This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
File: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft (raw, json)
Hash identifier: jd2BmxakHtUMkhMVB5swR3ybkTe+mVLTS6/WmmYJh1E=
Subject key identifier: 09:3A:77:13:35:80:DC:0E:D4:49:F9:15:61:4C:6E:7B:42:77:D0:EE
Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE
Certificate issuer: /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
Certificate serial: 01CFCC65ECE193A68892A5F3EB19C703E38540CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
Manifest number: 01DC
Signing time: Sat 06 Dec 2025 07:15:00 +0000
Manifest this update: Sat 06 Dec 2025 07:10:00 +0000
Manifest next update: Sun 07 Dec 2025 07:24:00 +0000
Files and hashes: 1: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl (hash: jXEaizI9oxlGlNLg2X3JHnHpB0UCqbemfXUSDSYfFOA=)
2: 323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (hash: mwYQa+I5Vdoi0oZVYD6n6DiKxyLbmDpdu/lURJLV0aA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl
rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cf:cc:65:ec:e1:93:a6:88:92:a5:f3:eb:19:c7:03:e3:85:40:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE
Validity
Not Before: Dec 6 07:10:00 2025 GMT
Not After : Dec 7 07:24:00 2025 GMT
Subject: CN=093A77133580DC0ED449F915614C6E7B4277D0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:18:b8:25:08:5f:3b:03:b6:eb:71:81:3a:
fb:27:6f:68:b4:82:4a:8a:49:33:4f:30:4c:d9:08:
17:95:3a:c6:56:1d:c6:3b:a4:65:01:97:8b:7e:d3:
09:92:4f:cc:44:5f:59:78:85:2e:93:47:2b:5d:6c:
b3:f0:68:45:2b:fe:0a:9e:fd:7f:dd:e7:87:63:9b:
2c:6f:67:ec:c1:28:c0:08:1c:21:f9:8d:41:32:a9:
2b:50:06:4f:3f:ff:e1:4d:ae:ab:62:65:34:6b:3b:
de:7e:09:b3:21:f9:dd:e5:a8:0c:fe:65:12:bf:47:
7c:ac:7e:eb:7f:49:29:17:2c:b3:da:70:f6:8c:91:
85:fe:74:97:77:d6:4c:45:70:73:37:1c:3b:46:3d:
05:48:7e:7e:75:7f:82:fc:6b:25:91:b3:d4:ca:46:
25:73:d3:31:f8:e6:ce:82:9f:e0:32:c8:6a:80:d6:
b9:19:51:a1:7f:15:2b:65:b2:9a:42:f9:69:ac:7f:
a5:56:db:0e:0f:9e:4a:f2:25:e0:f3:da:cf:36:38:
23:6e:ef:73:13:69:87:d7:77:84:b6:a0:b1:93:82:
32:f8:f1:8d:b7:9a:83:ca:ec:1a:25:70:6b:53:3c:
c0:be:ab:e6:3e:bf:a6:7b:35:ee:b4:05:39:2a:0c:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3A:77:13:35:80:DC:0E:D4:49:F9:15:61:4C:6E:7B:42:77:D0:EE
X509v3 Authority Key Identifier:
keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:ef:0e:20:57:f3:9f:5c:30:86:f3:6f:68:43:10:68:47:
55:5f:9a:13:73:9e:1c:59:c4:37:e0:07:cb:51:d1:13:1c:28:
f0:d2:b8:e6:ff:e0:bd:1b:10:2c:a6:db:8d:98:f7:c9:2c:4a:
a5:9e:1a:d8:ed:81:34:33:aa:9a:5e:65:32:14:4a:01:39:68:
8f:c3:34:e5:0a:b6:98:c1:65:62:bc:fb:7e:1e:14:36:42:fd:
dc:e7:c7:52:b9:ec:c9:42:c4:89:b3:d0:b4:70:d1:12:0c:8e:
ee:8e:00:ee:b6:bd:2d:9d:59:66:40:e1:3d:8c:cc:9a:c6:4b:
ae:0d:4a:a3:72:5d:5b:24:d7:97:12:10:ee:90:b7:ec:e8:76:
0d:9d:11:a5:37:70:e7:1d:5d:f9:a7:84:12:67:75:69:81:00:
35:97:1e:78:71:eb:7a:67:d9:ac:d1:4a:ad:9f:54:cf:7b:aa:
27:85:fe:0e:c5:9a:1d:8a:1e:97:bb:75:59:89:2e:88:af:da:
73:2d:4b:1b:1c:c8:57:15:5a:21:2c:31:47:8d:50:83:df:a4:
dd:88:02:e5:28:93:ee:82:79:c6:8d:51:08:07:33:d3:f3:88:
ec:cf:06:72:a5:ee:3e:c2:23:f2:aa:0b:68:b6:2b:cd:95:3d:
59:c2:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:21 2025 by rpki-client