This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.mft
File: A22611466C3B8A8017A764F82626629474F96253.mft (raw, json)
Hash identifier: KMftvQ4S94pHSKZivo5bHSzjGx7UViE0M+JCgdq4bbQ=
Subject key identifier: 62:1F:F3:5C:E8:4C:5B:EE:89:5F:E0:FE:49:91:5B:EE:01:91:CE:BE
Authority key identifier: A2:26:11:46:6C:3B:8A:80:17:A7:64:F8:26:26:62:94:74:F9:62:53
Certificate issuer: /CN=A22611466C3B8A8017A764F82626629474F96253
Certificate serial: 080CF93773171072E07A530E2EF219550BA93449
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.mft
Manifest number: AA
Signing time: Wed 24 Dec 2025 12:06:05 +0000
Manifest this update: Wed 24 Dec 2025 12:01:05 +0000
Manifest next update: Thu 25 Dec 2025 12:15:05 +0000
Files and hashes: 1: A22611466C3B8A8017A764F82626629474F96253.crl (hash: KG6/alwlDjj2Drzk/RGy+mMLyfe7rqp5YGj88KW8CFU=)
2: 323830343a353737303a3a2f33322d313238203d3e20323638303635.roa (hash: JTFtrUqz5SaqsYk8hWCLDtBo3YqVHzjJjL9H256uvqQ=)
3: 34352e3136382e3136342e302f32322d3332203d3e20323638303635.roa (hash: Uk7k0k1mNZe0VXC3WHRAxzd2S0K+aaU852mLzAMemyw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.crl
rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 12:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0c:f9:37:73:17:10:72:e0:7a:53:0e:2e:f2:19:55:0b:a9:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A22611466C3B8A8017A764F82626629474F96253
Validity
Not Before: Dec 24 12:01:05 2025 GMT
Not After : Dec 25 12:15:05 2025 GMT
Subject: CN=621FF35CE84C5BEE895FE0FE49915BEE0191CEBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:2d:8a:44:8d:0f:6c:90:c1:a7:ad:6a:8c:
3f:4d:39:1b:e0:02:1b:c0:c9:3f:66:a7:f2:0d:83:
4e:ea:78:b3:7f:b5:a8:30:02:0c:31:6f:b9:30:3c:
5e:27:4f:1c:7a:3a:b0:27:6e:ab:4c:15:ef:89:a2:
f4:e5:cd:9e:6a:bd:6c:0b:52:9c:bc:ac:d0:71:8d:
96:45:1d:fd:eb:23:7b:62:a0:5a:6a:f4:7f:8b:f2:
6f:e8:3b:ee:20:f7:dc:c0:0b:c8:e4:89:a2:2d:01:
e9:ed:71:37:f0:b7:87:0b:29:fe:26:d9:4b:f9:c0:
57:cb:e0:bf:5e:64:7f:7d:56:c1:b5:f7:a3:83:da:
0c:61:11:48:20:9b:0f:4d:db:89:33:f5:40:ba:d1:
88:1e:15:f3:6f:b5:07:d0:f6:bd:44:e8:e8:4c:f1:
cc:78:80:4f:3d:a2:3a:1f:03:4d:db:ae:c7:f2:30:
45:7f:b9:f2:69:61:bc:ea:a3:ac:92:03:db:3e:a2:
de:cb:a5:c8:4b:05:e4:b1:5c:50:94:0a:88:7e:8b:
dd:ad:d9:d7:94:29:d5:a7:bd:ed:2c:c6:69:1c:f6:
f2:1c:e4:97:82:75:d9:b5:96:be:56:45:18:d5:ac:
d3:c8:c5:2d:92:3a:11:73:ed:1a:e8:3f:48:74:e4:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1F:F3:5C:E8:4C:5B:EE:89:5F:E0:FE:49:91:5B:EE:01:91:CE:BE
X509v3 Authority Key Identifier:
