This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
File: 65E1DB5984802637A5800225A87C14E97A15601B.mft (raw, json)
Hash identifier: bCWOMFXuPitLsEVFGUn6ra+8MXShcyHZW3e/xyLBKwk=
Subject key identifier: BB:02:29:26:F1:3B:4D:A3:47:94:8D:9D:BC:DE:50:FE:C5:65:FA:1D
Authority key identifier: 65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
Certificate issuer: /CN=65E1DB5984802637A5800225A87C14E97A15601B
Certificate serial: 1827DC23642B36802E0EB0CDA4E30A4028E5FF8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
Manifest number: 0342
Signing time: Sun 21 Dec 2025 21:06:04 +0000
Manifest this update: Sun 21 Dec 2025 21:01:04 +0000
Manifest next update: Mon 22 Dec 2025 21:52:04 +0000
Files and hashes: 1: 3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (hash: ShAk2PRu0Kb2SbPYZuCN7aU2BdYoejKW5JwXhyYwMXY=)
2: 65E1DB5984802637A5800225A87C14E97A15601B.crl (hash: 2h5bVSP4c+/sb5Nw3/xVHXKK2/VRpCvhI8LcRddW1rU=)
3: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (hash: bCn9xgpXtcv+qtC13ntqSjSGV3eAZT+HCFzuTiPVVTY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl
rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 21:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:27:dc:23:64:2b:36:80:2e:0e:b0:cd:a4:e3:0a:40:28:e5:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65E1DB5984802637A5800225A87C14E97A15601B
Validity
Not Before: Dec 21 21:01:04 2025 GMT
Not After : Dec 22 21:52:04 2025 GMT
Subject: CN=BB022926F13B4DA347948D9DBCDE50FEC565FA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:89:56:78:96:e8:ae:32:33:a5:ce:bf:cf:
73:31:26:72:fd:64:d2:c8:3c:a0:39:fd:b9:cd:5d:
17:8f:52:0d:29:05:d5:f6:05:a9:fe:6a:73:3d:6a:
c9:45:ea:37:f7:b7:82:30:68:eb:e5:a0:27:36:75:
36:55:4d:0e:71:7f:e9:c7:6d:1c:6b:dc:f9:c0:cd:
fb:ea:13:59:d4:81:4e:dc:37:23:53:d9:f5:c5:0f:
ac:c1:fe:64:e8:4c:0f:7d:9a:a2:2d:6c:8d:9f:bf:
71:82:f6:af:1d:48:2d:90:0f:39:9e:61:24:2b:83:
24:df:9a:46:a8:34:13:09:f0:23:75:6c:32:be:fc:
4b:77:5f:9d:39:53:e5:94:62:95:e3:95:f7:f8:a9:
b5:7b:68:8b:fa:1f:5d:fe:64:5d:15:a8:a3:04:bb:
32:2b:48:57:30:c5:98:d2:60:e2:6d:6e:ff:cf:0b:
74:63:cf:27:40:24:4a:59:a6:0f:f0:98:52:44:13:
f2:e0:5c:c2:f4:06:c9:4e:b1:df:89:68:98:43:e3:
24:8e:69:d9:fc:f1:f2:03:7a:0f:0c:bf:3e:2f:64:
e7:52:7b:e0:66:ff:14:be:ae:c9:e3:0b:d0:3a:5e:
50:ea:f9:32:f2:37:a3:96:f5:bf:4f:c0:77:b1:ab:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:29:26:F1:3B:4D:A3:47:94:8D:9D:BC:DE:50:FE:C5:65:FA:1D
X509v3 Authority Key Identifier:
