This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
File: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft (raw, json)
Hash identifier: dsny0YUYtmQflU6HuQd7FkKgfUEqecOaYZWezkF8pnM=
Subject key identifier: A7:DF:7A:26:5B:33:26:46:8D:EA:31:1C:80:1B:DD:E5:69:D7:DC:59
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Certificate issuer: /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial: 1363A8B65646670C5FD96A8E5868B275AB575FC1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
Manifest number: 01B5
Signing time: Tue 23 Dec 2025 10:49:34 +0000
Manifest this update: Tue 23 Dec 2025 10:44:34 +0000
Manifest next update: Wed 24 Dec 2025 13:20:34 +0000
Files and hashes: 1: 323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (hash: bustMz7M+5CMeM9CRQbzDoUPI+6nwA7yTMNCHpORS1E=)
2: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (hash: xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=)
3: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl (hash: mrvrgJnYSIx0Bo8sblJ1msyoRxnthPb7B24Xx+1SPcI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 13:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:63:a8:b6:56:46:67:0c:5f:d9:6a:8e:58:68:b2:75:ab:57:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Validity
Not Before: Dec 23 10:44:34 2025 GMT
Not After : Dec 24 13:20:34 2025 GMT
Subject: CN=A7DF7A265B3326468DEA311C801BDDE569D7DC59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:f7:bd:0e:71:e3:34:d0:1b:ea:8d:e8:83:
1f:33:77:09:61:f3:74:3b:3c:f2:54:1f:4b:02:0d:
4d:2d:ef:5d:f4:c9:65:e5:5d:e9:f4:e4:dd:ed:61:
21:e2:31:11:7c:ce:2a:36:9e:13:ce:cc:9f:32:8a:
0c:ab:ce:72:01:fb:c2:e7:94:da:b2:49:83:f5:b8:
51:6b:58:75:09:03:88:ab:20:05:be:75:95:b7:6a:
8a:5c:e0:39:74:4b:49:84:ba:8e:51:6b:45:75:99:
59:ec:2a:f7:7e:32:8d:80:bb:c8:be:fb:95:ce:ba:
02:b3:14:85:d1:c8:46:a9:da:c7:fe:66:df:4c:f8:
ca:ce:9f:f7:bc:62:f6:36:b1:ee:28:52:41:13:41:
21:05:e4:ba:de:1e:b0:62:dc:70:bb:15:7b:2b:11:
57:2a:f5:1c:48:30:e3:8d:42:99:21:e6:91:09:87:
ee:f3:2f:4a:55:d5:cd:4b:01:b1:61:8a:00:65:3d:
ae:80:fa:e3:aa:ce:ae:ef:43:08:c0:2f:2a:a2:5c:
a8:b5:92:53:97:93:eb:d4:02:1b:55:da:fd:a8:d0:
25:4a:a0:4c:40:61:9a:e2:75:1a:41:df:0a:a2:c2:
58:9c:33:f9:c4:9a:9c:65:a8:4a:ea:0f:00:37:d6:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:7A:26:5B:33:26:46:8D:EA:31:1C:80:1B:DD:E5:69:D7:DC:59
X509v3 Authority Key Identifier:
keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:16:f1:af:ac:fa:ef:a2:e2:cc:7e:05:94:ac:47:6f:59:4b:
f0:03:ed:50:33:99:72:12:b9:9e:46:78:c3:13:b5:fb:51:55:
80:6a:ae:7c:2e:7d:ef:49:d0:2a:32:c1:6a:a0:f0:c7:e3:1f:
14:d8:44:a6:9a:d1:c4:ec:04:f6:1d:0b:af:d1:c1:72:f1:d6:
1b:43:1e:0d:e9:d8:6d:5d:34:fa:28:b2:af:87:75:1a:fc:42:
65:24:0c:73:fe:8b:d5:f3:de:28:48:e3:21:ca:a0:40:21:7c:
05:c9:83:c0:0e:43:9b:3c:81:7c:c4:34:e8:8f:e3:7d:bb:b8:
d2:de:91:d8:85:ca:f2:87:af:52:e6:71:1c:c4:72:e9:47:b1:
df:9c:fd:a6:ef:e5:5c:7a:61:a4:e5:43:1b:b6:be:54:f7:ee:
7b:5f:f5:94:ca:37:ba:79:66:82:a5:ba:50:89:02:43:66:ff:
dd:40:fa:05:95:d4:fa:a5:41:32:aa:b5:b8:bb:bc:c6:c2:27:
05:0a:b2:43:aa:9b:d9:f1:83:9b:72:55:9f:37:bd:93:dd:25:
b7:47:5b:df:bb:d8:4d:4b:ab:ef:88:12:d0:e6:58:e6:72:94:
26:da:4f:d9:7f:2c:43:30:f5:d5:43:5c:0a:44:a1:81:aa:d6:
8f:a3:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:05:32 2025 by rpki-client