This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
File: 085A4379FC02066399A7BABE986F2B930711F0E0.mft (raw, json)
Hash identifier: 1iJvIWJ39vR3F4SeyiwNYBR4oyJbDyaqu7QoC/dKrRk=
Subject key identifier: 75:67:7E:25:4A:E8:EC:08:A8:48:E3:C2:09:96:E5:D6:2B:0E:6A:8D
Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0
Certificate serial: 5004370E239ABA324E3BE299EB2813638251C245
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
Manifest number: 0195
Signing time: Sat 20 Dec 2025 03:06:17 +0000
Manifest this update: Sat 20 Dec 2025 03:01:17 +0000
Manifest next update: Sun 21 Dec 2025 04:17:17 +0000
Files and hashes: 1: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: +xOfTPOyg3oZBW1SRivjN46hBESQU5WWrM4vrLYmFGA=)
2: 085A4379FC02066399A7BABE986F2B930711F0E0.crl (hash: KoNwe0KW0pm/udP5eGUVuZWOLYDVR5zQ0ND31SjWirY=)
3: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: OyHPZjFM6nE6jESktIZHb4U9fXKswqrOu5Gkjq9t1u4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 04:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:04:37:0e:23:9a:ba:32:4e:3b:e2:99:eb:28:13:63:82:51:c2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0
Validity
Not Before: Dec 20 03:01:17 2025 GMT
Not After : Dec 21 04:17:17 2025 GMT
Subject: CN=75677E254AE8EC08A848E3C20996E5D62B0E6A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:f5:d5:56:94:6f:14:49:af:5d:54:16:2a:
2b:2e:0c:fe:7c:0f:42:bc:fd:fd:4e:70:4d:48:72:
c4:3b:67:06:fd:4c:19:11:a3:c1:2a:de:44:ea:30:
43:ca:23:d3:7c:d8:00:ad:91:e0:ac:fb:00:d6:8a:
6a:eb:af:8f:6b:9f:6f:24:7c:d4:9b:60:78:02:b5:
e7:7a:2d:79:e4:4c:66:23:93:d5:bc:f3:85:25:ab:
dc:39:4e:ff:e0:c8:9e:de:2c:d8:da:a8:91:ee:ad:
be:86:71:86:45:2f:30:50:41:f0:9d:29:96:99:e0:
21:8a:8d:7b:92:97:b4:f8:74:d6:11:54:77:d2:e1:
60:af:e1:db:55:22:23:74:be:eb:f5:56:37:01:72:
25:26:2d:6e:13:01:70:0a:5e:6a:fc:ba:14:0a:0f:
e0:4a:55:8b:f2:49:80:44:ff:5d:c0:0d:7d:1d:74:
f4:d9:47:2a:c2:b6:c8:d9:c5:0f:89:23:c6:21:51:
f7:39:3e:59:7f:d1:96:f2:e6:ac:3e:89:a9:89:a9:
ae:83:73:27:6b:1c:cd:7d:8b:7b:5c:9a:0d:84:e4:
b7:c9:70:30:2b:95:9a:c7:c4:6a:81:5a:35:5c:df:
04:b2:86:7c:e5:85:a2:a5:6e:a7:9d:6b:e8:60:1b:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:67:7E:25:4A:E8:EC:08:A8:48:E3:C2:09:96:E5:D6:2B:0E:6A:8D
X509v3 Authority Key Identifier:
keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c9:26:27:26:03:5b:44:9f:57:89:1a:d0:51:0f:17:3c:a4:
bc:5a:6d:b4:30:bd:d1:86:66:6c:2c:24:0b:e9:2d:62:ab:69:
03:10:c4:58:d4:aa:a6:38:1b:79:f1:21:63:8c:07:15:f0:f1:
df:f7:c1:d3:92:93:41:f1:ea:bc:0c:05:51:b2:de:6c:98:93:
c4:cd:b6:1f:c2:00:65:da:09:76:a6:7d:f7:4e:e4:d9:56:66:
e9:9f:40:96:36:0f:81:59:5f:85:d3:ce:8f:d3:70:fa:a8:c4:
ac:a2:ca:c9:f0:1b:02:ce:10:87:b1:a4:da:4b:78:2d:6d:3f:
d3:40:52:22:2b:ed:26:b5:91:cf:87:ee:26:d0:26:d3:f5:61:
8b:a0:13:29:fe:39:41:4b:5a:c7:63:be:0d:2e:f8:79:5f:7c:
fd:30:08:b6:4f:82:c6:5b:4c:61:0e:f0:f7:94:b7:38:9f:b4:
aa:bf:9e:6f:cb:fc:08:82:14:c7:36:5a:09:f9:f3:c7:5c:ad:
11:bf:03:ba:9d:0e:87:be:35:f9:44:3b:eb:b8:a9:30:86:6d:
8a:0d:5c:59:6c:78:c9:0a:5b:0f:9c:3e:e4:64:38:60:5b:e3:
25:65:ec:de:b3:89:de:b8:2e:6d:0d:ca:b6:b4:76:de:46:34:
06:95:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:04:00 2025 by rpki-client