This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
File: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft (raw, json)
Hash identifier: 5khVu0CZ0xMZdJGyGnm5lUrdgC9rFPSqfWeejDrmZRk=
Subject key identifier: F3:2F:9A:33:9D:80:9C:54:79:C6:78:36:48:E9:0C:1B:22:BB:E4:3A
Authority key identifier: B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8
Certificate issuer: /CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8
Certificate serial: 282740C2F5CF53CF5AF8B3FD388432D2D58F107B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
Manifest number: AF
Signing time: Mon 22 Dec 2025 12:01:58 +0000
Manifest this update: Mon 22 Dec 2025 11:56:58 +0000
Manifest next update: Tue 23 Dec 2025 15:06:58 +0000
Files and hashes: 1: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl (hash: 8Sn1xC3zjpu+oScaYMNw7HQqXRepHuljoC5zuGHyIRc=)
2: 34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (hash: k2yKuPlTrNYzg5JJTdJ8QcLnAn8AweZiAh2YLdu4w1Y=)
3: 323830343a356166343a3a2f33322d3438203d3e20323638383039.roa (hash: QBAUeqgtTN14lo+kiykhmV7DkBLft8F9Tpy/C+uXIoU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl
rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 12:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:27:40:c2:f5:cf:53:cf:5a:f8:b3:fd:38:84:32:d2:d5:8f:10:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8
Validity
Not Before: Dec 22 11:56:58 2025 GMT
Not After : Dec 23 15:06:58 2025 GMT
Subject: CN=F32F9A339D809C5479C6783648E90C1B22BBE43A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:6b:a7:f3:ea:66:73:0f:d2:7b:58:44:0a:
c5:f4:10:97:0e:90:9a:62:b3:41:30:04:c5:05:cb:
86:73:80:45:4e:24:99:53:ad:b5:87:3d:11:ac:46:
a5:4c:6e:84:9b:c1:f8:50:f3:2c:bc:00:d5:76:aa:
d7:0e:4b:d1:ff:a2:d1:93:01:3d:b5:8f:e4:cc:d5:
ef:98:2f:05:9e:3b:5d:de:73:90:19:aa:37:e7:38:
cd:00:41:5b:bd:c6:a0:1a:ce:43:18:65:78:db:bd:
e3:d7:a5:df:8f:3a:5f:fa:7f:e2:b8:6e:15:f6:0d:
3c:0b:71:a8:9d:ac:69:1d:c4:04:99:fd:92:0f:bc:
fc:45:08:66:e2:34:5f:6c:8f:8e:60:f6:8e:5b:59:
42:d9:e5:bf:a8:d0:86:b6:20:93:22:c7:e0:5b:93:
48:cc:e2:52:c3:9c:e2:af:a9:de:c2:65:c2:1a:ba:
0a:a9:1d:c8:25:b2:d9:0e:e4:79:a4:10:59:d3:5f:
e4:1d:0b:ed:8f:95:4d:6b:94:9c:e4:54:91:33:c0:
a3:8d:e1:53:1a:04:55:c9:e3:27:bb:1b:6e:45:56:
8d:bf:45:c8:6a:c4:72:96:f3:61:95:e0:71:e1:fd:
99:29:8b:18:5b:26:d5:c9:83:2d:77:c3:ed:fd:30:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:9A:33:9D:80:9C:54:79:C6:78:36:48:E9:0C:1B:22:BB:E4:3A
X509v3 Authority Key Identifier:
