This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
File: D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft (raw, json)
Hash identifier: JQyar8Se4YTZXxTvjFeDDz3g2jQkh8Wot4tURwNOiAc=
Subject key identifier: 17:FF:C3:D0:76:61:BF:AF:A5:D3:04:05:B4:38:96:3F:47:E2:F2:E2
Authority key identifier: D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC
Certificate issuer: /CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC
Certificate serial: 368F2CD6B58D421CA3C1167CE9EB20AD3B30E8FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
Manifest number: 89
Signing time: Sat 06 Dec 2025 12:41:58 +0000
Manifest this update: Sat 06 Dec 2025 12:36:58 +0000
Manifest next update: Sun 07 Dec 2025 15:32:58 +0000
Files and hashes: 1: 323830343a393138383a3a2f33322d3438203d3e20323734363437.roa (hash: Bni/gewlTpvsi/d7y06XdboHoggaWC2Q8LtTu0dJx4Y=)
2: D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl (hash: 0cb7bmF0ZNEXDuyLGcXtDZ9Q55mgdkCNosdDxLOOA64=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl
rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 15:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8f:2c:d6:b5:8d:42:1c:a3:c1:16:7c:e9:eb:20:ad:3b:30:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC
Validity
Not Before: Dec 6 12:36:58 2025 GMT
Not After : Dec 7 15:32:58 2025 GMT
Subject: CN=17FFC3D07661BFAFA5D30405B438963F47E2F2E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:c2:71:d6:1b:f6:92:c3:0a:ba:20:51:f1:
34:9c:b8:d6:0b:00:71:f8:f8:c0:62:90:2e:e1:32:
8e:8c:25:1b:a4:95:87:be:0d:08:89:cb:a6:91:fe:
a4:aa:4e:27:18:0b:59:ff:f8:e2:e8:4b:c2:b8:bb:
1c:4a:4b:da:25:b4:a3:70:ea:3c:b7:09:f9:d4:3c:
46:a8:4c:55:26:59:b9:03:a9:06:5e:ce:2a:78:be:
ec:a0:7e:60:f0:06:4a:f6:87:3e:f1:80:8d:08:54:
37:e0:da:ef:52:48:ca:fd:e0:37:1e:e1:6f:2d:7b:
83:2e:e3:ee:97:81:0f:0a:25:1a:10:3e:1e:63:b4:
e4:a2:d5:f6:ad:94:b3:00:b4:af:62:63:cd:26:7b:
37:fb:a6:f3:90:71:fb:6d:a0:94:44:cb:1b:3a:40:
04:88:60:4a:d6:9c:c7:08:ed:9c:e9:e6:90:ba:e8:
ba:c5:8d:49:9d:e8:75:e1:e1:ac:cd:6b:36:f2:a0:
98:ab:1c:c8:8c:60:84:ac:bf:80:f5:fb:b1:77:4c:
91:07:9d:1e:28:78:58:53:3f:35:c3:6a:26:69:30:
71:71:60:35:5e:0a:fb:5f:62:d6:61:ec:69:21:cd:
7e:98:25:42:96:e9:85:e1:01:a3:bf:1d:d5:25:d1:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:C3:D0:76:61:BF:AF:A5:D3:04:05:B4:38:96:3F:47:E2:F2:E2
X509v3 Authority Key Identifier:
keyid:D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:76:89:9a:55:03:d6:bc:05:e2:e0:08:4a:69:9a:59:e4:80:
