This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier: CblLYRI7AjpgOcbrscpdNCKfVS6JqyLaVN3qtOgho9U=
Subject key identifier: CC:EF:B3:66:4F:4A:14:9E:01:0B:2D:BB:99:E6:FD:F3:6F:5C:2F:9A
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer: /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial: 09A47147FA77FA0420631C4945EC8AEF505D92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number: 03B1
Signing time: Mon 22 Dec 2025 20:50:00 +0000
Manifest this update: Mon 22 Dec 2025 20:45:00 +0000
Manifest next update: Tue 23 Dec 2025 20:50:00 +0000
Files and hashes: 1: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=)
2: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=)
3: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=)
4: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: 0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=)
5: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=)
6: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: qrPMtvBbPTMZ/uHfg8bVLsA3fUfQBIIP996oqCPBgY4=)
7: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 20:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a4:71:47:fa:77:fa:04:20:63:1c:49:45:ec:8a:ef:50:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Validity
Not Before: Dec 22 20:45:00 2025 GMT
Not After : Dec 23 20:50:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:13:18:75:6a:36:12:34:89:08:be:15:dc:
d1:bb:71:24:05:00:3a:ef:07:cf:8c:18:06:b4:e6:
a8:54:1b:e6:f9:8c:f5:68:02:e9:e9:1a:03:be:23:
b2:3e:ed:15:1a:22:38:61:3d:4a:e8:6c:02:ab:3b:
2e:6b:35:9e:b0:7d:dd:51:1b:84:af:0c:5b:b3:0b:
37:76:12:50:82:57:ca:c3:22:5f:37:be:1a:23:8e:
51:65:5f:4d:b9:a8:a4:c2:7b:71:4e:ec:62:ba:86:
23:dc:0d:61:2c:11:1d:73:90:4b:78:64:00:a3:96:
d0:c2:2f:3c:ad:d5:2f:82:ed:bd:a5:4a:12:3e:15:
12:51:e6:6f:b7:27:ea:77:7b:26:fa:c2:d1:56:8d:
e4:c5:22:ce:ed:87:c0:57:5e:0e:4f:96:d7:ce:7f:
98:d6:e8:75:8c:89:0a:8c:24:b9:64:6c:a4:9d:f6:
ef:cc:9a:be:b1:d3:31:ed:c7:25:21:9b:54:66:08:
68:96:d9:a3:9d:82:55:e6:76:88:4f:2d:7f:54:d2:
ee:b2:a7:6d:df:de:d1:c5:d5:c6:83:59:16:0d:87:
d1:34:b9:a7:dc:94:7d:76:a1:e8:bc:0e:86:f8:42:
42:7b:18:d8:20:52:0d:3c:69:00:4f:2b:7a:f9:d9:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:B3:66:4F:4A:14:9E:01:0B:2D:BB:99:E6:FD:F3:6F:5C:2F:9A
X509v3 Authority Key Identifier:
keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:42:0d:21:f2:25:9b:c0:20:00:83:ad:2b:88:34:1b:f2:2d:
ca:1c:7a:a7:d7:e2:1c:be:ae:db:cb:3a:00:bf:94:ae:51:68:
60:6c:f4:a5:90:29:26:81:bd:fc:06:11:a7:87:8b:ef:cb:cd:
12:c3:cb:45:74:d3:3d:01:26:ed:80:59:4b:3e:70:d6:52:e0:
0d:ed:58:26:c3:61:09:95:57:c0:0b:66:47:e6:4f:8a:88:d5:
20:68:88:37:58:f3:4d:7c:50:65:30:33:d5:67:55:55:d4:58:
b7:52:df:53:f2:ea:34:71:36:df:9b:3a:bd:20:24:32:ab:72:
df:74:53:20:9e:b0:e9:5b:19:35:82:93:72:bc:29:d7:56:d4:
fb:40:c5:64:21:3b:9f:27:0e:e0:02:a2:b5:26:cc:24:37:54:
80:ca:9e:ed:b8:99:a5:33:d5:90:b8:a7:b8:fc:0b:4e:8e:a5:
6d:13:1c:d7:91:48:0d:4d:53:e8:93:b2:43:4a:b5:cc:c4:3a:
5e:b7:8e:f5:f3:8a:e6:3c:7a:a8:f0:43:b0:0c:af:e3:ed:b6:
4c:97:a3:37:21:27:f1:f9:87:8c:91:21:67:2e:f3:59:11:4d:
28:b7:f7:e1:57:b8:a1:a1:cc:b0:39:b7:16:c5:47:ba:ae:75:
c1:5a:8b:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Dec 23 12:39:35 2025 by rpki-client