This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
File: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft (raw, json)
Hash identifier: DWEf5iHOYOqqMEiY24847EQHsbu8VkO0smDEHhFzum8=
Subject key identifier: AA:05:90:57:A1:10:FD:6C:C0:ED:52:6F:F4:BD:2B:3D:92:AF:1B:B2
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Certificate issuer: /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial: 2617D795B35D8597D108EE67D126146AF49FF114
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
Manifest number: 031D
Signing time: Tue 23 Dec 2025 09:43:57 +0000
Manifest this update: Tue 23 Dec 2025 09:38:57 +0000
Manifest next update: Wed 24 Dec 2025 11:58:57 +0000
Files and hashes: 1: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl (hash: fuOh5edXMSOXhLMmFSA2oRnFpw2CKNl46xrNYl3dvZg=)
2: 323830343a336263383a3a2f33322d3438203d3e20323636313730.roa (hash: mmaNkLilF/EoRmlf2yN+2d1pUoBI37qNRTNeSqh4Clg=)
3: 34352e362e3137362e302f32322d3234203d3e20323636313730.roa (hash: u6Qidk+dRJmAVIClo38LWMEpvi2huJ9R7RSbffvo+sI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 11:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:17:d7:95:b3:5d:85:97:d1:08:ee:67:d1:26:14:6a:f4:9f:f1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Validity
Not Before: Dec 23 09:38:57 2025 GMT
Not After : Dec 24 11:58:57 2025 GMT
Subject: CN=AA059057A110FD6CC0ED526FF4BD2B3D92AF1BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:70:4a:5e:a0:c2:aa:4f:53:02:77:3d:fa:
88:3e:8a:1c:06:bc:89:35:d0:8f:31:e2:09:75:61:
12:2b:05:ec:d7:aa:3f:33:3d:30:15:19:35:8a:1e:
fb:ea:98:db:ae:09:ce:70:25:b4:3d:cd:12:d3:6f:
19:74:a3:37:f1:55:6e:45:57:c2:70:29:03:70:45:
53:3b:7f:03:80:bb:07:e3:3a:5a:23:f3:dc:58:95:
ad:e2:c5:bf:ff:b9:b6:7d:25:c7:41:30:2a:66:ee:
4b:a6:18:ae:16:f8:b3:f9:c6:6e:ba:da:d0:aa:5f:
a4:18:de:da:a6:a8:b9:dd:ab:a9:ca:a9:50:b4:f8:
30:5d:8f:56:ab:a3:e8:a2:05:fa:c6:b1:70:4b:0b:
c2:7a:5f:21:09:28:7c:eb:64:6f:cf:e6:58:0c:ae:
e6:a4:89:71:42:e5:d7:aa:d7:54:0c:c8:9f:7d:37:
4a:25:b3:ca:56:b2:b3:04:27:c0:2c:f2:32:cc:54:
20:cb:1b:1f:d5:22:d8:c7:8d:f3:ac:0a:0b:ea:99:
a5:c4:b6:5f:78:5f:46:15:79:bb:e2:af:e2:08:99:
cc:0c:df:e7:e8:35:71:7b:88:c8:9c:03:f8:c4:92:
b5:46:18:3d:98:01:46:56:4b:bc:a9:57:4f:68:25:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:90:57:A1:10:FD:6C:C0:ED:52:6F:F4:BD:2B:3D:92:AF:1B:B2
X509v3 Authority Key Identifier:
keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:bd:3b:1c:f6:a2:b7:5d:e2:00:04:5a:cf:1f:a1:a4:21:
91:f6:24:5f:67:ed:ae:d0:8b:66:25:45:27:80:84:40:35:e0:
b0:02:34:c9:20:46:1c:6d:83:ab:55:5c:b4:1d:f6:fe:40:b3:
54:e8:8b:c1:2b:83:f7:d2:bc:83:e8:4d:13:bb:1d:5d:88:29:
26:d2:c3:42:e8:06:c3:dd:f1:7f:ce:75:8f:1c:e3:6a:3e:07:
7c:08:a4:a8:85:e1:d0:08:a1:60:ae:f4:d6:1f:53:9c:73:23:
6e:ef:a1:1c:74:34:ca:c7:10:f7:bb:82:9a:02:2c:a9:9e:9c:
9f:89:76:33:86:20:d6:eb:72:87:ae:fd:0e:91:e7:3a:35:42:
ce:23:32:45:a8:b6:31:12:3d:b5:87:f5:6d:02:bd:51:60:ab:
2e:6d:88:25:e6:0e:98:f6:af:95:46:be:b5:cd:d8:21:f9:f8:
91:1d:1e:a8:15:ca:1c:9c:77:d6:e4:92:02:cf:c4:42:87:7c:
00:b2:f0:08:47:a7:1e:89:5c:b3:d8:e6:9c:69:f9:fe:65:19:
1e:43:a2:8b:a3:e4:bf:30:f5:14:8b:37:58:d6:64:f8:7b:bd:
d2:6c:77:17:72:5b:a6:49:28:21:8c:c0:66:d0:f2:fd:01:ea:
59:a0:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:06:40 2025 by rpki-client