This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json)
Hash identifier: mM1EclX/ISaNn1vdZl5u6cKGs5a2XSZxBZAQqag8y8Y=
Subject key identifier: 3B:E3:AC:9A:6A:EF:0F:0F:1B:FF:B7:58:3E:B5:2D:B6:40:6E:EE:BB
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial: 3C295426C4F84D45A95C75B31F61A96F1F6F5E6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
Manifest number: 0327
Signing time: Sat 20 Dec 2025 00:22:05 +0000
Manifest this update: Sat 20 Dec 2025 00:17:05 +0000
Manifest next update: Sun 21 Dec 2025 02:55:05 +0000
Files and hashes: 1: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=)
2: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=)
3: 34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa (hash: A/pSWtKQA/OxokA0LkXc4PfBb4bWMqi4QQ8NPqMk/+E=)
4: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: +sQGV1TzEmw0qnY8njFy/JSXLATusRSYfq3A1K2UKlk=)
5: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 02:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:29:54:26:c4:f8:4d:45:a9:5c:75:b3:1f:61:a9:6f:1f:6f:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Validity
Not Before: Dec 20 00:17:05 2025 GMT
Not After : Dec 21 02:55:05 2025 GMT
Subject: CN=3BE3AC9A6AEF0F0F1BFFB7583EB52DB6406EEEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a0:74:7f:bf:7c:f7:ce:87:25:55:1b:dc:59:
29:b1:ae:50:cf:5c:aa:56:91:71:8e:ac:d0:eb:0a:
43:32:42:eb:2b:39:9b:a3:b3:af:75:de:ad:f7:f5:
44:56:cf:ee:ac:1f:8b:ec:25:79:71:07:27:ab:da:
8f:a3:46:ce:51:d1:16:23:f7:52:0e:07:b2:9a:86:
24:82:60:a0:ce:d1:2d:28:39:43:c2:97:bc:f3:dd:
b1:16:7c:de:14:68:fa:cb:d1:e4:e1:8e:2e:f2:0e:
6a:5b:61:ea:90:3f:d9:84:ca:c7:b4:58:86:89:98:
3e:0a:bc:38:cd:e8:93:5e:7e:19:33:4d:3d:c4:03:
8f:fe:34:be:b5:9a:55:05:af:4c:e2:8e:b6:b4:42:
c6:22:3f:f6:67:84:0a:30:57:10:97:b4:ed:de:83:
62:2f:5d:8b:c9:49:21:7d:df:aa:d1:80:47:bd:7d:
e5:1f:8e:cd:95:03:b9:43:7f:37:03:03:b9:02:dd:
79:25:07:80:f4:d4:1e:23:10:8e:36:6e:20:04:c4:
3b:c4:9d:89:5d:83:a9:e7:ee:08:ce:a1:ab:48:42:
a9:7c:b1:b8:5b:da:18:d9:af:88:05:d1:10:b6:25:
c2:c4:8d:11:eb:95:c7:73:4a:ef:13:0e:e0:ed:1d:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:AC:9A:6A:EF:0F:0F:1B:FF:B7:58:3E:B5:2D:B6:40:6E:EE:BB
X509v3 Authority Key Identifier:
keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e0:ee:d8:f8:f7:11:a1:61:4e:0e:bf:2f:ab:f6:10:3e:a5:
06:f1:d1:fb:a6:90:55:27:c8:20:38:90:17:6b:03:1c:fd:d5:
0b:b0:79:bd:ae:31:66:43:3e:83:32:cd:a4:a3:34:f5:8f:61:
5a:d3:19:22:9c:01:49:97:29:56:3b:db:40:fc:17:ad:c8:d8:
a5:a4:1f:20:d5:ff:56:3c:36:90:4f:b3:59:fc:6f:d7:9f:65:
ce:92:6f:46:35:0f:ed:d7:a7:5f:e4:92:55:13:fd:72:ed:d0:
c5:ba:4d:fe:fd:9f:ed:b5:eb:4b:b6:36:45:12:9e:5b:6d:1e:
78:11:8f:f4:59:a3:6a:bf:02:dc:52:bc:f2:05:ff:8a:aa:e5:
55:ba:1c:64:6f:90:8e:e7:29:de:af:89:95:c9:ff:16:f7:6f:
a5:a0:c4:01:9a:ec:4e:09:6f:a3:80:4e:dc:ff:d7:89:60:d9:
09:c6:1d:c4:be:5a:73:b8:36:01:a3:b0:9a:64:0b:82:03:be:
62:94:4b:87:74:d4:3b:23:de:cd:55:b0:4a:3e:47:ad:97:cb:
cd:57:69:05:03:d2:29:ee:70:c4:5d:5a:67:d2:09:35:5b:fa:
b5:b0:7f:d0:49:ba:03:e7:2a:06:fd:d3:dc:33:57:cb:0d:e8:
3e:0d:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:01:34 2025 by rpki-client