This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
File: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft (raw, json)
Hash identifier: jQuWGzGvovHm6o1AlXn/SWltQau7302xMQSzF/c+EYE=
Subject key identifier: 02:FA:49:47:71:78:FB:51:52:CC:F8:ED:ED:10:0C:C7:CA:8B:5F:8B
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Certificate issuer: /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial: 3D5A221B000AFE98FD7A8D3E3B1A52EFE6D2C231
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
Manifest number: 0350
Signing time: Sun 21 Dec 2025 13:27:25 +0000
Manifest this update: Sun 21 Dec 2025 13:22:25 +0000
Manifest next update: Mon 22 Dec 2025 16:25:25 +0000
Files and hashes: 1: 3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (hash: rEIptntol3bvN9Apv0evK+bT/pr64GrQa6zIT5wXlrI=)
2: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl (hash: ewbOKTt0scpQB5fmP9mmOZ/x7l41xeeCH8TJkRPlgRM=)
3: 323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (hash: 8AHmINNTuIvylE8wzmf4Hk4M9s/xGc0DPLMYiUl530c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl
rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 16:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5a:22:1b:00:0a:fe:98:fd:7a:8d:3e:3b:1a:52:ef:e6:d2:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Validity
Not Before: Dec 21 13:22:25 2025 GMT
Not After : Dec 22 16:25:25 2025 GMT
Subject: CN=02FA49477178FB5152CCF8EDED100CC7CA8B5F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:34:f1:62:7a:94:48:d7:15:8b:52:6d:c1:
20:b5:ff:e5:60:37:e6:a9:8d:68:bd:98:06:d3:9c:
f5:2c:55:8f:44:c6:75:3c:58:8f:05:1d:ac:0e:b1:
50:e2:63:0d:77:62:e6:cd:40:f1:09:d5:a1:14:ec:
ea:98:d5:a2:76:80:dd:81:4e:1b:f0:dc:f6:2e:b5:
72:a0:0a:dd:fb:05:ad:e3:2f:a1:8d:4a:f4:ce:16:
6e:10:06:d7:91:dc:ff:6d:1b:91:60:02:36:12:57:
6c:68:92:77:c7:14:da:fb:10:f9:4f:33:17:fa:b9:
98:3a:85:41:4d:6f:97:5f:cd:1b:c3:1b:0b:b6:64:
56:65:99:44:b1:0d:6f:95:fe:e6:42:aa:4e:4e:bc:
2d:ba:5f:b9:a3:f2:23:52:f9:c9:31:6b:95:a2:94:
4c:91:eb:f8:fa:94:88:0a:3a:02:92:ad:97:22:0a:
4d:76:c3:35:a8:37:8f:d6:c1:89:3b:d7:8e:d5:4f:
6b:d2:62:43:d5:b4:d0:87:3c:3d:19:59:5f:f0:78:
aa:d6:c0:d0:4d:3c:c7:ca:d1:53:53:d2:47:46:72:
2f:32:5b:81:5b:e0:94:ae:4c:d5:63:be:94:67:23:
41:05:35:3a:c7:d9:68:6e:88:e2:fd:54:56:99:3a:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:49:47:71:78:FB:51:52:CC:F8:ED:ED:10:0C:C7:CA:8B:5F:8B
X509v3 Authority Key Identifier:
keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:92:7f:1a:76:b8:5d:f4:2a:e0:e2:c7:76:d8:78:84:80:10:
78:e3:b0:46:e8:af:ef:b7:a7:4f:4e:9c:e7:25:39:fc:57:17:
83:64:6f:cd:10:9f:24:ab:e6:da:76:ca:e4:e7:5e:9e:e4:7e:
9f:81:67:a2:c2:2e:d0:61:42:30:85:6a:ab:37:80:ce:b3:93:
1a:9d:88:df:04:10:89:31:6a:95:2e:e2:bb:a9:76:61:52:87:
fa:c3:9d:11:c1:dd:33:cd:4d:6d:c6:27:20:fd:ec:8a:b6:36:
a5:a1:6f:c9:56:60:6a:a1:a4:f5:5c:49:50:c0:34:7a:4d:e4:
25:93:f1:19:53:83:6a:d9:79:e0:4a:31:43:6e:61:d5:a2:67:
51:4f:e0:2f:9b:a9:6e:a6:af:9c:3a:e0:3c:fb:23:9e:d2:85:
14:23:1f:26:4f:ab:c3:ae:d0:e6:a4:cc:29:63:d8:f8:ff:9a:
ea:40:95:19:4d:a7:97:93:fb:2e:c9:1a:44:6a:8e:18:a8:3e:
d8:45:cf:29:ff:5e:b5:05:89:ab:79:2e:ad:98:47:c8:de:5f:
9d:59:3e:bb:d1:79:c7:d7:17:0f:71:80:fa:ec:23:58:41:14:
c2:eb:80:43:ec:99:a7:05:70:84:b9:2a:9a:69:ac:64:98:cd:
71:3e:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:06:07 2025 by rpki-client