This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
File: DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft (raw, json)
Hash identifier: KM2so3aoVeIDx/RPKlH3QyQj2nvQ7hO/hLe0Ba1Ui5E=
Subject key identifier: 8F:4B:84:7D:AE:BA:7A:04:EE:0E:03:CC:D9:57:BD:12:DD:6A:26:AA
Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
Certificate issuer: /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Certificate serial: 58D926B02A043772F25A4C57C92BD8C5492DD264
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
Manifest number: 60
Signing time: Wed 24 Dec 2025 04:34:37 +0000
Manifest this update: Wed 24 Dec 2025 04:29:37 +0000
Manifest next update: Thu 25 Dec 2025 05:57:37 +0000
Files and hashes: 1: 323830343a343535343a3a2f33322d313238203d3e20323636393139.roa (hash: 4tAaveoCXdDcpHp2LFl8RU4V7u4EaA1z6K9jhZ1hLbU=)
2: 34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa (hash: JrUEQFjfe4G5l/Qyw/wlPVbLvelmbWX+UdfuCtyaabI=)
3: DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl (hash: OTS0Rt2r5GG3y6l91JcXNlHPyqSUDnEwnRiRKTaQi1A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 05:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:26:b0:2a:04:37:72:f2:5a:4c:57:c9:2b:d8:c5:49:2d:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026
Validity
Not Before: Dec 24 04:29:37 2025 GMT
Not After : Dec 25 05:57:37 2025 GMT
Subject: CN=8F4B847DAEBA7A04EE0E03CCD957BD12DD6A26AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:7b:82:0e:d8:6d:4b:d1:d2:cd:ad:81:93:
e9:1f:d3:43:8b:42:73:88:57:05:ae:c6:a2:32:19:
70:12:3f:f4:34:4e:a9:e8:b8:ca:73:be:9f:21:99:
b3:d5:0c:de:82:7a:b2:3f:d6:34:16:80:c3:f9:34:
7d:23:61:67:c2:01:98:7b:c1:66:20:69:fa:a9:6c:
d7:94:cb:77:77:c1:62:df:d9:29:60:68:06:f5:9b:
3d:f8:c4:bb:73:8b:50:c7:76:c9:3d:91:c2:d4:1a:
73:09:51:08:6b:35:ee:1a:51:e9:75:b3:af:09:41:
a5:80:df:3e:8f:c4:94:2e:a2:ec:6c:c3:63:28:fb:
cb:39:cf:ba:71:c8:b8:8e:f6:f1:6a:3f:54:9e:d5:
c0:3a:dd:b7:00:10:8a:c6:a2:e8:b2:6b:9b:cc:11:
0c:ca:0e:82:05:22:89:3f:45:3c:ae:d4:0e:a9:e8:
90:45:fe:45:a5:16:80:b2:a4:4f:13:ef:b9:ba:13:
b9:c0:3b:23:28:65:d9:1f:52:f1:68:62:c4:92:67:
be:1f:7b:1a:d4:36:93:e8:f7:1b:0e:aa:0b:8f:f3:
99:cc:12:57:b7:81:51:be:9c:8f:07:3a:25:cc:ad:
90:da:d9:a0:93:5a:20:88:34:66:bd:df:1f:53:3f:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:84:7D:AE:BA:7A:04:EE:0E:03:CC:D9:57:BD:12:DD:6A:26:AA
X509v3 Authority Key Identifier:
keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:dd:30:04:bb:12:ac:51:39:d8:f8:41:61:a2:20:a6:c2:
62:61:ba:ec:cf:85:79:63:84:fd:5f:e2:80:b9:23:13:9e:f1:
58:61:ca:fb:c8:58:aa:25:e4:9a:d3:a1:b1:4a:17:a1:99:81:
ea:4c:66:82:25:d4:e0:b6:37:81:f8:fa:4a:53:de:50:cb:bf:
e7:33:06:cb:99:7e:90:2a:7a:28:3b:73:3f:e8:f4:87:0d:a4:
ad:4e:bb:b5:96:c6:07:6c:f3:a1:91:98:4f:3c:7b:9e:17:03:
5b:0d:d8:ba:e9:15:d1:2f:17:2a:23:97:cb:49:06:f9:99:d6:
53:f0:c3:bd:a4:79:fa:3c:91:46:e4:1b:1d:f4:23:2a:c6:25:
db:88:17:77:25:d8:71:9f:a9:7c:f4:0a:c9:17:d0:7c:29:55:
84:5d:50:97:da:31:97:93:d5:aa:6d:31:15:59:ed:ee:7a:24:
ea:2b:55:34:44:52:d7:2c:04:a6:78:cb:ec:42:90:79:1a:14:
bf:9e:6a:d3:c1:31:bb:b7:64:0d:73:65:b5:3c:38:02:53:1b:
44:ae:a0:c9:7e:4c:18:7d:34:dd:eb:55:9e:b3:b9:2a:b8:d6:
f8:7f:dc:ac:fc:92:54:81:31:ef:98:46:31:13:2e:14:46:e7:
3a:2f:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:27 2025 by rpki-client