This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.mft
File: 188458C338DCC3C545AE6A4EE982512CBC800EF6.mft (raw, json)
Hash identifier: xPYnYJ2R/LNRqYyQS8XmT+SNNa1DER+0U2uyrQSfJBM=
Subject key identifier: 38:D0:FA:AC:51:09:20:F3:4B:86:65:2D:76:40:B9:EE:D2:73:3E:67
Authority key identifier: 18:84:58:C3:38:DC:C3:C5:45:AE:6A:4E:E9:82:51:2C:BC:80:0E:F6
Certificate issuer: /CN=188458C338DCC3C545AE6A4EE982512CBC800EF6
Certificate serial: 76A134ED0FFC9814710CA8E02FDD2508702DFB37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188458C338DCC3C545AE6A4EE982512CBC800EF6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.mft
Manifest number: B8
Signing time: Sat 06 Dec 2025 10:13:09 +0000
Manifest this update: Sat 06 Dec 2025 10:08:09 +0000
Manifest next update: Sun 07 Dec 2025 12:01:09 +0000
Files and hashes: 1: 323830343a383231633a3a2f33322d3438203d3e20323732343939.roa (hash: ALEsa+QK8A5t+9dLpZM9xpkdSh+DBMEQqaU1CI6pAlE=)
2: 188458C338DCC3C545AE6A4EE982512CBC800EF6.crl (hash: 9h/Zlm5j9YsW5e+pdNy7WIPIR5HADiYNz+POVwg6PBo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.crl
rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188458C338DCC3C545AE6A4EE982512CBC800EF6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a1:34:ed:0f:fc:98:14:71:0c:a8:e0:2f:dd:25:08:70:2d:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188458C338DCC3C545AE6A4EE982512CBC800EF6
Validity
Not Before: Dec 6 10:08:09 2025 GMT
Not After : Dec 7 12:01:09 2025 GMT
Subject: CN=38D0FAAC510920F34B86652D7640B9EED2733E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:8f:d0:d0:a3:b9:0a:04:0a:1e:65:07:f4:
8f:4a:50:af:82:05:50:9f:e5:a8:ac:f1:bf:0d:c8:
30:42:79:6c:3a:90:50:61:c0:0d:4a:31:93:56:20:
b2:5e:ca:68:4e:e4:c4:78:9d:be:b3:5d:21:ea:c8:
62:85:87:cd:32:55:9b:e8:f7:c7:64:56:16:fc:24:
52:e7:fa:f9:c7:ff:cb:e1:64:ea:06:cb:73:99:6a:
e3:1a:5d:5e:96:4a:10:24:60:5e:82:0f:06:ad:21:
de:62:1e:94:18:de:0b:44:a7:95:81:d5:df:5b:e9:
c7:63:5e:e7:05:87:c1:00:9e:27:15:48:10:ef:a0:
d6:49:74:05:51:b3:e1:73:3c:a1:35:cf:59:e8:98:
47:e4:51:85:f4:43:26:c6:2a:e6:6a:be:e7:d7:c5:
c5:22:34:66:54:d8:64:d6:86:bc:10:5f:45:d6:03:
a5:f3:35:8b:a1:85:38:b9:fb:f7:9e:a7:2d:04:1c:
4d:c6:e1:e0:dd:f3:d3:e8:41:93:72:65:a9:d8:7f:
f1:26:84:53:a9:e8:11:1a:25:84:8e:73:7f:d2:02:
cf:b3:5a:9c:67:ee:1a:aa:f9:36:25:74:bd:60:b3:
24:c5:58:2f:5c:35:d8:e9:55:f2:44:b4:5f:07:e7:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:FA:AC:51:09:20:F3:4B:86:65:2D:76:40:B9:EE:D2:73:3E:67
X509v3 Authority Key Identifier:
keyid:18:84:58:C3:38:DC:C3:C5:45:AE:6A:4E:E9:82:51:2C:BC:80:0E:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188458C338DCC3C545AE6A4EE982512CBC800EF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:b2:52:c3:05:05:54:07:ec:76:3f:16:87:af:21:fa:2e:
46:dc:93:9f:53:9c:ea:2c:82:a0:5b:21:d2:b8:f6:52:5f:07:
1e:2d:9a:d2:77:ee:8c:e4:ec:31:2a:c5:43:85:43:6f:88:b4:
10:14:eb:f2:6f:a5:d8:21:24:69:77:78:0e:1e:82:c2:94:bd:
f3:2f:6b:35:82:14:f5:24:43:c9:60:9c:1e:71:b8:93:77:bf:
77:d9:fe:c6:31:3c:c7:6f:10:bc:2e:ce:b2:a7:99:d1:3b:00:
c1:90:11:fd:c4:b1:09:31:8e:8c:94:91:9f:b4:71:d1:a5:65:
b1:a1:ad:c9:cd:77:47:d2:61:dd:d8:f2:3e:97:57:d0:0b:80:
db:aa:33:11:dd:6a:44:30:85:f6:d1:c1:67:7a:45:d3:54:bb:
62:70:e1:a2:44:b6:a9:6b:05:bf:35:7c:86:2e:da:4c:84:e1:
d5:2b:68:ee:9a:e5:6b:2f:61:a5:71:66:20:05:9b:eb:fe:5d:
54:ae:5b:b6:44:22:91:09:70:1e:b7:55:92:8a:fc:25:a8:4e:
26:54:aa:77:56:ee:15:fe:84:07:59:00:a1:b5:12:66:9f:2b:
09:d9:70:df:a7:da:4b:e8:55:ac:45:9e:e9:82:29:b6:cd:3d:
cf:c4:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:41:38 2025 by rpki-client