This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json)
Hash identifier: 9xqZw7bdX5k+YukUulJ9lz2WpM1qI0QYFBhYR1DYCCI=
Subject key identifier: AA:40:BA:A4:ED:2E:D7:62:F4:1C:F2:6E:7F:D8:B9:F9:22:EF:DD:D7
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial: 5786DEAD5FE38B4B3C3355F593197C12DE08D6CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
Manifest number: 0341
Signing time: Tue 23 Dec 2025 08:31:10 +0000
Manifest this update: Tue 23 Dec 2025 08:26:10 +0000
Manifest next update: Wed 24 Dec 2025 10:20:10 +0000
Files and hashes: 1: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: Bt/FHv/9TwmMmJfzlP4TYpUzTg+AJK30NbR4bNq0sDM=)
2: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: V7DnBsCJIuISkVSnruTXr9sSBfm6Q+BYBb5kdZYmrfc=)
3: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: pmh4BRCTLaVheNeaFBQFQP/b/r3NgPTQ74DTv+RIp/c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:86:de:ad:5f:e3:8b:4b:3c:33:55:f5:93:19:7c:12:de:08:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Validity
Not Before: Dec 23 08:26:10 2025 GMT
Not After : Dec 24 10:20:10 2025 GMT
Subject: CN=AA40BAA4ED2ED762F41CF26E7FD8B9F922EFDDD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:74:d9:43:17:9e:26:ae:f0:ec:6c:e0:65:
4a:4a:0e:71:77:11:98:0e:a9:76:1d:0d:36:aa:63:
69:28:58:44:93:1e:ef:fd:f4:f0:5a:30:c9:08:f4:
6b:9b:f8:fc:cd:52:12:88:2e:7d:81:3f:ee:96:02:
2f:5b:a3:0f:fa:ae:df:12:11:e5:f4:3d:5f:70:99:
a6:a6:05:4b:38:bc:0b:98:c1:a1:44:68:1d:e2:73:
1d:39:d9:f7:7b:76:80:8d:0f:7b:af:d3:a7:72:b9:
62:99:25:0f:e1:43:68:4f:72:f4:e4:b7:e4:cc:78:
b4:39:8d:e8:3a:05:21:2a:8e:7f:3d:c1:74:53:07:
21:75:e6:4f:a3:01:2f:9b:02:41:ca:58:3f:d6:2d:
55:4e:de:b5:93:cc:0d:46:c4:43:11:62:b7:08:81:
0d:78:23:8d:3b:92:7a:60:24:bc:9a:6b:af:97:dd:
dd:f8:a5:a0:7e:33:d4:6a:0d:2a:a6:e9:38:3d:71:
31:0d:11:fc:26:83:50:73:7c:e9:26:49:e7:1c:fc:
04:34:3e:22:fd:59:da:11:ce:b6:89:c5:ef:94:6b:
1c:b5:ed:f3:63:84:97:2a:a9:11:bf:50:20:a9:b5:
50:8f:14:4f:8d:91:ed:bc:db:a6:34:0b:4c:19:ef:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:BA:A4:ED:2E:D7:62:F4:1C:F2:6E:7F:D8:B9:F9:22:EF:DD:D7
X509v3 Authority Key Identifier:
keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:40:06:c4:f6:d8:e7:a4:c4:dd:61:ee:51:f7:75:9c:8b:cc:
d6:77:21:42:85:60:0e:40:c7:04:cf:b7:09:9c:c9:cc:0c:80:
91:f3:f9:ed:1b:0e:d8:82:31:d2:e3:cc:b3:51:61:f0:96:2b:
81:40:15:5d:b7:43:95:c9:07:47:17:a8:6e:26:9d:10:5b:b9:
b9:97:cf:69:91:28:e2:c1:ab:c9:b4:e5:b6:40:3f:bb:31:8f:
e7:8b:c1:56:21:5a:80:14:b7:44:9b:2f:3d:a2:58:29:af:f3:
08:74:84:8e:f0:2e:ab:5a:23:33:a1:d4:8f:43:da:c4:e7:93:
67:ae:3b:63:26:0b:69:b5:56:10:6c:22:0f:ff:7c:c1:b5:95:
08:a3:71:8a:bc:3f:80:04:45:b9:15:7f:01:c9:02:69:77:db:
cc:40:cf:62:50:59:b4:e1:1c:a1:75:ce:40:90:21:bf:cd:79:
f5:34:7f:36:6c:ea:be:6e:60:1d:00:5d:d0:e7:8d:a2:4d:90:
3e:c6:7a:84:86:35:bc:59:1c:cf:62:d0:e6:a2:1f:88:3b:8d:
3b:cb:96:a3:b8:d5:4e:89:d0:5c:18:8c:dd:f1:c8:d6:e8:73:
3a:98:42:67:2b:bd:fb:ec:9e:79:87:44:c5:27:90:ba:58:4a:
6d:c1:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:39:33 2025 by rpki-client