This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
File: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft (raw, json)
Hash identifier: 5zj4cvOVANJAq8dfI84BEsXFs+Y/l+JguqVhKVLkTas=
Subject key identifier: 34:13:9D:FB:4F:F0:8B:36:9C:FF:D9:D1:49:73:18:7E:95:58:4E:02
Authority key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F
Certificate issuer: /CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
Certificate serial: 23B29D7659EB45F3667D69298D72D187938BBC61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
Manifest number: 0340
Signing time: Thu 18 Dec 2025 09:12:59 +0000
Manifest this update: Thu 18 Dec 2025 09:07:59 +0000
Manifest next update: Fri 19 Dec 2025 11:14:59 +0000
Files and hashes: 1: 323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (hash: 7t8yhV0k/bA1AjqvPjiCZxRA/tJx1nCk2/dyeg5pwiU=)
2: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl (hash: xtpa0n+woKb/GQf57RTsf7z3FxDNlV9H9a9D3PbZrWI=)
3: 3137302e3234342e3231322e302f32322d3234203d3e20323636353038.roa (hash: Cf2cMmebdvqPZ/KmztmmSY2nBbCIFr1Er8I0Jm6TuIE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl
rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 11:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b2:9d:76:59:eb:45:f3:66:7d:69:29:8d:72:d1:87:93:8b:bc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
Validity
Not Before: Dec 18 09:07:59 2025 GMT
Not After : Dec 19 11:14:59 2025 GMT
Subject: CN=34139DFB4FF08B369CFFD9D14973187E95584E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:60:91:73:8a:ad:01:2e:ed:fe:9a:c7:d3:
b4:00:4e:56:2a:6a:b3:0a:36:ce:b9:0f:06:64:3b:
ae:87:e6:eb:a2:50:4a:f2:a4:0b:ff:8c:e5:b6:6c:
41:28:29:2e:63:89:2b:66:6f:eb:89:53:dc:fa:bc:
d8:91:d6:e0:94:bb:05:5b:14:28:78:b4:6c:36:22:
14:ba:a2:55:12:1b:60:bb:dc:ce:89:27:61:cc:53:
1c:75:aa:90:a2:f3:13:ba:b8:2c:61:83:ac:0b:d7:
03:cd:d8:54:78:ca:1b:94:a0:f3:0e:9d:9b:6a:4c:
2c:53:86:60:ca:41:13:aa:53:36:da:b3:1c:f8:18:
e1:d8:50:6e:d6:10:6c:12:b4:0b:aa:dc:ec:43:ea:
e1:84:9f:ff:56:ea:ab:96:4f:47:01:0d:38:fe:05:
21:f4:13:81:8b:77:12:cc:34:ee:8c:27:22:fa:81:
ea:4b:56:dc:18:35:fb:c6:60:fc:da:b2:83:d6:f0:
32:d3:47:c2:ae:18:de:37:80:fb:d5:a1:4f:9d:15:
ff:ec:8b:78:78:d9:1f:e3:6d:60:20:c2:c2:01:08:
5d:9f:03:f0:21:0e:0f:fe:21:89:ab:3e:ce:43:5f:
fe:d5:04:79:8e:52:d6:14:40:05:32:61:c0:f6:2e:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:13:9D:FB:4F:F0:8B:36:9C:FF:D9:D1:49:73:18:7E:95:58:4E:02
X509v3 Authority Key Identifier:
keyid:10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9d:59:81:41:dc:b8:a2:a7:ad:b3:f8:24:77:0f:b0:c5:72:
39:c8:08:02:bc:9a:89:fa:c1:4d:e0:66:bd:91:5b:5a:26:24:
51:c0:a7:9c:61:5e:ae:2b:93:76:7e:cb:d0:6b:97:ca:1f:a7:
c6:03:73:4b:1d:66:35:01:a9:72:ab:97:7f:16:b3:e9:d1:20:
b3:a8:af:1b:c1:a0:2f:c7:2e:74:4b:3a:c9:76:26:31:c9:b0:
72:60:c2:77:36:9f:f1:9a:0a:bd:5b:f3:42:9e:26:5f:ec:4a:
31:40:92:e9:d0:e4:f2:22:a1:75:6e:1e:ca:20:33:e9:4e:f4:
56:c4:91:a5:13:50:a3:f2:ca:6f:35:a0:94:1e:65:a6:f0:61:
c9:92:aa:c2:7f:4b:12:4d:f5:42:51:5c:55:86:5e:83:a0:25:
37:2f:e4:be:38:26:54:af:64:a2:c2:e9:cf:2d:15:52:68:e2:
9d:1e:a1:91:bf:b8:9c:cd:9e:71:54:4b:ed:59:5a:73:9a:8c:
4a:06:56:2b:47:40:9f:99:62:03:5e:84:3b:16:47:cd:25:e1:
54:24:05:13:77:50:8f:db:ee:c9:db:31:92:68:0f:89:7c:aa:
f2:8f:62:1c:7e:ff:93:e1:a6:6e:c6:9b:26:34:04:97:07:08:
24:5c:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:35:35 2025 by rpki-client