This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
File: 4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft (raw, json)
Hash identifier: HMS2hupaM74L/j6MNnfGZVKDN+BpgQjvcMPvr94Fk30=
Subject key identifier: 02:FC:73:3C:3C:D3:6D:F1:69:84:23:F8:94:21:08:AC:41:6B:29:7F
Authority key identifier: 4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48
Certificate issuer: /CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
Certificate serial: 65E7F9BC0F91B60A6307EB243187D2342F780649
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
Manifest number: 1B
Signing time: Tue 25 Nov 2025 16:55:39 +0000
Manifest this update: Tue 25 Nov 2025 16:50:39 +0000
Manifest next update: Wed 26 Nov 2025 17:15:39 +0000
Files and hashes: 1: 323830313a38313a3135303a3a2f34382d3438203d3e20323734353234.roa (hash: Hm8EMh3DzK2NLsiIRm/hU3HlDg4zv4H+2EaEfFd2hfo=)
2: 4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl (hash: ZQQQAZaeu7BB7n0OO3zBEnKPc8RV9KECOsXTgdPLK3A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl
rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Nov 2025 17:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e7:f9:bc:0f:91:b6:0a:63:07:eb:24:31:87:d2:34:2f:78:06:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AB5A3BD9FDB751A3D822719D5839CAA994EA948
Validity
Not Before: Nov 25 16:50:39 2025 GMT
Not After : Nov 26 17:15:39 2025 GMT
Subject: CN=02FC733C3CD36DF1698423F8942108AC416B297F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:d3:c6:e7:83:f9:79:cf:eb:fc:ae:d9:c5:
76:aa:c5:17:16:26:4d:7a:d1:27:cc:83:29:73:86:
a1:3b:bc:14:bf:57:6b:ba:2b:16:c5:d2:dd:8d:b9:
0b:60:b3:b4:e5:5d:cf:20:69:2d:1f:c3:a2:5e:8d:
3d:1f:c1:88:8d:03:67:2f:13:d0:5a:ba:9f:b8:20:
c3:1b:98:eb:74:53:25:c4:3f:36:53:ea:36:5b:5b:
1b:56:21:a1:c9:8b:e2:a1:9b:75:ce:20:9c:22:92:
fe:ab:23:50:05:ae:1c:2a:96:16:e5:2e:ea:8c:e3:
2d:24:41:3e:59:e2:b9:ef:e2:36:17:10:a4:6f:44:
9d:dd:b9:b3:d3:97:90:09:25:0a:ef:28:1f:5e:f5:
a0:b4:c1:27:5f:9a:17:2f:09:80:00:a4:a3:46:a2:
9f:06:ba:a6:f8:75:2f:57:a9:64:db:07:4a:ed:46:
a2:49:7b:f5:62:d0:de:71:68:43:12:54:b6:80:41:
4d:6c:58:d8:1d:12:f1:74:45:ac:a0:a0:1a:0b:59:
45:3a:30:2a:84:b0:45:40:a4:16:37:4a:58:16:5f:
5f:19:81:77:b0:21:48:12:d2:39:41:0f:09:70:b8:
96:d7:dd:63:25:6a:16:af:68:6a:0b:6a:81:3a:85:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:73:3C:3C:D3:6D:F1:69:84:23:F8:94:21:08:AC:41:6B:29:7F
X509v3 Authority Key Identifier:
keyid:4A:B5:A3:BD:9F:DB:75:1A:3D:82:27:19:D5:83:9C:AA:99:4E:A9:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KPKDUZJrVkM5K5UDmHqaoDSmuaU1RQEbCdBY94VL67Z/0/4AB5A3BD9FDB751A3D822719D5839CAA994EA948.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:23:e3:ce:b6:79:f8:0f:08:4f:69:75:4c:97:4c:fe:1c:a9:
b7:fe:12:14:ec:a4:f2:1b:ce:76:35:96:88:f8:9d:f2:c2:65:
31:69:69:e3:0f:32:54:c5:dc:a7:f2:f6:ed:d5:8a:43:f4:e2:
6f:cf:25:31:80:db:45:96:29:0a:5c:09:78:d3:64:7a:b9:4c:
ae:83:b4:fe:85:e8:82:c4:59:77:f5:d9:ef:4e:36:da:e8:2d:
b1:81:12:14:11:86:60:b8:71:50:72:df:05:20:84:dd:fc:53:
4c:88:b0:0c:ad:ee:02:92:04:45:68:1d:6f:c7:0e:3a:0e:fe:
cd:4a:34:fb:64:89:af:af:9f:34:76:db:5a:ba:69:c8:4c:f5:
d1:b2:d0:7f:5e:15:6b:22:75:57:84:5b:c9:0a:74:dd:1a:1b:
ae:75:d2:63:2a:ea:bf:a8:fe:68:94:9c:39:d3:b0:eb:8b:27:
df:f6:4f:58:dd:6b:a0:f7:b4:08:09:cf:25:53:aa:55:1d:c4:
99:bd:6b:88:8c:bf:ce:49:2a:58:54:e7:16:8b:34:37:3a:f8:
1c:92:87:9a:b3:d5:37:d1:b8:ab:f6:fa:05:94:09:f1:f8:84:
d8:ba:fe:ee:5f:37:57:ac:69:4e:7d:dc:0d:f3:db:fd:63:14:
0e:06:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 20:32:17 2025 by rpki-client