keyid:65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:59:b4:29:d7:ec:e0:1c:49:27:1c:f1:1a:36:35:ac:8e:ac:
75:dc:39:12:e3:27:66:43:fa:a8:b3:13:57:37:e0:ab:0a:56:
76:c3:8e:73:b4:53:eb:c9:cf:10:fa:eb:d0:91:09:f9:91:76:
cb:98:bd:82:6b:0f:c0:ab:3b:9b:8e:e2:d3:ce:b8:70:44:ec:
ef:dc:d4:85:09:54:70:44:56:bc:15:75:1e:95:00:38:6d:15:
a4:8e:4d:0a:30:8f:4e:7c:e0:df:35:61:55:4f:e0:f1:df:75:
f5:a0:ec:d5:d9:d1:c9:73:7b:10:0a:b6:c4:1e:8b:b1:4e:12:
24:cc:39:69:dc:8d:92:43:ef:66:a9:12:a2:9a:b7:52:fc:90:
ff:83:8b:8a:20:5b:63:5a:a6:f9:87:a4:88:d1:71:5d:bd:19:
fa:ac:75:44:7e:ea:9b:72:dc:b9:b6:bf:17:9f:34:61:63:ce:
08:b0:87:26:7a:4c:51:4d:ca:1e:69:c1:30:85:cb:b9:80:5f:
1b:9a:0e:6b:37:3c:86:ba:19:a3:60:30:d2:9f:a0:dd:a4:89:
7a:51:fc:fe:a0:4a:8a:84:eb:4c:c2:90:60:59:8b:89:67:ae:
11:c4:87:11:55:bf:e7:9a:d4:90:78:65:dd:29:2f:94:a5:b4:
f0:81:4c:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGCfcI2QrNoAuDrDNpOMKQCjl/4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFMURCNTk4NDgwMjYzN0E1ODAwMjI1QTg3QzE0RTk3
QTE1NjAxQjAeFw0yNTEyMjEyMTAxMDRaFw0yNTEyMjIyMTUyMDRaMDMxMTAvBgNV
BAMTKEJCMDIyOTI2RjEzQjREQTM0Nzk0OEQ5REJDREU1MEZFQzU2NUZBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC734lWeJborjIzpc6/z3MxJnL9
ZNLIPKA5/bnNXRePUg0pBdX2Ban+anM9aslF6jf3t4IwaOvloCc2dTZVTQ5xf+nH
bRxr3PnAzfvqE1nUgU7cNyNT2fXFD6zB/mToTA99mqItbI2fv3GC9q8dSC2QDzme
YSQrgyTfmkaoNBMJ8CN1bDK+/Et3X505U+WUYpXjlff4qbV7aIv6H13+ZF0VqKME
uzIrSFcwxZjSYOJtbv/PC3RjzydAJEpZpg/wmFJEE/LgXML0BslOsd+JaJhD4ySO
adn88fIDeg8Mvz4vZOdSe+Bm/xS+rsnjC9A6XlDq+TLyN6OW9b9PwHexq94vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuwIpJvE7TaNHlI2dvN5Q/sVl+h0wHwYDVR0j
BBgwFoAUZeHbWYSAJjelgAIlqHwU6XoVYBswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdU
VXovMS82NUUxREI1OTg0ODAyNjM3QTU4MDAyMjVBODdDMTRFOTdBMTU2MDFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RTFEQjU5ODQ4MDI2MzdB
NTgwMDIyNUE4N0MxNEU5N0ExNTYwMUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdUVXovMS82
NUUxREI1OTg0ODAyNjM3QTU4MDAyMjVBODdDMTRFOTdBMTU2MDFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP1m0Kdfs4BxJJxzxGjY1rI6sddw5EuMnZkP6qLMTVzfgqwpWdsOOc7RT68nP
EPrr0JEJ+ZF2y5i9gmsPwKs7m47i0864cETs79zUhQlUcERWvBV1HpUAOG0VpI5N
CjCPTnzg3zVhVU/g8d919aDs1dnRyXN7EAq2xB6LsU4SJMw5adyNkkPvZqkSopq3
UvyQ/4OLiiBbY1qm+YekiNFxXb0Z+qx1RH7qm3Lcuba/F580YWPOCLCHJnpMUU3K
HmnBMIXLuYBfG5oOazc8hroZo2Aw0p+g3aSJelH8/qBKioTrTMKQYFmLiWeuEcSH
EVW/55rUkHhl3SkvlKW08IFMAQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:20:19 2025 by rpki-client