This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
File: 17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft (raw, json)
Hash identifier: baIT1voLRWEsq/nUP5germnUefuW7QWUpITJaM9W14k=
Subject key identifier: 35:2B:B0:8B:27:40:9C:44:A4:37:31:96:DD:82:E5:AB:B2:D6:BF:D9
Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
Certificate issuer: /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Certificate serial: 130692B45CBC8C54CF4C3A8F16A1D7B84DFE2E35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
Manifest number: 22
Signing time: Fri 05 Dec 2025 11:08:07 +0000
Manifest this update: Fri 05 Dec 2025 11:03:07 +0000
Manifest next update: Sat 06 Dec 2025 15:07:07 +0000
Files and hashes: 1: 323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (hash: COWKDSQhuaAF4gJ0m/7anqtCjlNwnedaihs743KUS7A=)
2: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (hash: +itUekAudTfPqrbwZYglvWAvg+MEQn69yjFaPTNeb3Y=)
3: 17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl (hash: s5NQY4pNn36mbYKGkz8JCblhWu+VNbKQZ37qjr8ryz8=)
4: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (hash: 9ovo1Ce+Kis2wysgBAJ4x6E8k6WfsbCS+XtsnXzHmKQ=)
5: 323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (hash: 8nnQ2cSDGENSqOLrTybnBDhnfQN9OkhA6Did4soByeA=)
6: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (hash: saP2raSwjjUMU6Gw2e967qD4bKy9XfiBZPNhMImeILc=)
7: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (hash: OiITny8zStKi99clxFBl95eHbHhrZOZx2Hm59TUh/J8=)
8: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (hash: VD96TvPCp3SeL42OsYoY5+GO1kpY5AFXvlXy6dpyetY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 15:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:06:92:b4:5c:bc:8c:54:cf:4c:3a:8f:16:a1:d7:b8:4d:fe:2e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Validity
Not Before: Dec 5 11:03:07 2025 GMT
Not After : Dec 6 15:07:07 2025 GMT
Subject: CN=352BB08B27409C44A4373196DD82E5ABB2D6BFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:9d:22:84:5f:5b:92:b0:a6:94:9f:51:cc:
1d:64:b4:06:04:cd:69:b2:44:a1:2a:8e:a8:50:7e:
8d:f2:8a:80:49:a0:ab:00:56:9f:95:22:e0:7e:49:
b5:14:ea:a4:bf:bb:b7:27:b2:38:17:ae:35:8e:42:
c2:01:b5:ed:b7:92:d0:49:42:17:31:60:72:04:87:
a4:46:b9:a1:dd:55:92:31:10:14:fb:1c:f3:56:cf:
fa:b4:1a:4c:14:e1:30:4d:93:e0:eb:9d:4c:0d:5b:
8c:08:e8:c2:42:fa:bb:78:82:09:dc:46:27:b9:0a:
dd:1a:bb:fa:b9:af:54:37:c2:a1:73:4f:a6:91:91:
d4:bd:61:9f:28:60:38:83:b8:84:ed:c6:3d:b8:fc:
50:00:e4:6e:38:b9:ac:e1:55:57:ed:16:9d:94:55:
b0:f9:cb:e7:cb:8a:68:5a:51:69:12:85:6f:6e:62:
6c:3f:1f:57:4f:f8:8f:2c:9f:1e:2b:50:ae:95:c9:
9e:d7:9e:ec:8f:69:58:cd:fb:eb:ca:5b:ce:44:25:
44:61:9b:bc:a6:a7:1d:bf:47:c0:2b:93:5e:20:41:
b5:e8:c2:6d:0a:7e:59:61:47:4a:b3:8c:1f:55:41:
b9:13:ad:a7:c2:9a:35:09:3c:1f:d9:2f:2d:18:c9:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:B0:8B:27:40:9C:44:A4:37:31:96:DD:82:E5:AB:B2:D6:BF:D9
X509v3 Authority Key Identifier:
keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:76:16:70:b2:cb:ed:d8:09:9a:7b:1e:dd:e0:cc:b5:29:
78:4a:1f:2d:a6:70:32:76:4a:72:b8:92:ef:04:7f:b5:ec:1d:
f3:21:d1:33:8f:67:60:b8:e3:9d:c5:b4:49:33:a1:16:0e:f4:
0f:70:f9:7b:67:af:02:76:e5:3c:92:c4:e6:8b:dd:90:04:78:
80:66:f3:51:1a:f9:dc:fb:67:08:34:68:4c:08:b0:09:08:aa:
20:fb:03:97:fc:94:58:02:b7:db:26:09:de:79:20:d7:93:2b:
30:01:48:32:8a:87:85:7a:44:e3:23:85:10:90:f9:bc:23:95:
a8:08:86:7c:6a:fd:27:63:f3:1f:de:88:2a:8e:30:25:18:66:
ca:72:05:25:bb:df:2e:c6:8d:de:a4:12:09:d7:07:b3:8a:48:
f3:09:3a:d5:97:13:37:67:37:a0:9f:c9:40:6a:90:5b:ee:11:
4e:bd:bc:e3:ee:42:89:87:4b:4c:2b:e6:74:4f:8a:26:55:80:
d1:7d:44:05:d1:14:e4:e1:8d:08:33:c4:2b:06:61:45:c2:0c:
41:99:32:32:91:58:e1:fb:28:87:c7:38:2a:2c:80:f4:bd:6b:
c1:16:ae:c7:95:49:7e:a4:4a:05:e1:fc:65:c4:ec:c2:3a:02:
6a:fd:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:02:11 2025 by rpki-client