This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json)
Hash identifier: y+nUrrWyGKh90ksym4QNUTsZS8/oXNelPpl2UyEKYG4=
Subject key identifier: EC:19:95:91:FB:B7:9E:50:BB:31:DB:24:44:40:7B:EA:4D:3B:7A:A7
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial: 3AA3B6BD6E32EA28D61F01C97FF043A5883AB274
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
Manifest number: 02AF
Signing time: Mon 22 Dec 2025 16:55:29 +0000
Manifest this update: Mon 22 Dec 2025 16:50:29 +0000
Manifest next update: Tue 23 Dec 2025 20:53:29 +0000
Files and hashes: 1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: 0nfaEfHwdQI5BdLajmRxzlZpzr/zR2hc07bBmvu/aWc=)
2: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: RUhPVJbcOr4gT219vmEfw5IpzZ4PVK7OTvfZxHJfvHY=)
3: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: E4agjj5PiQNiWxuQc5+DPLQ5eo9yRLbLsemGpSxKzmY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 20:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a3:b6:bd:6e:32:ea:28:d6:1f:01:c9:7f:f0:43:a5:88:3a:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Validity
Not Before: Dec 22 16:50:29 2025 GMT
Not After : Dec 23 20:53:29 2025 GMT
Subject: CN=EC199591FBB79E50BB31DB2444407BEA4D3B7AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:bb:3e:8e:76:30:43:66:79:3e:30:15:e8:
9a:e4:43:ca:2d:db:00:8f:b3:6b:67:25:87:c8:3a:
de:13:0a:17:61:42:10:93:73:c7:42:d8:c3:6f:47:
52:a8:ad:14:02:47:69:ff:89:1d:54:9c:94:4d:2d:
2b:db:29:f6:ba:74:6b:96:96:5d:32:64:9d:41:c0:
e2:12:a5:eb:d8:4d:0a:8c:dc:b3:a9:ad:e0:c2:51:
7d:67:a0:fc:2b:c8:70:96:14:4c:c5:90:df:cf:52:
38:5c:3b:f9:a6:8c:1e:93:c0:11:7a:1c:aa:03:ff:
bc:41:ae:8a:89:c7:56:55:26:59:67:1c:a9:05:c0:
b9:81:af:c9:71:c8:a3:b5:05:be:57:5c:88:c8:b4:
47:03:2d:0f:e1:09:f5:f9:e5:73:42:bf:96:73:d1:
c1:00:4f:65:35:2a:f7:30:79:a5:32:44:ea:03:48:
eb:d5:c6:97:6f:7f:24:8e:42:65:f9:0d:f5:e0:83:
fd:d1:05:7a:4c:03:52:2c:f3:0f:7a:96:31:ce:47:
3a:b7:b8:b5:f9:38:09:fb:8d:af:0b:1f:4c:62:ef:
12:a0:e2:c1:99:74:17:94:a5:6e:90:60:8e:1a:39:
c5:68:8e:b8:d5:a2:91:3b:f3:bd:4f:82:a3:56:fc:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:95:91:FB:B7:9E:50:BB:31:DB:24:44:40:7B:EA:4D:3B:7A:A7
X509v3 Authority Key Identifier:
keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:80:8d:1c:8c:a3:b0:22:71:d2:38:c7:cc:48:97:8a:f7:86:
73:c9:f6:90:3f:35:6f:aa:d2:1f:30:42:cb:1e:76:5b:b4:47:
43:ad:42:e6:c6:2b:a2:76:df:37:bd:51:ae:f3:b6:52:8a:85:
a4:bd:b6:3c:82:72:33:86:03:54:39:ad:0b:b2:1b:c1:20:ca:
f9:39:e5:a5:2d:7e:ed:19:1c:63:02:d9:e1:21:8f:7a:6c:5d:
83:54:a6:00:3c:e4:ac:9e:41:7c:86:82:ad:b1:e8:99:40:66:
93:a7:49:d8:d6:10:41:00:aa:3b:ce:e2:66:1d:66:b2:67:5c:
3f:0e:7a:1e:98:94:e4:4a:00:ec:d7:a8:dd:10:7b:af:8b:fd:
77:07:b7:7d:57:9e:69:45:d0:dc:c7:09:5a:79:d4:80:1a:c2:
d8:d8:0b:c3:5a:58:fd:02:f9:f6:fd:b3:07:dd:db:77:bb:d9:
0f:8d:1c:3b:23:92:cd:de:09:a4:70:79:f4:df:1a:71:3b:96:
56:18:5f:41:16:9d:a8:ad:f1:a0:4c:64:b5:80:57:40:62:e2:
b6:c4:76:f0:79:33:1f:27:f1:4b:d3:26:e2:c5:e1:d3:f2:9f:
83:4e:cf:ab:f5:94:7b:72:c2:8a:29:53:a1:a3:10:7e:dd:d4:
7c:ad:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:26:26 2025 by rpki-client