This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft
File: BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft (raw, json)
Hash identifier: aC4KQNE0OVClJGT9R39A6eh/SYA0J5tyxh5cT2nSffo=
Subject key identifier: 9C:B1:65:D9:A5:6F:CD:A7:30:F4:BE:43:80:19:9A:85:2B:43:06:CC
Authority key identifier: BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42
Certificate issuer: /CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542
Certificate serial: 13C75C07DDE76ABD5DC0507C3638457079BFA9D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft
Manifest number: C3
Signing time: Tue 23 Dec 2025 01:35:40 +0000
Manifest this update: Tue 23 Dec 2025 01:30:40 +0000
Manifest next update: Wed 24 Dec 2025 04:50:40 +0000
Files and hashes: 1: 323830343a356539633a393130303a3a2f34302d3434203d3e20323639303434.roa (hash: qC23nYCwTd0C4aXZLcdu65W8Bw5flpJh/JWkv56NrN0=)
2: 34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa (hash: /pI9TLhqurlKnJpo1vlGhbC1YrRrAMWE2ACtRSbFuRo=)
3: BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl (hash: I9HQTXWQP53rrtXVpa0QHi2ycBhr4mhWVusY3DR6F2c=)
4: 323830343a356539633a3a2f33322d3334203d3e20323639303434.roa (hash: 19p56JkFvGy3d55QCkTPjX1ii+GsYjcKpnMRN9gp7Ts=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl
rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 04:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c7:5c:07:dd:e7:6a:bd:5d:c0:50:7c:36:38:45:70:79:bf:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542
Validity
Not Before: Dec 23 01:30:40 2025 GMT
Not After : Dec 24 04:50:40 2025 GMT
Subject: CN=9CB165D9A56FCDA730F4BE4380199A852B4306CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:5a:00:33:b8:3c:0e:73:1f:ba:24:96:ed:
4c:97:42:24:d6:93:81:df:64:4b:ac:bd:8f:cc:dd:
f5:21:f3:60:4a:66:4d:27:44:30:e8:84:a0:0e:70:
dd:b6:c4:94:43:1e:51:89:e9:8f:aa:ce:58:ba:f4:
39:ed:cd:17:87:d4:9d:20:f5:24:0e:d4:f8:98:03:
fa:fb:f7:4c:b7:be:fc:18:c2:d1:79:9d:9d:f5:20:
05:fe:fd:4c:d6:86:25:a3:5a:8b:6f:ce:c7:21:12:
c7:f7:fd:9e:aa:4d:39:bf:3b:f8:9e:94:59:91:41:
7c:2f:50:d2:38:33:39:55:b0:dc:9f:0b:7d:c2:7a:
4b:aa:25:d0:b3:82:67:ae:f7:6c:5e:90:22:29:c6:
91:50:c9:53:ad:bc:65:14:8c:b1:8c:a1:a0:08:0a:
e1:99:45:1d:ff:a0:7c:75:70:bd:9b:7c:d4:d0:62:
6c:e3:68:5c:df:b1:03:ca:08:b0:2f:f1:01:2f:73:
ae:2d:70:76:2c:05:46:40:c4:bf:10:3d:ab:f9:3f:
ac:b4:03:30:eb:1e:b5:4e:6f:f7:8f:17:9b:4e:0d:
74:10:a3:6c:9e:d9:29:ed:fd:52:53:b9:25:7e:c8:
55:8f:f5:d9:dc:a6:d2:c1:18:1d:27:50:cf:b9:6f:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:65:D9:A5:6F:CD:A7:30:F4:BE:43:80:19:9A:85:2B:43:06:CC
X509v3 Authority Key Identifier:
keyid:BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d0:e7:88:c0:8e:16:ab:e0:24:93:a4:c4:29:d3:5b:d1:d7:
74:bb:4e:e8:45:8e:40:dc:69:1b:ce:69:dd:bb:df:e6:81:6c:
bb:ba:6c:3c:f3:fc:ea:4b:13:1a:cd:97:42:22:1f:3c:9a:a2:
b8:68:6c:b7:3d:c9:55:3f:c0:b0:1d:fe:7c:2d:b8:c6:f4:fc:
50:5b:10:d8:58:dd:4e:8f:fd:27:0b:fa:15:3b:fb:70:06:d5:
0f:05:75:ca:5e:84:0c:e2:27:1f:93:4f:97:20:c5:ed:2e:e4:
82:c3:fc:e9:8e:9a:f2:80:fb:77:5f:30:57:69:db:79:c8:a6:
76:89:31:89:95:fb:01:6f:66:2e:d2:cf:27:03:70:e7:a7:6f:
bf:56:85:4f:49:8c:f7:89:65:2e:61:ab:47:77:fa:8b:33:25:
fd:cc:e6:a8:78:df:c0:16:ac:3d:6e:29:70:45:95:9a:bb:6d:
3c:96:5f:e7:75:43:0e:52:d7:54:0a:a1:23:3b:18:ef:76:c5:
20:1e:ae:2b:e0:f3:23:9b:cf:86:ce:0e:a1:0a:95:21:12:c1:
22:14:9c:40:14:9e:c9:55:f0:ab:bf:4b:63:08:1f:f0:b5:e9:
59:54:6d:47:a1:14:13:d8:2c:e5:c1:b4:04:e6:e2:7f:a1:4d:
14:67:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:06:03 2025 by rpki-client