This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
File: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json)
Hash identifier: waNJk34uYaxquC5Nf1NB+uLRUfxLtE4f38YL1HVLXv4=
Subject key identifier: CD:B7:80:B9:C3:FC:F8:BC:61:4A:33:ED:5D:49:60:A3:60:2A:AB:1D
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial: 44B872F0F03C3CF4DAB1A5B5F75221785BEB2116
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
Manifest number: 033C
Signing time: Mon 22 Dec 2025 21:06:00 +0000
Manifest this update: Mon 22 Dec 2025 21:01:00 +0000
Manifest next update: Wed 24 Dec 2025 01:02:00 +0000
Files and hashes: 1: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: D+JfApTpWiLBF2EExyPsxmcGR+DE6o53EaOqwejyZ0w=)
2: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=)
3: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 23:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b8:72:f0:f0:3c:3c:f4:da:b1:a5:b5:f7:52:21:78:5b:eb:21:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Validity
Not Before: Dec 22 21:01:00 2025 GMT
Not After : Dec 24 01:02:00 2025 GMT
Subject: CN=CDB780B9C3FCF8BC614A33ED5D4960A3602AAB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:f7:bc:21:21:77:60:9b:d3:7e:d6:ce:23:
0f:04:f0:24:ca:d2:bc:00:1e:d6:3e:33:b8:cc:79:
11:d4:fb:c4:81:46:16:38:48:d6:f6:f3:17:92:fb:
26:85:8d:16:1f:8b:91:be:f1:6d:7d:a7:28:49:40:
c0:66:56:50:54:1f:f7:95:9d:af:0d:bf:b3:3c:fd:
30:7f:7f:3a:8a:87:ce:7d:6e:e3:90:00:d2:d3:a1:
6d:84:3e:4c:7c:6b:4f:c3:87:a0:14:9a:75:2e:9c:
d3:4e:aa:3e:21:33:a1:a2:30:21:58:22:cc:db:73:
79:34:26:fc:a4:8a:69:5f:cf:a3:8f:d7:39:3f:47:
9a:e0:6b:44:ec:86:f6:cc:9f:66:f6:c9:c5:4f:a8:
e0:5e:a7:8b:a6:5c:78:29:18:b9:b7:a2:f7:30:79:
fc:a1:75:29:a1:6a:52:39:de:ad:c9:37:57:d4:6d:
67:59:93:5d:92:d5:cf:06:d0:52:04:34:b1:58:85:
72:cb:53:7b:a9:60:5c:33:0e:7f:74:93:41:70:0c:
41:fc:9c:49:64:82:48:3f:65:8b:b5:28:0b:73:f9:
ab:53:e0:96:cd:7c:33:48:9a:81:4b:22:6b:0c:68:
01:9b:50:1c:d1:f2:7b:d1:9a:8a:fd:e5:b4:39:35:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:80:B9:C3:FC:F8:BC:61:4A:33:ED:5D:49:60:A3:60:2A:AB:1D
X509v3 Authority Key Identifier:
keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:41:fa:54:54:2c:ac:32:12:20:3d:fc:a5:6f:e9:0d:cc:7c:
9d:c3:94:2e:a7:a5:a0:50:c6:68:6a:5d:c6:89:95:b5:b3:8a:
fc:6f:ed:37:88:f7:ea:bc:3a:0c:3d:be:e8:4a:84:9a:f1:1c:
2f:ad:9b:08:89:bf:f1:f9:99:ad:53:21:8f:59:3d:28:4f:ce:
f8:87:0b:90:53:56:6d:27:ee:b7:31:9a:dc:1b:04:76:64:d1:
a2:90:14:ec:cb:03:37:a6:fd:7c:db:f2:51:86:64:b6:3e:11:
84:87:8a:bc:00:33:9c:4c:75:db:b9:2f:66:1c:8e:99:d1:fb:
70:18:35:21:7e:11:af:e9:62:45:2e:ba:2c:aa:82:ad:4e:8c:
74:ec:a6:d9:c4:a1:b3:d6:7e:a1:6f:2d:3f:ee:c7:e4:e4:65:
26:44:85:c3:b4:eb:30:bc:ff:b1:3f:f9:19:7b:1b:a5:19:8a:
84:a8:e8:bb:da:af:bc:28:bd:9a:30:8a:9d:67:ba:cd:77:63:
d5:4b:bf:5f:cb:92:ee:14:bb:27:5d:08:e5:33:da:f9:68:7e:
eb:39:d6:bb:b8:d8:89:3a:41:3b:18:ba:78:63:77:6e:3f:d4:
ba:4d:f4:d1:ba:55:94:f8:27:a0:9b:4e:43:1a:5d:e5:87:4f:
da:0d:aa:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURLhy8PA8PPTasaW191IheFvrIRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC
Qzg1OThFMTAeFw0yNTEyMjIyMTAxMDBaFw0yNTEyMjQwMTAyMDBaMDMxMTAvBgNV
BAMTKENEQjc4MEI5QzNGQ0Y4QkM2MTRBMzNFRDVENDk2MEEzNjAyQUFCMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS/Pe8ISF3YJvTftbOIw8E8CTK
0rwAHtY+M7jMeRHU+8SBRhY4SNb28xeS+yaFjRYfi5G+8W19pyhJQMBmVlBUH/eV
na8Nv7M8/TB/fzqKh859buOQANLToW2EPkx8a0/Dh6AUmnUunNNOqj4hM6GiMCFY
Iszbc3k0Jvykimlfz6OP1zk/R5rga0TshvbMn2b2ycVPqOBep4umXHgpGLm3ovcw
efyhdSmhalI53q3JN1fUbWdZk12S1c8G0FIENLFYhXLLU3upYFwzDn90k0FwDEH8
nElkgkg/ZYu1KAtz+atT4JbNfDNImoFLImsMaAGbUBzR8nvRmor95bQ5NWE7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzbeAucP8+LxhSjPtXUlgo2Aqqx0wHwYDVR0j
BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0
OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC
RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0OTMvMC9G
RDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA30H6VFQsrDISID38pW/pDcx8ncOULqeloFDGaGpdxomVtbOK/G/tN4j36rw6
DD2+6EqEmvEcL62bCIm/8fmZrVMhj1k9KE/O+IcLkFNWbSfutzGa3BsEdmTRopAU
7MsDN6b9fNvyUYZktj4RhIeKvAAznEx127kvZhyOmdH7cBg1IX4Rr+liRS66LKqC
rU6MdOym2cShs9Z+oW8tP+7H5ORlJkSFw7TrMLz/sT/5GXsbpRmKhKjou9qvvCi9
mjCKnWe6zXdj1Uu/X8uS7hS7J10I5TPa+Wh+6znWu7jYiTpBOxi6eGN3bj/Uuk30
0bpVlPgnoJtOQxpd5YdP2g2qOg==
-----END CERTIFICATE-----
Generated at Tue Dec 23 00:32:09 2025 by rpki-client