This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
File: 417A3C46308D4692153B994B72E51599225B4979.mft (raw, json)
Hash identifier: nG0l6+zUuJIh2UsIsWeLMJoYir45t35XtLRDCIqXnOk=
Subject key identifier: EC:B2:45:9E:C4:77:F7:73:EC:C0:61:CB:F2:3D:CC:BB:8C:30:20:0E
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Certificate issuer: /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial: 64F9DF764B4921F15A79EAF1C84D740F610ABA0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
Manifest number: 21
Signing time: Tue 23 Dec 2025 23:11:11 +0000
Manifest this update: Tue 23 Dec 2025 23:06:11 +0000
Manifest next update: Thu 25 Dec 2025 02:33:11 +0000
Files and hashes: 1: 323830343a363861303a3a2f33322d313238203d3e20323639373035.roa (hash: zhdfCF+qRAETjvfVQ6OraQ2dmSybxhayrJCM+QSnLjw=)
2: 3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa (hash: 67ErBlbOvFpg0hvnl1IkwlbuCRkTDA6ZZMEUfu5lUqE=)
3: 417A3C46308D4692153B994B72E51599225B4979.crl (hash: RBSvPbRimLbWTIW3ae7Gwq76WzL8bI6nRcSAXR4T8NE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 02:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f9:df:76:4b:49:21:f1:5a:79:ea:f1:c8:4d:74:0f:61:0a:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
Validity
Not Before: Dec 23 23:06:11 2025 GMT
Not After : Dec 25 02:33:11 2025 GMT
Subject: CN=ECB2459EC477F773ECC061CBF23DCCBB8C30200E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:43:df:05:a5:d8:cb:73:d1:b0:85:0a:c3:
5a:a1:6b:6f:4a:d2:19:6b:1d:e4:48:48:d0:93:96:
74:fe:a3:84:04:d8:19:c2:a7:1a:1d:23:f6:a9:09:
84:22:15:b4:16:eb:3e:6e:1a:9e:85:1a:1b:a9:1d:
2b:ef:0b:e0:ae:dd:71:1c:19:23:f9:24:e4:71:0c:
9e:92:ad:de:97:c6:f4:36:61:04:2d:f6:35:6e:a1:
18:05:98:0e:04:8b:d6:bd:2f:61:a7:3c:83:ac:f5:
74:08:c3:d0:28:1a:1d:ac:c5:0c:68:35:90:31:d6:
a8:bf:d1:9c:dd:4d:df:8c:77:f7:c0:59:7d:70:84:
f9:86:df:2a:fc:be:c2:9a:8c:76:13:15:ec:82:67:
8f:be:43:67:23:62:7f:95:95:b4:34:2e:1a:73:5f:
56:2e:94:73:3a:28:09:ff:56:86:45:e7:98:84:e3:
3d:52:9e:08:6d:02:37:b9:2b:16:a2:fe:18:7c:4d:
36:86:ec:15:1f:73:34:d9:21:5d:56:19:6f:90:23:
38:29:3b:90:68:43:05:6b:0a:3a:62:60:1d:84:b1:
d4:63:b1:2f:cc:a4:22:98:5c:6e:f4:a2:a3:df:86:
af:56:b4:d5:6d:f2:2c:1f:c7:f3:11:bc:5d:11:a4:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B2:45:9E:C4:77:F7:73:EC:C0:61:CB:F2:3D:CC:BB:8C:30:20:0E
X509v3 Authority Key Identifier:
keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4b:f5:c9:3c:65:76:b4:ab:62:8e:14:08:23:7b:9b:4f:24:
95:a3:09:e5:83:c2:5f:4b:b0:16:21:e1:2c:8e:1b:df:46:fe:
0c:fd:23:50:fc:19:db:28:59:b6:7c:9b:7d:94:9f:16:9d:e8:
ca:1f:02:59:d6:03:32:34:d6:c0:8b:0d:d1:d2:4f:89:fd:4e:
b8:ba:29:d4:ce:79:cd:06:89:b3:82:d0:14:52:90:d3:83:1e:
cd:f9:0a:5a:2f:89:41:bc:c3:58:ea:48:83:a8:72:6c:a3:7f:
81:df:ea:86:36:c2:9f:a7:1f:f7:42:d4:f1:05:82:94:51:12:
83:29:47:b8:c0:67:91:81:de:27:39:5f:14:cb:18:d5:7d:fb:
64:32:9c:ad:86:1c:be:bb:eb:8a:cf:93:9a:2f:91:f6:7d:8e:
fe:2f:02:4e:49:d3:7a:1a:90:84:26:ed:72:53:b5:7e:4a:b2:
17:25:88:a8:25:96:bf:43:dc:64:18:38:d3:fb:c9:fe:5e:b2:
b5:98:77:6c:c7:93:1c:80:d7:e9:91:34:13:dd:ab:f8:c8:10:
12:9d:51:8d:4c:0c:f0:2c:6f:61:9a:0a:1f:8b:ef:6d:8c:46:
2c:db:85:0e:8f:27:13:ef:be:c0:78:9a:19:50:df:c7:e6:d6:
22:23:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:56 2025 by rpki-client