06:6c:e3:bd:a2:1f:69:db:a6:9c:fc:57:61:0a:1a:6d:31:
43:57:dc:76:80:23:9c:54:8f:4f:ad:46:cf:0f:6c:22:08:a9:
52:0e:a9:99:0e:e1:8a:b4:17:f1:a2:81:9c:70:e4:40:95:84:
d5:c2:40:d9:ed:4b:c7:78:84:ac:cc:35:6b:c4:00:35:50:1f:
ec:25:ae:91:c4:d4:3f:af:0c:2a:20:f8:3d:e3:21:d2:23:79:
da:36:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:56 2025 by rpki-client