This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
File: 497BAE4A3C3F168148480552DC251C198E80E35D.mft (raw, json)
Hash identifier: prEp7BSTwcXoGf6qIQXMtFCo9PxB/Ieyyc8/Zk48CVk=
Subject key identifier: 6D:7B:48:B1:E5:83:42:D2:29:96:D2:85:1F:1C:FD:62:55:19:49:E5
Authority key identifier: 49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D
Certificate issuer: /CN=497BAE4A3C3F168148480552DC251C198E80E35D
Certificate serial: 502AB4768E850E03A10EC4EE621A31271FCC752C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
Manifest number: 5A
Signing time: Wed 24 Dec 2025 09:26:24 +0000
Manifest this update: Wed 24 Dec 2025 09:21:24 +0000
Manifest next update: Thu 25 Dec 2025 12:04:24 +0000
Files and hashes: 1: 497BAE4A3C3F168148480552DC251C198E80E35D.crl (hash: PYm2cMUdz+YQR9V6JHlJIrW2O3dgHF7od1Rt7Kc79jU=)
2: 323830343a356662303a3a2f33322d3438203d3e20323639313137.roa (hash: Na3YvVpkHFVuytUIqDmGLgFlIgoEZir0oJ0kqyLE3S0=)
3: 34352e3138302e35322e302f32322d3234203d3e20323639313137.roa (hash: 9hJwoN0GWb/tKd7eKwbHJ1+J3QD5zi8hpvZGNfEoDL8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.crl
rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 12:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2a:b4:76:8e:85:0e:03:a1:0e:c4:ee:62:1a:31:27:1f:cc:75:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497BAE4A3C3F168148480552DC251C198E80E35D
Validity
Not Before: Dec 24 09:21:24 2025 GMT
Not After : Dec 25 12:04:24 2025 GMT
Subject: CN=6D7B48B1E58342D22996D2851F1CFD62551949E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:ba:45:1e:61:9b:e7:1a:be:95:e4:c3:cf:
a8:66:1a:78:ac:b9:99:7f:cf:62:e0:76:85:3b:2a:
e4:44:f6:99:f5:d7:82:e5:e9:a7:62:88:d4:22:2b:
f6:1f:d1:ac:03:9d:10:d6:73:84:6c:fa:16:0c:c6:
8c:b2:4c:5e:7e:5a:43:cb:8f:ae:aa:a4:ab:05:2b:
ff:aa:83:77:e3:40:1a:0f:62:1b:df:b3:cd:ba:95:
19:76:f6:23:9e:88:59:e5:61:41:fc:db:80:26:00:
59:ce:3c:50:73:60:19:37:3e:88:c4:2e:25:a0:26:
09:3d:de:0b:f8:45:8e:f0:94:b0:5d:3f:09:57:14:
1d:a5:11:85:ca:fe:ce:26:8f:3b:9c:94:7e:31:87:
67:d3:bf:fd:1a:a6:23:08:4c:32:d8:36:4f:5c:66:
3a:ae:28:1c:3d:af:38:ad:97:d8:ad:be:0e:60:a8:
90:c9:0d:1c:4f:66:54:81:4f:8c:31:b6:f9:98:6b:
06:d1:0b:26:4c:68:7f:7a:48:29:20:08:cc:e4:4e:
39:a4:42:46:66:9b:d7:ce:24:83:27:44:cd:c5:30:
c8:fb:77:c0:a3:63:1d:d6:84:1f:4e:9e:38:14:6a:
d7:3f:e9:d3:9d:87:90:1d:f6:59:19:b4:31:0d:59:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7B:48:B1:E5:83:42:D2:29:96:D2:85:1F:1C:FD:62:55:19:49:E5
X509v3 Authority Key Identifier:
keyid:49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:09:cf:fd:ff:1f:2f:ce:7a:85:99:10:a7:dd:f8:2a:f3:8a:
bc:ed:ac:1f:04:94:a7:8b:fa:05:46:dd:a2:63:1d:ce:9f:fd:
52:89:81:f7:e3:c0:f8:c9:d6:b8:17:34:9b:19:e2:30:61:e4:
d9:98:f2:7f:73:a8:bb:15:c8:b5:03:1c:1b:e0:6a:a1:67:41:
86:2b:f0:7a:a9:8b:bd:22:5b:b6:4c:35:9c:26:f1:e8:8c:b7:
53:35:db:b3:3d:e2:d3:c9:35:54:7b:bd:f5:91:34:55:5b:77:
1b:c9:28:5b:48:33:35:b8:be:5e:5f:a7:2e:04:b0:11:51:f8:
40:31:de:ce:1c:ea:79:c4:79:ee:0f:a3:b2:f8:70:de:0b:be:
66:d7:f5:4c:c4:60:06:67:d9:9d:27:8e:a2:56:db:5c:0f:3d:
5b:f6:90:b2:da:a0:50:9f:03:b8:a8:01:31:1e:76:94:f0:91:
00:19:de:3d:5d:48:61:61:1e:a9:e2:a3:4c:38:40:a3:ab:9d:
cc:fe:0d:ba:a3:9b:90:a7:40:fd:25:50:e0:d9:a0:11:91:db:
d1:fe:67:fe:3d:67:df:c7:31:ec:3a:66:f8:b5:8d:a0:25:32:
14:b5:d7:aa:d6:be:6d:43:29:e6:a8:94:43:e5:e8:04:34:77:
f4:0f:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:22 2025 by rpki-client