This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
File: 43AAB70BF5D486443B357EA3923B581F0075D23A.mft (raw, json)
Hash identifier: 9yKdLywnjbs1N/W0t+WY/TXDSfFoLu5TkI809/3fpEs=
Subject key identifier: F7:D1:EF:9A:9A:DF:B3:25:06:D9:E6:BE:B1:05:57:15:3B:B7:D6:4D
Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A
Certificate issuer: /CN=43AAB70BF5D486443B357EA3923B581F0075D23A
Certificate serial: 40835F7622AB3B17E289153601C1DDF81B5C81EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
Manifest number: 24
Signing time: Fri 19 Dec 2025 10:49:12 +0000
Manifest this update: Fri 19 Dec 2025 10:44:12 +0000
Manifest next update: Sat 20 Dec 2025 13:04:12 +0000
Files and hashes: 1: 43AAB70BF5D486443B357EA3923B581F0075D23A.crl (hash: 7FCa9ULORx7kxS6/0fjlxCbpAtozYYu5CboJaCRjpYk=)
2: 323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (hash: QLb7skkEmJQF17WGWiLpN5j3LMyzuGsNwQnP4qVNzRQ=)
3: 3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa (hash: H9dv+DeRya1w3P02U1BRKsbDqLWpgPUpIvV9Tk+fnFM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl
rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 13:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:83:5f:76:22:ab:3b:17:e2:89:15:36:01:c1:dd:f8:1b:5c:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A
Validity
Not Before: Dec 19 10:44:12 2025 GMT
Not After : Dec 20 13:04:12 2025 GMT
Subject: CN=F7D1EF9A9ADFB32506D9E6BEB10557153BB7D64D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:44:27:2f:86:76:e3:60:0f:62:38:6e:a4:
59:6e:07:45:25:cc:f0:b3:06:e9:14:b1:f6:38:d8:
80:a3:ef:8b:91:3b:52:de:f6:8a:72:08:18:1c:c0:
c6:f3:2a:7d:d8:b7:02:97:fe:f5:34:93:7c:e4:df:
d2:4d:7b:93:02:e9:bd:8b:dc:5e:11:63:c0:ce:9c:
69:df:56:14:9e:2d:c5:f7:f6:f7:cd:87:3f:7c:0b:
37:8a:e5:8a:2c:36:bb:c7:1a:a4:60:c4:93:17:a5:
cc:5d:ae:a4:f9:10:0f:d3:b3:40:75:c6:68:d5:9e:
87:04:36:6e:6f:72:49:70:71:e6:ac:a8:25:6b:1a:
af:77:3b:2e:df:78:1a:24:0a:ac:3d:ba:eb:9a:f9:
c5:59:f7:d4:13:b3:87:79:b0:b7:2e:33:3a:c6:9b:
03:a3:c6:24:1c:4c:e3:39:7f:0c:58:90:bf:b1:31:
06:50:15:ba:6b:ad:96:9c:3d:b7:2f:57:0f:bc:aa:
8a:b0:16:b2:56:e8:b0:92:07:e2:2f:be:04:f6:17:
40:b9:50:47:16:d3:7e:86:f4:92:c0:0b:08:e8:14:
67:3e:97:54:13:07:ab:e3:c5:5c:8a:97:26:81:97:
8c:f9:a2:70:1d:8a:ad:cb:69:33:5c:81:37:3d:ee:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D1:EF:9A:9A:DF:B3:25:06:D9:E6:BE:B1:05:57:15:3B:B7:D6:4D
X509v3 Authority Key Identifier:
keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c3:e8:5f:9c:ea:bc:0e:af:a1:59:90:72:b7:fe:ae:4f:10:
bc:b5:69:77:b2:05:70:28:71:0c:46:de:dc:fb:27:69:93:1f:
07:21:53:1c:59:fd:c1:90:aa:48:19:92:f1:1b:57:1b:c7:2b:
1e:94:37:14:d2:43:0f:c7:c2:0a:ae:06:e5:02:3b:90:2e:dc:
54:f7:6a:62:88:51:9e:8b:b7:1a:40:c9:b1:1e:00:1b:d1:9c:
81:7f:52:91:1f:59:54:c8:8f:55:2c:f0:75:eb:22:f9:f1:2d:
e7:f2:ee:6c:e1:a1:57:45:50:c7:10:17:ec:e0:48:ea:ae:0d:
35:ee:d1:bb:23:48:01:0a:a2:4c:30:a3:83:ec:83:b4:23:02:
61:9a:62:c2:f5:64:96:a7:d6:f6:a0:35:2d:a3:b1:d8:b7:0b:
20:8f:20:f6:8e:b1:36:78:0b:14:61:80:52:19:ac:27:bc:ea:
11:87:d7:bc:79:9b:0d:55:01:5f:05:d1:5e:ce:cb:23:50:58:
26:ec:b5:07:ef:ba:0e:36:2a:c2:d8:3b:26:b2:00:48:26:90:
52:55:33:d4:cc:85:53:f7:74:d6:f8:a8:e7:91:6d:32:b9:62:
ab:14:f1:96:1c:f2:0f:16:1c:46:2b:d6:89:e0:d7:1e:cd:30:
3b:44:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:42:16 2025 by rpki-client