This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
File: CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json)
Hash identifier: +tRfyReAvoNBTLnxaAa8PvMD5bj02KDnN+jxI9qupeg=
Subject key identifier: B6:9A:91:C3:F2:EC:D1:9A:73:28:6A:88:14:5B:34:E3:5C:2E:69:57
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Certificate issuer: /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial: 1E5E952306880094F801E9E278D4CBF94EA1B6E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
Manifest number: 01F3
Signing time: Sat 20 Dec 2025 13:54:43 +0000
Manifest this update: Sat 20 Dec 2025 13:49:43 +0000
Manifest next update: Sun 21 Dec 2025 14:42:43 +0000
Files and hashes: 1: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: sogsWVg4hNQBK+KBx3bW7Ww4svOUGBaHbb1LZx9mQ/o=)
2: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: NKXUigyoNgvGw8sUtLKz4YtdCSr4kmNU60Zrw78lgfY=)
3: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 14:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5e:95:23:06:88:00:94:f8:01:e9:e2:78:d4:cb:f9:4e:a1:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Validity
Not Before: Dec 20 13:49:43 2025 GMT
Not After : Dec 21 14:42:43 2025 GMT
Subject: CN=B69A91C3F2ECD19A73286A88145B34E35C2E6957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:4d:3b:08:c2:67:79:11:f9:52:09:43:ea:
e1:77:45:3f:c0:83:7e:d5:23:21:49:fe:40:cf:1f:
5d:ce:34:6b:af:88:aa:81:32:03:c6:36:5f:52:e2:
a8:6f:37:59:c8:79:60:71:64:14:16:2b:27:3b:04:
16:ff:07:c8:85:1c:5f:2a:f3:45:20:64:8b:4d:e8:
2d:4e:87:a6:e2:3d:45:f4:29:57:a6:47:55:69:dd:
61:af:b6:91:cd:b6:ae:a5:00:9b:9f:d2:c5:92:e3:
2c:e9:f1:1f:95:f1:54:89:ce:35:e5:5e:23:ba:69:
36:2d:d6:17:d2:cf:25:9d:3c:44:31:e2:94:79:f7:
64:c7:e8:a0:ac:d0:3c:1e:9a:a7:63:06:55:38:64:
74:3f:48:c8:9b:4f:b4:aa:c1:ea:6d:d1:65:28:13:
fa:2d:31:e6:72:4d:c4:14:49:e5:3f:5c:f4:b3:b8:
02:91:3d:c0:5c:80:3e:6d:54:85:17:15:48:d6:bd:
8c:90:b3:f3:c2:c3:48:f4:fa:7e:75:7a:d8:e7:86:
08:fd:73:5f:d7:b0:0a:39:2c:14:0a:11:d6:85:ee:
34:14:7e:3b:46:1f:a7:72:c6:59:af:b7:42:9c:d7:
e6:93:9f:fd:28:74:60:d1:af:34:2c:76:ee:24:ee:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:91:C3:F2:EC:D1:9A:73:28:6A:88:14:5B:34:E3:5C:2E:69:57
X509v3 Authority Key Identifier:
keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:16:65:1e:c3:ed:98:78:47:17:69:29:57:68:4d:7b:b5:1e:
7c:27:02:4c:50:5e:2e:6b:c5:e3:ed:2d:4e:37:0c:fb:a3:2d:
52:ff:06:97:ee:2b:3b:47:b1:a3:18:93:39:93:80:89:e3:54:
2a:36:0f:75:4e:35:ec:d2:f5:d7:5e:23:eb:8f:e8:4e:60:be:
7b:5e:3d:d3:d4:5c:e9:19:cd:80:44:b7:e0:3e:b6:7f:15:27:
b7:25:df:d7:fd:57:1c:50:8e:c1:8f:1c:73:9c:a8:38:08:49:
a7:bc:05:14:a4:8b:7f:b1:6f:75:e4:51:87:bb:f4:04:ad:f1:
5a:b2:65:e1:33:b7:56:7f:40:01:e4:84:87:e0:78:ae:51:71:
fb:80:1b:eb:58:9a:26:de:a1:5d:e8:58:35:14:1b:db:5c:c7:
9f:a6:61:f7:04:db:b6:53:bd:5e:55:0b:2e:eb:7a:8b:46:62:
3e:af:f1:81:d2:ee:06:25:11:00:29:b5:f2:b3:97:96:da:1b:
4f:37:e0:5f:fc:51:39:da:41:cc:a3:98:92:a9:2b:aa:64:fb:
0f:76:24:67:18:99:4e:78:db:02:ab:40:b3:df:dc:55:f8:88:
0c:25:4f:47:3a:46:09:a9:33:b7:40:3f:ef:2a:e5:00:dc:c3:
29:e4:a0:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHl6VIwaIAJT4AenieNTL+U6htugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EwOUNFODdENzk2MjcyMjQ1MUY5QkIxQjBCQUJFQjY0
MTAyNDUyNjAeFw0yNTEyMjAxMzQ5NDNaFw0yNTEyMjExNDQyNDNaMDMxMTAvBgNV
BAMTKEI2OUE5MUMzRjJFQ0QxOUE3MzI4NkE4ODE0NUIzNEUzNUMyRTY5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYj007CMJneRH5UglD6uF3RT/A
g37VIyFJ/kDPH13ONGuviKqBMgPGNl9S4qhvN1nIeWBxZBQWKyc7BBb/B8iFHF8q
80UgZItN6C1Oh6biPUX0KVemR1Vp3WGvtpHNtq6lAJuf0sWS4yzp8R+V8VSJzjXl
XiO6aTYt1hfSzyWdPEQx4pR592TH6KCs0DwemqdjBlU4ZHQ/SMibT7Sqwept0WUo
E/otMeZyTcQUSeU/XPSzuAKRPcBcgD5tVIUXFUjWvYyQs/PCw0j0+n51etjnhgj9
c1/XsAo5LBQKEdaF7jQUfjtGH6dyxlmvt0Kc1+aTn/0odGDRrzQsdu4k7i6NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtpqRw/Ls0ZpzKGqIFFs041wuaVcwHwYDVR0j
BBgwFoAUygnOh9eWJyJFH5uxsLq+tkECRSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0ho
ZVkvMS9DQTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMDlDRTg3RDc5NjI3MjI0
NTFGOUJCMUIwQkFCRUI2NDEwMjQ1MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0hoZVkvMS9D
QTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABhZlHsPtmHhHF2kpV2hNe7UefCcCTFBeLmvF4+0tTjcM+6MtUv8Gl+4rO0ex
oxiTOZOAieNUKjYPdU417NL1114j64/oTmC+e14909Rc6RnNgES34D62fxUntyXf
1/1XHFCOwY8cc5yoOAhJp7wFFKSLf7FvdeRRh7v0BK3xWrJl4TO3Vn9AAeSEh+B4
rlFx+4Ab61iaJt6hXehYNRQb21zHn6Zh9wTbtlO9XlULLut6i0ZiPq/xgdLuBiUR
ACm18rOXltobTzfgX/xROdpBzKOYkqkrqmT7D3YkZxiZTnjbAqtAs9/cVfiIDCVP
RzpGCakzt0A/7yrlANzDKeSglA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:11:17 2025 by rpki-client