This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
File: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json)
Hash identifier: ji0rfQQScBzs7YwKFxxAx1asQ2uUyyll+R0jFE2ShaE=
Subject key identifier: 03:3B:A0:A5:32:FF:EB:E3:24:5F:C1:1B:E1:E2:95:B3:1D:7D:82:00
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Certificate issuer: /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial: 16900D79F82478C1B1A45B7E7E8BBECB85DBE6D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
Manifest number: 01CF
Signing time: Mon 22 Dec 2025 07:42:39 +0000
Manifest this update: Mon 22 Dec 2025 07:37:39 +0000
Manifest next update: Tue 23 Dec 2025 10:35:39 +0000
Files and hashes: 1: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: kRX8Q1kSjYURwtsybXX1/m7t+80afkiNHBqf4aBcx/w=)
2: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: O8fjApg1CdzVChf+9ENq5TQ1VWhFFzUEuYDrV5JEc/o=)
3: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: xVcxNYqKybbN/Ps4xlecaMMazfKtFl+FisOE5h/ALPs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 10:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:90:0d:79:f8:24:78:c1:b1:a4:5b:7e:7e:8b:be:cb:85:db:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Validity
Not Before: Dec 22 07:37:39 2025 GMT
Not After : Dec 23 10:35:39 2025 GMT
Subject: CN=033BA0A532FFEBE3245FC11BE1E295B31D7D8200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:d5:d7:da:08:60:1e:d6:9d:17:a9:86:7c:
eb:3e:1a:de:28:4d:9a:c7:14:2f:17:7f:b5:85:5f:
d3:bc:64:59:36:96:a9:3d:fd:ac:e1:9e:14:d6:0d:
eb:80:3d:89:9b:7c:d8:e5:01:9e:2a:98:86:6c:16:
2f:c7:ff:ae:55:cf:d8:88:65:c7:c3:83:fe:ed:5b:
b4:46:7a:b9:8a:c1:ca:13:b9:c5:0a:7d:cc:cd:c9:
b4:c6:bd:03:b0:c3:ef:bd:63:e9:a8:2e:94:92:ee:
b7:fb:73:bb:55:0c:d2:de:45:e2:f6:57:5a:7b:9c:
84:4c:e1:af:16:cb:e9:2e:c8:69:68:04:bb:e6:59:
33:9b:20:54:3d:b3:ba:71:34:54:b5:36:e8:4a:0e:
32:dc:ef:fe:e6:aa:f0:f3:01:21:5e:7b:b2:5f:7a:
25:52:03:ae:4f:e7:20:54:1f:3f:cb:b9:aa:53:3a:
a8:2c:4e:dd:2c:5f:ca:20:9b:d2:50:0b:60:95:65:
11:70:63:a7:21:76:e5:e6:45:32:d0:90:c3:45:19:
af:55:6e:10:a7:dd:d9:f6:88:50:db:5e:1b:cf:d4:
c7:fe:b0:f7:48:03:9a:57:ce:7d:36:7b:3c:1a:d0:
44:e2:2d:aa:5a:1e:e2:db:0a:95:be:95:94:5c:e5:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:A0:A5:32:FF:EB:E3:24:5F:C1:1B:E1:E2:95:B3:1D:7D:82:00
X509v3 Authority Key Identifier:
keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:e1:be:62:c7:fc:5b:fd:42:0e:fa:51:0c:43:9c:b4:f2:
2b:d0:2d:f0:58:7e:66:7e:8a:ce:f6:3f:9e:d3:0a:81:87:b1:
3b:9a:d8:51:dc:a0:4b:59:eb:3d:8a:11:09:41:2e:93:66:84:
49:c9:c5:59:6c:be:39:b4:ad:d6:df:f1:29:fa:fc:ba:05:ba:
e4:ed:b7:88:93:5a:c6:5d:57:0e:d9:d7:1b:24:02:2b:7e:54:
7c:fb:75:57:7b:13:f3:1a:48:c7:9f:0b:ea:92:75:93:dd:12:
89:8c:39:7b:f6:4e:e1:fc:d3:ed:32:8f:fc:26:81:29:0a:3c:
9d:fe:62:97:36:a2:81:82:27:cc:e9:0a:5e:e1:33:7b:bf:e6:
b1:0f:b1:0c:01:2b:63:91:c8:89:e9:dd:30:95:4b:94:ca:53:
41:e4:25:08:eb:bf:b3:e9:4b:f2:d4:dd:47:b0:d7:a8:1a:0f:
c3:03:68:42:22:88:91:0b:da:d4:0b:b2:6d:62:c8:cb:5b:9d:
6f:4c:85:ae:95:e6:cf:67:ac:ac:0e:7f:37:27:65:d1:9a:38:
b8:68:ba:cc:97:f0:4d:fa:92:64:36:e5:71:2f:83:b2:0e:15:
69:a6:e4:2e:12:06:95:06:41:dc:c2:50:b2:b2:df:1a:ad:0e:
55:74:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:42:54 2025 by rpki-client