This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
File: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft (raw, json)
Hash identifier: lFGG69pb0ctbzQW9rinX49r+UjlxhcsnWWDegrphZ1E=
Subject key identifier: 2F:E9:3B:B9:EC:43:55:A5:BA:B4:25:5D:71:FE:FF:5B:87:B2:44:A1
Authority key identifier: B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8
Certificate issuer: /CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8
Certificate serial: 78BD307847AAD11255910E744E4715F7BCC54AF5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
Manifest number: AE
Signing time: Sun 21 Dec 2025 17:41:09 +0000
Manifest this update: Sun 21 Dec 2025 17:36:09 +0000
Manifest next update: Mon 22 Dec 2025 19:57:09 +0000
Files and hashes: 1: 323830343a356166343a3a2f33322d3438203d3e20323638383039.roa (hash: QBAUeqgtTN14lo+kiykhmV7DkBLft8F9Tpy/C+uXIoU=)
2: 34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (hash: k2yKuPlTrNYzg5JJTdJ8QcLnAn8AweZiAh2YLdu4w1Y=)
3: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl (hash: J8ZKYk01+M7mR2ZEc8U0TFqFNjxVhs+0zKNfG9oaG9Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl
rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 19:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bd:30:78:47:aa:d1:12:55:91:0e:74:4e:47:15:f7:bc:c5:4a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8
Validity
Not Before: Dec 21 17:36:09 2025 GMT
Not After : Dec 22 19:57:09 2025 GMT
Subject: CN=2FE93BB9EC4355A5BAB4255D71FEFF5B87B244A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:0e:cf:b5:97:95:0d:32:74:35:b0:59:f1:
9c:81:cc:78:60:8f:cd:1e:81:83:74:a9:64:f7:66:
91:a5:c2:26:82:df:02:51:29:f0:cd:a6:c5:df:49:
ab:5c:b3:78:ed:d9:5d:0d:74:0e:77:b6:77:3e:e6:
7e:5f:09:2f:0a:20:34:33:61:6d:85:60:d3:db:d2:
5c:3f:34:a0:44:a0:05:4f:02:9f:f4:d2:4c:5a:85:
e9:7a:d4:0c:95:3e:66:90:9c:63:e1:92:cb:dd:79:
c9:4c:e4:ad:d2:c2:a4:0d:66:df:96:9a:8a:2b:41:
07:74:47:ed:df:a8:18:33:36:a9:88:14:5b:99:39:
eb:71:e5:f9:a8:18:73:5d:37:2d:18:9a:13:68:b0:
24:5b:7b:d8:ae:1e:2b:71:ef:3c:e5:36:ab:b9:e9:
e4:46:06:b8:38:39:d3:76:07:a2:d1:d3:ff:b4:ea:
df:b5:f4:a9:46:6b:82:51:01:b0:80:fb:fb:25:bb:
47:68:1f:a5:14:61:80:a4:c0:ef:35:88:1a:5a:e8:
23:14:03:54:5a:66:a1:6a:13:61:ef:b5:41:27:96:
a5:f3:81:7d:bb:09:bb:95:5f:86:11:93:ac:b8:de:
c0:ea:e6:c4:67:58:26:55:2d:46:b1:56:af:2c:dc:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:3B:B9:EC:43:55:A5:BA:B4:25:5D:71:FE:FF:5B:87:B2:44:A1
X509v3 Authority Key Identifier:
