This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json)
Hash identifier: C7hWGyr1N49GGuQRzluVvUmWWI4W0ULHppLVGgTKJMs=
Subject key identifier: 3B:73:8B:08:7B:8D:5E:13:EF:E8:06:78:3B:6D:FB:E3:F3:03:E7:A4
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial: 4BF16F03574D072EA4882ACE6764E949F15CCC18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
Manifest number: 01A4
Signing time: Tue 23 Dec 2025 01:43:25 +0000
Manifest this update: Tue 23 Dec 2025 01:38:25 +0000
Manifest next update: Wed 24 Dec 2025 04:14:25 +0000
Files and hashes: 1: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: XxmClhN/clnfoQeUitWa9xM0uUXcJO0/FWlaZzALmi8=)
2: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=)
3: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=)
4: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 04:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f1:6f:03:57:4d:07:2e:a4:88:2a:ce:67:64:e9:49:f1:5c:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Validity
Not Before: Dec 23 01:38:25 2025 GMT
Not After : Dec 24 04:14:25 2025 GMT
Subject: CN=3B738B087B8D5E13EFE806783B6DFBE3F303E7A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:43:23:8f:37:77:98:17:0d:5c:f5:a0:f7:45:
6f:01:1a:33:a4:46:9d:f4:4d:23:53:b6:60:74:6b:
d2:89:b6:df:3a:db:85:ce:7f:7d:77:d1:6d:a2:10:
6f:71:b9:a6:cc:e8:5b:ca:80:d4:78:e6:65:01:c8:
91:8a:63:7c:1c:2c:45:fa:fe:91:9d:64:93:c4:81:
a1:5a:d3:74:3b:d0:5d:ad:cc:8f:aa:bb:bc:02:b0:
b2:cb:bd:43:05:d7:c9:5e:ac:cd:8f:00:24:38:9e:
80:e6:e3:4b:1b:0d:71:f7:1f:51:00:22:a2:2f:3d:
f9:2a:2d:e2:04:2b:02:9b:d2:11:5a:60:af:32:9e:
2d:57:64:fa:4f:ac:e8:77:df:84:80:dc:96:f9:9e:
fc:c5:df:eb:85:89:6b:92:f2:d5:bb:02:6c:b9:e5:
ec:85:c5:10:85:3c:a4:1e:f7:86:84:41:16:f0:2c:
db:0a:a7:7d:9b:b1:65:aa:07:85:cc:85:78:9d:e0:
4b:90:ed:c3:88:3d:e9:95:3c:d2:20:95:a8:70:ec:
c1:f5:d0:c8:6e:98:59:73:3a:dc:8a:7d:03:fe:1f:
be:c3:0f:39:ef:4d:dc:76:28:8c:1e:17:53:29:5c:
70:1e:47:8a:2f:3f:5a:ec:e9:b1:d1:c1:6c:b2:0c:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:8B:08:7B:8D:5E:13:EF:E8:06:78:3B:6D:FB:E3:F3:03:E7:A4
X509v3 Authority Key Identifier:
keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:ea:ef:73:33:36:37:cc:a7:8c:c2:22:41:9e:99:84:8a:
d3:47:23:46:34:fb:5b:f4:c1:76:96:4b:46:b7:00:20:33:30:
12:6b:70:2d:32:fd:57:3a:73:9e:85:e1:96:1f:71:59:b2:f2:
99:6c:c6:f0:00:d0:83:02:9f:4f:c0:1e:38:a6:d0:15:46:d1:
54:57:37:f8:2f:13:c1:0f:de:02:6e:e6:b9:cf:b8:c5:8a:10:
dc:86:21:71:4b:2e:21:fe:16:59:18:df:7b:b6:fa:51:74:4b:
ee:ab:d2:73:fc:67:38:5e:8c:6a:a6:80:30:60:04:b8:60:ea:
6d:6f:d8:73:50:2d:45:8e:90:e1:ed:55:f3:30:50:09:14:58:
d0:87:14:7e:54:b5:fd:98:9d:d6:b9:e6:39:3d:d2:fb:19:d8:
93:5a:5d:49:9d:24:ec:9e:25:d0:19:8c:ad:dd:65:a6:1b:b7:
c6:32:3f:11:52:a4:5b:a9:4d:3f:c3:81:43:1d:ce:d7:2c:b9:
59:ff:14:98:3e:0b:f8:17:84:48:3b:a9:1f:7c:96:22:8f:45:
65:d7:e3:28:50:63:37:2d:fa:6a:dc:ab:6b:f0:19:31:d4:62:
fe:2a:db:76:40:65:68:18:3d:b8:59:41:a4:7b:00:69:87:a3:
73:ef:b0:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS/FvA1dNBy6kiCrOZ2TpSfFczBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1
MDVGM0RCQzAeFw0yNTEyMjMwMTM4MjVaFw0yNTEyMjQwNDE0MjVaMDMxMTAvBgNV
BAMTKDNCNzM4QjA4N0I4RDVFMTNFRkU4MDY3ODNCNkRGQkUzRjMwM0U3QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQyOPN3eYFw1c9aD3RW8BGjOk
Rp30TSNTtmB0a9KJtt8624XOf3130W2iEG9xuabM6FvKgNR45mUByJGKY3wcLEX6
/pGdZJPEgaFa03Q70F2tzI+qu7wCsLLLvUMF18lerM2PACQ4noDm40sbDXH3H1EA
IqIvPfkqLeIEKwKb0hFaYK8yni1XZPpPrOh334SA3Jb5nvzF3+uFiWuS8tW7Amy5
5eyFxRCFPKQe94aEQRbwLNsKp32bsWWqB4XMhXid4EuQ7cOIPemVPNIglahw7MH1
0MhumFlzOtyKfQP+H77DDznvTdx2KIweF1MpXHAeR4ovP1rs6bHRwWyyDH9RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUO3OLCHuNXhPv6AZ4O2374/MD56QwHwYDVR0j
BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6
VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4
OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E
OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG4Dq73MzNjfMp4zCIkGemYSK00cjRjT7W/TBdpZLRrcAIDMwEmtwLTL9Vzpz
noXhlh9xWbLymWzG8ADQgwKfT8AeOKbQFUbRVFc3+C8TwQ/eAm7muc+4xYoQ3IYh
cUsuIf4WWRjfe7b6UXRL7qvSc/xnOF6MaqaAMGAEuGDqbW/Yc1AtRY6Q4e1V8zBQ
CRRY0IcUflS1/Zid1rnmOT3S+xnYk1pdSZ0k7J4l0BmMrd1lphu3xjI/EVKkW6lN
P8OBQx3O1yy5Wf8UmD4L+BeESDupH3yWIo9FZdfjKFBjNy36atyra/AZMdRi/irb
dkBlaBg9uFlBpHsAaYejc++wCQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:46:42 2025 by rpki-client