keyid:B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5b:21:7f:bd:ff:a4:ce:78:54:47:76:1a:ee:15:f0:b9:f2:
d4:ac:18:ec:0a:86:8b:92:39:b3:fe:5c:21:e6:6f:99:14:f9:
72:29:25:a4:10:86:48:d1:35:22:6e:22:a0:58:de:f4:48:ae:
5c:22:b1:68:2d:1a:14:53:87:26:3b:7f:c0:4e:f9:16:b0:ba:
37:9e:f5:8d:21:25:10:d6:1d:4b:54:8e:45:a9:47:37:3d:1c:
1e:c7:06:71:06:41:7e:b9:9b:2f:d4:e9:8a:f4:89:c6:c3:b6:
5a:4a:47:7e:6e:98:18:a9:4d:67:67:e9:7d:32:a1:fb:d3:9e:
37:e0:e3:d8:1b:e4:85:66:49:56:31:b2:09:32:07:7c:20:a8:
25:0e:8d:0f:a4:c2:7b:57:ed:42:be:d7:21:a0:ea:2c:8c:93:
80:5c:a4:3c:da:a6:45:e1:38:6a:a2:d6:d7:bd:97:aa:4d:31:
cb:fd:d3:1d:af:0c:2a:d8:7c:40:0d:b1:72:5c:d0:f3:6e:ca:
5c:24:a2:b5:77:3b:c3:25:73:3e:0b:61:b7:88:ba:8c:7a:e9:
78:2b:f2:0e:86:73:61:2a:44:5b:bc:ea:22:75:2a:3c:50:7d:
f6:94:a9:58:ae:9d:6e:d9:76:d4:cc:33:e4:e1:2e:c8:cb:ba:
8e:ea:72:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKCdAwvXPU89a+LP9OIQy0tWPEHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIzNThCQkVGRkY4MTBFNjBCRTA0MDRBRjZFQ0ZFN0Q5
RkEwMzJDODAeFw0yNTEyMjIxMTU2NThaFw0yNTEyMjMxNTA2NThaMDMxMTAvBgNV
BAMTKEYzMkY5QTMzOUQ4MDlDNTQ3OUM2NzgzNjQ4RTkwQzFCMjJCQkU0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6Gun8+pmcw/Se1hECsX0EJcO
kJpis0EwBMUFy4ZzgEVOJJlTrbWHPRGsRqVMboSbwfhQ8yy8ANV2qtcOS9H/otGT
AT21j+TM1e+YLwWeO13ec5AZqjfnOM0AQVu9xqAazkMYZXjbvePXpd+POl/6f+K4
bhX2DTwLcaidrGkdxASZ/ZIPvPxFCGbiNF9sj45g9o5bWULZ5b+o0Ia2IJMix+Bb
k0jM4lLDnOKvqd7CZcIaugqpHcglstkO5HmkEFnTX+QdC+2PlU1rlJzkVJEzwKON
4VMaBFXJ4ye7G25FVo2/RchqxHKW82GV4HHh/ZkpixhbJtXJgy13w+39MHWJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8y+aM52AnFR5xng2SOkMGyK75DowHwYDVR0j
BBgwFoAUsjWLvv/4EOYL4EBK9uz+fZ+gMsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1m
TW0vMC9CMjM1OEJCRUZGRjgxMEU2MEJFMDQwNEFGNkVDRkU3RDlGQTAzMkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMzU4QkJFRkZGODEwRTYw
QkUwNDA0QUY2RUNGRTdEOUZBMDMyQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1mTW0vMC9C
MjM1OEJCRUZGRjgxMEU2MEJFMDQwNEFGNkVDRkU3RDlGQTAzMkM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXVshf73/pM54VEd2Gu4V8Lny1KwY7AqGi5I5s/5cIeZvmRT5ciklpBCGSNE1
Im4ioFje9EiuXCKxaC0aFFOHJjt/wE75FrC6N571jSElENYdS1SORalHNz0cHscG
cQZBfrmbL9TpivSJxsO2WkpHfm6YGKlNZ2fpfTKh+9OeN+Dj2BvkhWZJVjGyCTIH
fCCoJQ6ND6TCe1ftQr7XIaDqLIyTgFykPNqmReE4aqLW172Xqk0xy/3THa8MKth8
QA2xclzQ827KXCSitXc7wyVzPgtht4i6jHrpeCvyDoZzYSpEW7zqInUqPFB99pSp
WK6dbtl21Mwz5OEuyMu6jupyCQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:59:39 2025 by rpki-client