keyid:B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:71:0d:65:ed:9f:9f:a3:7a:1f:f2:22:0b:6a:66:27:e6:44:
93:a8:57:08:62:22:a9:a7:9d:23:bd:6c:c6:b4:07:5b:5c:d3:
d3:99:c0:c9:c6:43:98:17:0d:3b:36:c7:ca:75:c1:61:61:d4:
73:0d:cf:46:8b:99:7e:9d:80:17:41:ca:93:39:95:b9:56:9f:
cd:ca:b1:e0:e7:67:fa:1a:1b:a2:12:4b:96:84:73:d5:34:59:
7f:d0:36:00:6b:ff:60:84:ef:66:91:11:d5:49:0a:20:9e:08:
83:b9:a9:10:33:0d:f6:9d:11:e5:f6:e6:9e:14:73:8a:eb:f1:
78:95:a2:0e:70:96:78:be:c4:9f:41:11:2e:fb:05:9a:b0:83:
6e:3d:a3:f3:93:71:be:9c:a2:9f:79:35:5b:e4:35:1b:6b:16:
6f:55:a6:8e:68:02:27:6a:e6:5a:37:b7:94:a5:33:b7:74:10:
cd:31:6b:e2:34:0b:b7:57:3b:3e:7a:35:1b:48:86:e1:99:c9:
44:19:ec:85:ab:16:a7:ea:82:1f:5d:be:34:bc:15:74:9c:24:
8c:a7:7d:fc:07:f9:76:54:8b:b5:f0:b1:b4:3e:6a:01:b7:72:
c7:aa:ff:ae:6a:59:c6:57:36:1e:a7:5d:d0:e2:fc:d5:a2:0a:
bd:de:71:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeL0weEeq0RJVkQ50TkcV97zFSvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIzNThCQkVGRkY4MTBFNjBCRTA0MDRBRjZFQ0ZFN0Q5
RkEwMzJDODAeFw0yNTEyMjExNzM2MDlaFw0yNTEyMjIxOTU3MDlaMDMxMTAvBgNV
BAMTKDJGRTkzQkI5RUM0MzU1QTVCQUI0MjU1RDcxRkVGRjVCODdCMjQ0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChow7PtZeVDTJ0NbBZ8ZyBzHhg
j80egYN0qWT3ZpGlwiaC3wJRKfDNpsXfSatcs3jt2V0NdA53tnc+5n5fCS8KIDQz
YW2FYNPb0lw/NKBEoAVPAp/00kxahel61AyVPmaQnGPhksvdeclM5K3SwqQNZt+W
moorQQd0R+3fqBgzNqmIFFuZOetx5fmoGHNdNy0YmhNosCRbe9iuHitx7zzlNqu5
6eRGBrg4OdN2B6LR0/+06t+19KlGa4JRAbCA+/slu0doH6UUYYCkwO81iBpa6CMU
A1RaZqFqE2HvtUEnlqXzgX27CbuVX4YRk6y43sDq5sRnWCZVLUaxVq8s3MbnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUL+k7uexDVaW6tCVdcf7/W4eyRKEwHwYDVR0j
BBgwFoAUsjWLvv/4EOYL4EBK9uz+fZ+gMsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1m
TW0vMC9CMjM1OEJCRUZGRjgxMEU2MEJFMDQwNEFGNkVDRkU3RDlGQTAzMkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMzU4QkJFRkZGODEwRTYw
QkUwNDA0QUY2RUNGRTdEOUZBMDMyQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1mTW0vMC9C
MjM1OEJCRUZGRjgxMEU2MEJFMDQwNEFGNkVDRkU3RDlGQTAzMkM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS3ENZe2fn6N6H/IiC2pmJ+ZEk6hXCGIiqaedI71sxrQHW1zT05nAycZDmBcN
OzbHynXBYWHUcw3PRouZfp2AF0HKkzmVuVafzcqx4Odn+hobohJLloRz1TRZf9A2
AGv/YITvZpER1UkKIJ4Ig7mpEDMN9p0R5fbmnhRziuvxeJWiDnCWeL7En0ERLvsF
mrCDbj2j85Nxvpyin3k1W+Q1G2sWb1WmjmgCJ2rmWje3lKUzt3QQzTFr4jQLt1c7
Pno1G0iG4ZnJRBnshasWp+qCH12+NLwVdJwkjKd9/Af5dlSLtfCxtD5qAbdyx6r/
rmpZxlc2Hqdd0OL81aIKvd5xbA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 11:33:06 2025 by rpki-client