keyid:A2:26:11:46:6C:3B:8A:80:17:A7:64:F8:26:26:62:94:74:F9:62:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A22611466C3B8A8017A764F82626629474F96253.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TZqF5ciHGH8NdTk1a7a2LrmWPsNxkfUkoL8M1bL5LZD/0/A22611466C3B8A8017A764F82626629474F96253.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:69:b8:3f:da:1b:45:52:2c:7a:d2:69:88:5d:a5:7f:df:bb:
35:38:8d:e4:68:6a:07:71:1d:c3:b9:8e:56:9e:e8:f8:d2:11:
c2:07:f0:13:15:3b:97:3a:5a:56:24:1c:45:f6:83:5f:a5:e6:
01:3b:09:ca:63:e4:e4:59:13:bf:4f:98:21:e2:0a:75:c0:63:
b0:81:5d:3c:8b:61:05:56:82:0b:d6:ce:85:fb:ac:07:88:51:
ef:9b:22:d4:0a:48:23:10:47:e0:bd:a1:39:ef:b2:1c:1f:bb:
8f:df:82:84:77:f9:1a:fb:c5:13:53:7f:f0:48:48:7d:3e:fc:
48:40:30:cf:61:33:0d:bb:69:29:42:95:fd:60:0a:bb:69:05:
68:1a:de:01:5c:91:d2:1b:12:ce:cb:66:aa:c9:a1:81:f2:75:
14:33:cf:56:cd:14:60:f1:0d:1f:0e:79:01:8a:e2:63:c7:8b:
67:bb:c8:51:af:b0:fc:c8:2d:80:82:a0:ec:31:e4:19:c0:e9:
5a:cf:be:cf:eb:2c:64:0c:f2:99:e9:72:9e:f6:5e:4e:63:e3:
ba:f0:4a:81:bf:7c:7e:11:69:63:63:4e:03:e1:e1:f3:6e:a8:
32:42:32:13:8c:9d:c4:cc:69:33:58:40:87:62:c8:6b:a3:31:
f0:5e:2f:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCAz5N3MXEHLgelMOLvIZVQupNEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIyNjExNDY2QzNCOEE4MDE3QTc2NEY4MjYyNjYyOTQ3
NEY5NjI1MzAeFw0yNTEyMjQxMjAxMDVaFw0yNTEyMjUxMjE1MDVaMDMxMTAvBgNV
BAMTKDYyMUZGMzVDRTg0QzVCRUU4OTVGRTBGRTQ5OTE1QkVFMDE5MUNFQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSy2KRI0PbJDBp61qjD9NORvg
AhvAyT9mp/INg07qeLN/tagwAgwxb7kwPF4nTxx6OrAnbqtMFe+JovTlzZ5qvWwL
Upy8rNBxjZZFHf3rI3tioFpq9H+L8m/oO+4g99zAC8jkiaItAentcTfwt4cLKf4m
2Uv5wFfL4L9eZH99VsG196OD2gxhEUggmw9N24kz9UC60YgeFfNvtQfQ9r1E6OhM
8cx4gE89ojofA03brsfyMEV/ufJpYbzqo6ySA9s+ot7LpchLBeSxXFCUCoh+i92t
2deUKdWnve0sxmkc9vIc5JeCddm1lr5WRRjVrNPIxS2SOhFz7RroP0h05OEFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYh/zXOhMW+6JX+D+SZFb7gGRzr4wHwYDVR0j
BBgwFoAUoiYRRmw7ioAXp2T4JiZilHT5YlMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlRacUY1Y2lIR0g4TmRUazFhN2EyTHJtV1BzTnhrZlVrb0w4TTFiTDVM
WkQvMC9BMjI2MTE0NjZDM0I4QTgwMTdBNzY0RjgyNjI2NjI5NDc0Rjk2MjUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMjYxMTQ2NkMzQjhBODAx
N0E3NjRGODI2MjY2Mjk0NzRGOTYyNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlRacUY1Y2lIR0g4TmRUazFhN2EyTHJtV1BzTnhrZlVrb0w4TTFiTDVMWkQvMC9B
MjI2MTE0NjZDM0I4QTgwMTdBNzY0RjgyNjI2NjI5NDc0Rjk2MjUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcWm4P9obRVIsetJpiF2lf9+7NTiN5GhqB3Edw7mOVp7o+NIRwgfwExU7lzpa
ViQcRfaDX6XmATsJymPk5FkTv0+YIeIKdcBjsIFdPIthBVaCC9bOhfusB4hR75si
1ApIIxBH4L2hOe+yHB+7j9+ChHf5GvvFE1N/8EhIfT78SEAwz2EzDbtpKUKV/WAK
u2kFaBreAVyR0hsSzstmqsmhgfJ1FDPPVs0UYPENHw55AYriY8eLZ7vIUa+w/Mgt
gIKg7DHkGcDpWs++z+ssZAzymelynvZeTmPjuvBKgb98fhFpY2NOA+Hh826oMkIy
E4ydxMxpM1hAh2LIa6Mx8F4vuQ==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:34 2025 by rpki-client