This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
File: D44D50D076872C7AF0CA51E36D70020A681F7E30.mft (raw, json)
Hash identifier: rCvZDJXAqh5I0FJ89EUYGky1EgUIotP0xqmMuhzJUG4=
Subject key identifier: F8:AB:01:54:21:4C:21:6A:74:D6:AD:71:B5:BD:07:82:C6:7E:12:DC
Authority key identifier: D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30
Certificate issuer: /CN=D44D50D076872C7AF0CA51E36D70020A681F7E30
Certificate serial: 3E386A93ED601DCF67F91589B0E782CEF31A7920
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
Manifest number: FC
Signing time: Tue 23 Dec 2025 23:40:40 +0000
Manifest this update: Tue 23 Dec 2025 23:35:40 +0000
Manifest next update: Thu 25 Dec 2025 00:25:40 +0000
Files and hashes: 1: 323830343a353831303a3a2f33322d3438203d3e20323638313034.roa (hash: h0v9+riMHdqkwtFuQSSEydv/fsiI0Ysz69HDjtIG1MU=)
2: D44D50D076872C7AF0CA51E36D70020A681F7E30.crl (hash: ihQ3b9hQtJF+iyBVIp1Oj1f7NMMx1vcakce7ABJEoJk=)
3: 34352e3136372e3232342e302f32322d3234203d3e20323638313034.roa (hash: zdFqDTwU6sMyVYv8G6jfL9Y50Yu71K5+n8Nb7AkT9vU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl
rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 00:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:38:6a:93:ed:60:1d:cf:67:f9:15:89:b0:e7:82:ce:f3:1a:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D44D50D076872C7AF0CA51E36D70020A681F7E30
Validity
Not Before: Dec 23 23:35:40 2025 GMT
Not After : Dec 25 00:25:40 2025 GMT
Subject: CN=F8AB0154214C216A74D6AD71B5BD0782C67E12DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:66:01:3a:61:5f:31:40:7a:ba:94:e1:f1:
f7:23:19:8b:9c:bf:60:cb:4d:f3:2c:c4:e6:45:20:
16:c5:19:05:c9:79:d0:50:f7:37:bf:04:66:c5:2e:
48:0d:bd:cf:22:1a:0c:f6:12:2f:de:9f:b7:f1:c5:
a3:52:a5:19:02:3d:4c:70:3b:70:36:08:52:0d:d2:
1e:52:4d:b0:e0:9c:35:ee:24:ac:b0:c9:52:4b:b4:
77:bb:85:ca:53:94:52:08:71:09:49:dd:28:82:6d:
a5:57:ff:45:9b:8d:f9:1c:90:80:10:7b:91:ba:33:
1b:2a:4e:35:e9:73:12:0f:d5:db:d9:a3:ac:d6:24:
56:ee:78:a6:f2:0b:ec:72:00:a9:97:38:91:04:50:
81:40:1b:30:53:f9:3c:ef:49:63:d9:3d:28:5b:6a:
ab:42:2a:20:72:d4:a6:fd:4a:b9:4b:11:62:ff:8c:
cd:a9:cd:8f:3b:d2:6e:cb:0c:82:f7:db:88:76:a5:
68:78:2b:89:44:ff:bd:7e:23:7c:36:db:90:75:17:
a4:23:23:ff:7a:cc:15:30:43:72:c9:05:58:a5:0f:
42:6f:3a:50:25:c8:47:b9:6e:64:87:cc:69:7c:22:
4d:dc:dd:40:f0:cf:c0:da:45:b1:e2:8f:59:1e:7d:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AB:01:54:21:4C:21:6A:74:D6:AD:71:B5:BD:07:82:C6:7E:12:DC
X509v3 Authority Key Identifier:
keyid:D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e7:d2:f1:1b:6e:d3:22:f0:81:78:e9:56:78:2f:7e:65:0b:
38:c9:c1:d0:df:87:41:f4:6c:39:2f:4f:86:0e:5d:85:5d:2c:
6b:5f:c9:b3:d0:7c:57:fd:58:2d:68:c5:68:33:07:5c:b5:79:
ce:42:08:70:7f:f3:71:26:24:5e:d8:52:d0:7e:92:ba:24:ed:
f3:dc:b5:a7:6c:4a:56:7f:25:ed:20:bc:07:25:a7:42:f8:85:
96:b1:00:58:13:28:73:f5:ba:32:6d:95:ab:56:e4:93:32:67:
09:23:70:1f:49:7b:0e:aa:9c:1d:db:6b:56:74:85:66:f8:34:
65:f6:e2:8b:a1:29:91:fd:4c:4b:d1:e3:7e:65:7d:ac:f4:0c:
7f:d7:96:9e:7f:ad:f0:be:4e:4b:49:03:37:8d:92:16:4a:1e:
33:78:90:cd:11:22:51:03:08:99:e4:c0:69:8a:c1:34:c5:e5:
41:26:a1:3a:c4:47:c4:7f:3f:40:cb:43:db:cc:fd:82:62:ab:
dd:9a:be:de:33:9c:5e:67:5a:4d:05:9d:0d:8e:48:8a:0c:e9:
ab:e4:1b:34:ea:5c:06:6e:59:0c:5f:62:fe:9a:1a:7c:ca:68:
2d:10:3c:50:74:57:1e:79:b5:24:24:aa:cf:6c:5f:7f:aa:50:
9f:df:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:30 2025 by rpki-client