This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
File: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft (raw, json)
Hash identifier: qGbl45o1TNeyU0w6iSF642ia1O2lP9eIhvn96HEQOdc=
Subject key identifier: CC:5A:BF:05:FA:0D:F6:23:B5:B4:E0:86:26:7A:5A:E8:F1:C3:43:46
Authority key identifier: F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2
Certificate issuer: /CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2
Certificate serial: 55E26D5DCB3EDD59027931AE32E18FD24B2D6796
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
Manifest number: 5A
Signing time: Mon 22 Dec 2025 21:08:52 +0000
Manifest this update: Mon 22 Dec 2025 21:03:52 +0000
Manifest next update: Tue 23 Dec 2025 23:22:52 +0000
Files and hashes: 1: 323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (hash: jp3jh3cXGLRbte/PrsJ/rlc1qYfSMcCfJHgTskp8KeA=)
2: 34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (hash: 7cDCdLU6VMbWBqB6t/edQ+r3L6KgzYWBki0xGa4vL0s=)
3: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl (hash: 5d/zzeNlspK3knlQdzN5J4ipzNg/btFLmFEHDcH8uJ4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl
rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 23:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e2:6d:5d:cb:3e:dd:59:02:79:31:ae:32:e1:8f:d2:4b:2d:67:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2
Validity
Not Before: Dec 22 21:03:52 2025 GMT
Not After : Dec 23 23:22:52 2025 GMT
Subject: CN=CC5ABF05FA0DF623B5B4E086267A5AE8F1C34346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:c3:1f:7d:1f:6c:86:e1:b2:61:d7:1a:eb:
27:1d:83:2a:37:5a:45:03:06:c4:15:24:41:57:a0:
72:36:61:35:8a:10:67:f2:7b:f3:aa:62:ad:ee:ae:
57:4e:af:9c:70:ae:97:ab:77:9a:37:ba:18:48:ce:
c9:9a:97:39:98:3a:7e:fe:dd:df:35:04:4c:19:b8:
ae:e8:8f:18:41:12:92:2a:2c:73:b8:09:da:28:19:
ad:b8:3d:4f:84:02:e2:90:06:c0:f4:71:5c:4c:b1:
3f:8a:a4:8c:a0:a8:6d:e8:aa:3f:b1:98:d7:69:11:
0c:f9:3b:59:dc:7f:87:7e:4c:ce:af:de:73:1a:87:
fa:10:7f:52:d2:fe:69:01:a2:cb:cf:a3:e0:64:3e:
b8:b8:e9:8f:b1:a1:f3:df:20:53:50:45:f8:b9:5d:
a4:3b:db:92:69:93:98:ab:4b:07:6b:18:66:9d:62:
47:49:1b:fa:58:ec:ae:6d:7e:20:6b:52:f7:a6:b3:
18:fb:83:31:d6:4e:a8:44:13:51:ed:bc:dc:e0:a9:
76:7a:91:5a:38:a6:b5:57:67:83:df:e1:23:85:4e:
2d:4d:8a:b0:b2:05:94:1b:0f:ab:94:ea:62:e8:2c:
2e:e1:18:d8:fd:14:e0:43:d2:23:80:ae:59:a9:01:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:BF:05:FA:0D:F6:23:B5:B4:E0:86:26:7A:5A:E8:F1:C3:43:46
X509v3 Authority Key Identifier:
keyid:F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:a0:a8:ae:fb:6a:82:3b:2d:d0:76:0c:e2:c0:91:05:d7:
99:43:a5:16:b0:77:d4:56:a7:c6:da:83:56:63:4e:5c:1e:8b:
ca:df:c6:85:b2:67:6e:cb:3d:a9:87:9e:51:00:09:fb:16:fe:
1f:40:83:ba:f9:fc:5c:65:a0:76:9a:12:10:85:db:4a:3d:af:
4c:69:7a:86:f4:c8:ed:92:f7:f5:32:f9:9c:01:aa:2a:fc:87:
5c:fb:68:92:92:fe:18:8e:95:4e:54:97:8c:54:99:d2:1b:d0:
68:6a:1c:d0:cc:f3:01:c5:33:48:5c:3e:1d:48:0b:37:ee:4b:
cc:69:9f:05:b6:a3:c6:ea:d0:d1:43:77:9e:e8:40:62:cc:3f:
02:91:53:ba:1a:37:fa:44:bc:01:b5:74:1b:17:bf:38:fe:ae:
c4:c6:8f:ae:65:11:d9:93:18:34:85:b0:aa:ae:70:c0:74:74:
46:45:08:af:ff:65:71:86:9b:37:e0:13:01:5f:5d:2c:13:b7:
e3:86:76:70:a6:e6:58:5c:8a:67:eb:1e:a9:0b:e3:03:3d:1f:
f9:35:af:b2:f2:49:24:03:15:cc:97:d5:d2:fc:35:fd:58:da:
52:43:9b:e9:42:cc:da:a4:1c:6a:92:1c:b4:32:c3:62:38:8b:
90:9f:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:39:24 2025 by rpki-client