This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
File: CDCA5D752465C82F87C02572646B39237CA981A8.mft (raw, json)
Hash identifier: J+1yKcARXz9naHEQ/LGWy8ChpaHn10CR/lZlTviYtN8=
Subject key identifier: F9:64:E3:A3:E3:DA:3D:6D:14:74:36:CD:03:8D:78:F1:2D:54:14:82
Authority key identifier: CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8
Certificate issuer: /CN=CDCA5D752465C82F87C02572646B39237CA981A8
Certificate serial: 116166CCB61D300AA244CFB121EE16E3161DB2F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
Manifest number: 16
Signing time: Sat 06 Dec 2025 17:38:19 +0000
Manifest this update: Sat 06 Dec 2025 17:33:19 +0000
Manifest next update: Sun 07 Dec 2025 18:48:19 +0000
Files and hashes: 1: 3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa (hash: okwdcryUzcO/1qhh0V46izFAeoY+dqkOxK9ae7wuOqg=)
2: 323830343a333561343a3a2f33322d3438203d3e20323636323938.roa (hash: B0BeiQ4Tyb9EsP+OH1dapS7buRu5QFW11gv4iICDJHU=)
3: CDCA5D752465C82F87C02572646B39237CA981A8.crl (hash: aJpXb3D1LJ4oG80ih0CU7OD3lFQd6fQpSU1geaNfZ8Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl
rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 18:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:61:66:cc:b6:1d:30:0a:a2:44:cf:b1:21:ee:16:e3:16:1d:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDCA5D752465C82F87C02572646B39237CA981A8
Validity
Not Before: Dec 6 17:33:19 2025 GMT
Not After : Dec 7 18:48:19 2025 GMT
Subject: CN=F964E3A3E3DA3D6D147436CD038D78F12D541482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:ae:8a:1a:d1:75:a7:5f:41:4b:ef:11:e5:
83:16:4b:54:9c:17:f6:22:ea:e3:39:49:66:a6:b2:
22:b0:41:f9:d5:30:c1:ef:88:f8:90:63:bd:d5:a1:
0d:4d:29:b1:56:d0:92:4b:72:f2:4f:63:f0:71:fe:
90:ad:7d:58:d6:7c:89:76:8e:33:0e:76:be:d9:2f:
92:ec:40:ab:dc:44:b3:a1:57:ef:1b:a3:fe:51:d2:
7a:7d:6e:fe:5a:f4:66:0c:9e:4c:52:07:f6:7c:fd:
de:2f:f5:c0:40:44:fb:1a:be:61:1e:80:a0:6f:12:
c3:e5:50:66:e0:f7:35:f1:4d:e8:b2:21:b2:24:2e:
eb:15:9a:71:f9:0b:3c:4b:1a:64:cb:01:77:f6:65:
e3:03:65:54:e0:41:d9:3a:4e:23:0d:6b:18:4e:51:
4e:b0:0e:a7:29:ba:53:6c:54:19:ae:5a:60:40:f7:
29:cb:8b:3b:4c:48:f0:84:e2:49:8b:c7:6a:51:1b:
f7:6b:89:42:82:ee:da:ee:46:94:35:a5:b1:ab:47:
78:8d:42:9b:eb:b2:66:97:76:46:48:46:54:8d:c9:
b7:b1:49:ff:9c:3d:e6:78:f9:60:69:8f:f8:a9:3a:
92:05:0a:f9:b4:49:d2:80:d7:45:dc:0c:47:90:4f:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:E3:A3:E3:DA:3D:6D:14:74:36:CD:03:8D:78:F1:2D:54:14:82
X509v3 Authority Key Identifier:
keyid:CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:a9:b7:be:a1:93:33:ab:a2:56:bb:d6:f9:3e:0a:d0:d6:
af:a0:67:3e:b3:c2:5f:54:2b:d9:d6:d9:5d:32:5d:be:ed:6b:
52:bf:a9:fb:49:a8:16:8e:7f:03:61:44:11:df:be:a2:f5:15:
88:ca:4c:1f:82:9a:f9:7f:84:38:7a:0a:a3:e4:3f:49:0d:9a:
b3:ab:84:7a:07:e2:af:6c:98:e2:fd:ed:39:00:cf:05:37:4d:
31:b3:21:98:5f:ed:73:01:35:7f:40:e6:5e:b8:09:5d:23:c4:
46:18:3c:6d:c4:8b:2e:04:a7:a5:cb:a3:34:08:51:38:f1:c8:
99:4d:db:84:63:b2:1d:e5:10:1f:c1:1c:24:4f:6e:ca:43:6e:
63:43:d7:70:af:32:db:f6:2e:0e:f4:26:a7:0d:ba:c5:54:87:
c3:d8:7e:6a:45:fe:76:22:26:3f:9f:e6:e9:d4:15:96:22:4b:
11:6b:93:ae:58:1c:d4:4c:00:33:9b:7c:05:5d:1a:ad:e0:cd:
75:b6:29:78:fa:d7:97:1e:88:ab:8d:32:4c:bf:cb:70:6f:62:
28:7a:52:7f:fc:18:c8:87:21:62:64:ba:fd:8d:44:93:c9:b0:
69:3d:21:93:72:68:4e:20:9c:d2:02:b0:06:f1:1b:42:7e:74:
d1:ce:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:46:51 2025 by rpki-client