6c:91:cb:18:b1:56:2d:ff:60:4c:62:82:57:66:e5:4c:24:70:
a5:f5:b7:55:da:13:67:64:c9:8f:fa:62:1b:15:9e:a0:71:90:
bd:e6:e4:12:f7:c5:47:55:a0:df:f2:09:d1:0b:ad:0e:c4:68:
95:8f:6a:61:1a:cd:2e:c2:be:ab:ee:3e:e2:1a:6b:81:7c:e9:
df:b1:b7:1a:05:8a:40:34:6b:02:9c:cb:03:46:cf:98:90:98:
f8:97:b8:c5:1d:bf:51:d5:3f:5b:35:70:09:a2:3a:db:a2:82:
06:c7:9e:a3:39:67:2f:ac:f9:61:6b:fc:a9:5c:37:9f:94:42:
61:c1:e2:dc:f6:76:ba:a0:2a:91:77:15:42:3e:6a:94:a8:19:
44:7a:98:3c:99:48:95:ba:1c:fd:28:65:b9:d8:69:08:5e:c5:
5b:8b:fd:95:06:bf:73:9a:ec:72:08:62:98:0c:d1:98:73:ae:
f8:12:d0:9b:8d:aa:fe:a8:2a:b7:93:9e:c3:fd:27:58:e3:e6:
33:b6:68:22:1a:29:57:01:6b:59:7a:54:21:44:de:32:2c:77:
a1:b5:7b:ef:b1:3f:32:d6:2b:47:17:5f:7e:dd:02:48:94:e4:
36:61:58:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNo8s1rWNQhyjwRZ86esgrTsw6P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBMDA3RjE3MjlDRjc3RTU3OTA1NEM0OEY2MUIxREQ3
QTY2NTJBQzAeFw0yNTEyMDYxMjM2NThaFw0yNTEyMDcxNTMyNThaMDMxMTAvBgNV
BAMTKDE3RkZDM0QwNzY2MUJGQUZBNUQzMDQwNUI0Mzg5NjNGNDdFMkYyRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JsJx1hv2ksMKuiBR8TScuNYL
AHH4+MBikC7hMo6MJRuklYe+DQiJy6aR/qSqTicYC1n/+OLoS8K4uxxKS9oltKNw
6jy3CfnUPEaoTFUmWbkDqQZezip4vuygfmDwBkr2hz7xgI0IVDfg2u9SSMr94Dce
4W8te4Mu4+6XgQ8KJRoQPh5jtOSi1fatlLMAtK9iY80mezf7pvOQcfttoJREyxs6
QASIYErWnMcI7Zzp5pC66LrFjUmd6HXh4azNazbyoJirHMiMYISsv4D1+7F3TJEH
nR4oeFhTPzXDaiZpMHFxYDVeCvtfYtZh7GkhzX6YJUKW6YXhAaO/HdUl0aZhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUF//D0HZhv6+l0wQFtDiWP0fi8uIwHwYDVR0j
BBgwFoAU1aAH8XKc935XkFTEj2Gx3XpmUqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6
akcvMC9ENUEwMDdGMTcyOUNGNzdFNTc5MDU0QzQ4RjYxQjFERDdBNjY1MkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QTAwN0YxNzI5Q0Y3N0U1
NzkwNTRDNDhGNjFCMUREN0E2NjUyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6akcvMC9E
NUEwMDdGMTcyOUNGNzdFNTc5MDU0QzQ4RjYxQjFERDdBNjY1MkFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALXaJmlUD1rwF4uAISmmaWeSAbJHLGLFWLf9gTGKCV2blTCRwpfW3VdoTZ2TJ
j/piGxWeoHGQvebkEvfFR1Wg3/IJ0QutDsRolY9qYRrNLsK+q+4+4hprgXzp37G3
GgWKQDRrApzLA0bPmJCY+Je4xR2/UdU/WzVwCaI626KCBseeozlnL6z5YWv8qVw3
n5RCYcHi3PZ2uqAqkXcVQj5qlKgZRHqYPJlIlboc/ShludhpCF7FW4v9lQa/c5rs
cghimAzRmHOu+BLQm42q/qgqt5Oew/0nWOPmM7ZoIhopVwFrWXpUIUTeMix3obV7
77E/MtYrRxdfft0CSJTkNmFY0Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:56 2025 by rpki-client