This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json)
Hash identifier: iMOeQqwxCVJYWNHXrghDyyyKS7vbDC2TF+f73v+a0Jg=
Subject key identifier: 8E:19:5A:3F:72:58:CA:1C:FF:D1:88:2A:41:EE:1A:A7:2F:EA:35:03
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial: 1D3DE844BF81E81AA907E6F092BE8D3B35A0E21E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
Manifest number: 02AE
Signing time: Sun 21 Dec 2025 21:10:28 +0000
Manifest this update: Sun 21 Dec 2025 21:05:28 +0000
Manifest next update: Tue 23 Dec 2025 00:55:28 +0000
Files and hashes: 1: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: RUhPVJbcOr4gT219vmEfw5IpzZ4PVK7OTvfZxHJfvHY=)
2: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: K1MhhxdjU925MnyIIETNclJ1Dz53Wod2RoYzuRbuiPM=)
3: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: 0nfaEfHwdQI5BdLajmRxzlZpzr/zR2hc07bBmvu/aWc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 00:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3d:e8:44:bf:81:e8:1a:a9:07:e6:f0:92:be:8d:3b:35:a0:e2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Validity
Not Before: Dec 21 21:05:28 2025 GMT
Not After : Dec 23 00:55:28 2025 GMT
Subject: CN=8E195A3F7258CA1CFFD1882A41EE1AA72FEA3503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:34:5f:71:88:1a:20:f2:59:5c:79:6d:bb:
b7:2f:4a:19:ce:67:de:4c:83:5d:81:a1:bb:86:74:
d7:30:e7:72:a1:9f:2b:85:6a:fe:8f:ec:d7:2a:d4:
da:8a:17:f6:e4:ce:a9:d0:c1:c9:97:5b:11:bb:7d:
f5:83:db:4a:97:20:05:a6:8a:1c:81:5b:ad:18:62:
95:09:fb:22:d2:7a:e8:1f:35:35:a7:47:e1:8a:00:
98:f5:80:33:c7:76:83:3c:8f:eb:ad:45:5c:97:d8:
ca:61:e5:e1:3f:6c:e8:bc:b1:b7:bd:5f:54:4f:12:
95:16:5e:c5:75:25:a2:43:01:af:74:c9:37:1e:51:
4b:2f:ea:fb:ff:61:40:39:7b:42:4d:e6:6e:1d:63:
f6:72:71:1f:02:3c:40:82:db:48:5e:7c:21:94:65:
26:7e:f2:6d:d7:97:36:bf:4b:48:1d:07:54:8f:42:
b0:05:28:57:70:99:24:02:df:7a:d5:f8:5c:ad:c4:
6b:91:d9:a7:54:15:47:62:fb:db:15:94:78:ea:26:
d9:16:4e:98:d1:42:2e:ce:8d:11:70:a9:0e:d9:a3:
fe:e6:d5:8c:96:af:96:03:11:44:c4:b8:e0:a9:ee:
f8:42:51:b6:5e:4f:c5:85:ed:4a:24:0c:7d:29:00:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:5A:3F:72:58:CA:1C:FF:D1:88:2A:41:EE:1A:A7:2F:EA:35:03
X509v3 Authority Key Identifier:
keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7f:51:65:1b:53:2b:6f:b5:7d:52:ed:94:f5:f4:83:cd:e7:
28:c8:82:8f:1e:60:2d:ad:8f:10:7c:c9:1f:90:58:2e:20:b0:
55:60:26:12:e2:33:37:52:2e:b4:68:28:90:1c:88:0b:c2:85:
ff:67:5d:20:67:f9:b4:53:5e:f8:7f:74:37:ce:1f:19:af:a8:
c3:a8:44:de:2e:86:50:b1:f5:63:83:41:48:4c:09:d0:59:4c:
8c:be:77:bb:88:e9:2a:fc:1c:e6:5d:cc:ca:c4:b7:5a:8f:ed:
dd:be:e7:61:45:c9:1d:9e:4e:c2:1a:14:dc:e0:ff:fd:50:17:
04:17:f4:51:c3:c9:51:36:25:57:96:2a:65:14:89:86:50:65:
c1:d3:68:11:4c:89:16:07:80:7d:5a:cb:f0:23:e2:19:85:ef:
82:22:52:fb:68:81:21:8a:87:70:c2:7b:2c:e3:3e:5c:16:f9:
f9:8c:72:d1:f8:74:99:e5:ec:dd:f7:75:c7:63:48:b9:48:f9:
93:bc:c3:f8:29:f7:cb:3a:e3:54:10:dd:75:f7:27:36:e4:32:
82:f1:37:97:66:87:07:b7:d3:02:b1:ba:99:c9:49:ce:4a:4a:
d7:6e:5f:d6:cb:29:e0:16:93:7f:6f:e0:d1:13:1c:45:e2:56:
69:51:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:54:43 2025 by rpki-client