This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
File: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft (raw, json)
Hash identifier: /G8Uh2HiYMKlorx6yQsf9LFfvJ41d3y6fli3R0szaNg=
Subject key identifier: 5C:38:E9:22:B3:77:17:0D:81:D0:3D:11:FB:2E:9A:23:71:18:F2:6E
Authority key identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C
Certificate issuer: /CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C
Certificate serial: 5A83B5B3195A7AF54063F2E184559C3EDE86C524
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
Manifest number: 5E
Signing time: Thu 18 Dec 2025 17:10:58 +0000
Manifest this update: Thu 18 Dec 2025 17:05:58 +0000
Manifest next update: Fri 19 Dec 2025 17:42:58 +0000
Files and hashes: 1: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl (hash: gQJsJt+XN/CF8NAMSrQ7iXU1s6eZhfchPD7jf4R5rYk=)
2: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (hash: RngRWQyawoEgPWd/npVxW/qgVMwVxWfaJ6c11tWcoXo=)
3: 323830343a386466343a3a2f33322d3332203d3e20323733333932.roa (hash: VS4osHeXlZ/Q4B1OAGutGiu5LExTcmGe3XvJymQp52c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl
rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 17:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:83:b5:b3:19:5a:7a:f5:40:63:f2:e1:84:55:9c:3e:de:86:c5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C
Validity
Not Before: Dec 18 17:05:58 2025 GMT
Not After : Dec 19 17:42:58 2025 GMT
Subject: CN=5C38E922B377170D81D03D11FB2E9A237118F26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:7e:84:62:67:fe:4f:ea:ba:d9:2a:70:8c:
61:4d:f4:09:05:06:49:e0:38:ad:54:2d:26:68:8e:
48:77:53:9f:0d:6f:ba:b8:2b:4b:c9:6e:bb:f4:b8:
89:5c:b9:ed:5e:0a:f1:34:d5:4c:61:3d:b2:92:63:
6f:b6:ff:9f:47:e0:7b:b5:bd:0d:54:73:86:ea:b3:
4c:cc:20:f0:3e:31:74:73:d0:d4:ce:0b:d8:20:06:
2a:a9:5d:fe:b7:f1:65:5f:e6:8d:ea:aa:f6:74:4f:
ab:4c:62:c1:bd:03:5e:f7:f5:5e:04:39:29:84:fb:
29:c4:d9:a1:33:d3:d8:d4:d6:ea:0c:7d:ce:7f:23:
20:2d:4a:1d:1e:bf:53:f3:e6:e3:01:a1:ea:b8:1a:
a0:c1:a3:ad:66:66:53:65:fc:05:66:93:bb:a0:df:
d1:ff:0a:53:f3:c8:61:f6:bd:41:77:3e:85:fc:32:
43:88:3a:a5:d7:b0:c9:dc:69:ae:b8:c2:2b:f6:68:
31:ef:8d:5a:cd:95:38:b3:e6:99:4e:9a:5e:c3:51:
fc:03:a0:2b:eb:b9:d2:ba:41:6c:8f:6a:24:78:51:
ce:a5:c5:33:76:fe:f8:67:1c:f3:e6:29:7d:25:eb:
29:d6:1d:df:d9:21:6a:de:53:3e:25:44:3a:30:7a:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:E9:22:B3:77:17:0D:81:D0:3D:11:FB:2E:9A:23:71:18:F2:6E
X509v3 Authority Key Identifier:
keyid:92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:7c:6f:62:d3:4a:e6:ca:8a:b3:80:b4:3e:42:aa:e4:55:
7a:b8:a0:85:da:1a:d6:75:f5:fb:9e:dc:71:b2:c4:e8:32:62:
04:33:05:92:08:0a:18:c3:44:e6:83:21:7a:84:cc:23:d8:80:
9e:8d:d1:9a:cb:4b:0f:d0:ba:14:ca:25:95:0c:32:86:f0:98:
2a:2b:17:3c:19:5b:5d:d2:6c:1c:a2:19:42:74:93:61:e7:c7:
07:e7:93:f6:30:0c:e8:cb:9b:31:0a:62:c2:93:24:45:9b:9e:
9a:c8:c9:79:47:43:75:07:ac:0b:30:89:2b:8a:33:57:b5:65:
a0:c2:f9:7c:56:d7:49:38:01:7e:ef:86:f0:28:0e:0c:ac:e1:
7f:bd:4e:d4:3b:be:dc:4d:40:c5:32:8d:34:1d:f1:03:97:6e:
67:2f:1d:ac:7c:f2:a9:ce:89:6f:ff:6a:55:f4:ee:73:86:13:
a2:b7:10:cf:cf:0b:ec:b0:02:a1:ab:2a:4e:16:68:fc:73:3a:
d6:b8:cd:98:78:3e:59:74:53:70:5b:b6:5d:3d:dd:00:53:1c:
71:44:ca:66:65:91:32:77:e2:e5:db:1f:aa:8a:27:cf:80:42:
69:3d:05:19:e9:e4:29:ed:01:6a:33:bf:15:29:41:12:4d:01:
e4:de:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:48:48 2025 by rpki-client