This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
File: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft (raw, json)
Hash identifier: S6+ws67Y/58B5nr7NRUz0oAuFiMObcbEiQu0ElhM1Wk=
Subject key identifier: 8C:F1:CD:ED:81:42:67:25:63:C1:88:FE:2A:93:F2:89:72:AE:ED:94
Authority key identifier: CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1
Certificate issuer: /CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1
Certificate serial: 0C886C3801722CFDDDB5E24FF10D1BD82F0D3852
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
Manifest number: 7B
Signing time: Wed 24 Dec 2025 03:49:04 +0000
Manifest this update: Wed 24 Dec 2025 03:44:04 +0000
Manifest next update: Thu 25 Dec 2025 06:49:04 +0000
Files and hashes: 1: 323830343a363535343a3a2f33322d3438203d3e20323639343833.roa (hash: TZWtfH5ij650ijLBJ9vtX7taN3u/arKIvGUt+j4npdE=)
2: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl (hash: tehj0ioTy9hH4LpFIrIOo1kLAWVkwN4+1PSZwhfYg9Y=)
3: 34352e3138372e32302e302f32322d3234203d3e20323639343833.roa (hash: fmu9Yn5/C/J+YfUZLc8KQ7P9FB91xBYqIaeFNXI3FjY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl
rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 06:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:88:6c:38:01:72:2c:fd:dd:b5:e2:4f:f1:0d:1b:d8:2f:0d:38:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1
Validity
Not Before: Dec 24 03:44:04 2025 GMT
Not After : Dec 25 06:49:04 2025 GMT
Subject: CN=8CF1CDED8142672563C188FE2A93F28972AEED94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:af:01:c9:2e:80:58:0e:63:8f:fb:ed:43:
ad:88:9e:7c:1e:e1:c3:6f:20:c0:f6:c3:4e:41:c7:
6e:b0:57:84:6b:e0:2d:6b:bf:0f:b6:e3:da:6b:72:
a7:81:64:e6:48:1f:04:5b:5f:f4:1f:36:4e:55:da:
f9:ab:b9:8c:56:ed:2a:2a:59:de:2f:7a:02:e8:7e:
af:a5:92:9b:35:a5:7a:a9:13:91:d8:18:2b:10:83:
9d:ee:32:28:4e:f2:75:07:7f:c1:ad:7e:c3:59:53:
30:41:21:3d:d0:4c:e8:f2:9f:47:2f:73:8d:76:76:
f2:d0:d1:69:45:77:59:3b:b7:bb:b2:f1:94:71:f3:
1f:8e:2a:2e:f5:4c:e6:e7:a8:de:21:14:18:26:9a:
56:83:4f:2f:87:17:74:0b:3f:34:4c:0a:97:d3:ee:
c6:13:c3:2e:30:50:bb:31:13:bc:a3:f8:ae:32:57:
20:d7:11:0a:dc:01:31:0b:e9:47:d1:9e:ac:c4:a7:
a1:80:dd:61:85:d2:d3:53:e3:ec:fb:31:d9:96:31:
bd:c1:b6:00:f8:c8:30:0c:f2:66:16:a4:b6:49:75:
73:cc:2f:db:e3:16:81:c1:b6:65:3e:03:f7:ca:a7:
83:7c:b9:4f:ed:4d:b3:d7:c0:c2:c4:a8:0b:19:39:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:CD:ED:81:42:67:25:63:C1:88:FE:2A:93:F2:89:72:AE:ED:94
X509v3 Authority Key Identifier:
keyid:CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a2:69:f3:9b:98:96:bd:c6:e4:02:c2:5f:c9:2d:75:17:9d:
95:be:e3:74:42:f7:d7:1c:0d:e8:89:8b:e6:6c:4a:8e:00:87:
43:f7:44:5c:df:fa:8a:a4:a1:e8:25:be:b3:dd:60:0a:f4:71:
5d:8c:51:45:a1:81:7c:2c:d1:0e:97:b9:78:ee:0e:9c:72:d0:
0f:0d:0f:5b:46:ce:20:5e:cf:2c:f8:2d:79:56:55:1e:ef:fd:
4c:b3:45:da:f7:1a:45:c4:75:23:1b:e8:1d:f8:07:56:0a:6e:
0c:81:90:4e:6d:a7:53:64:23:07:45:20:7b:d3:a7:12:ae:b1:
45:71:27:d0:3f:04:ee:e3:60:22:77:67:d7:ac:aa:4d:2c:06:
5c:38:d7:e1:27:87:ad:8e:ca:e8:bf:20:d3:9d:ae:09:ce:f7:
9c:cc:ee:de:a7:9b:52:ad:f8:0a:57:f9:ce:32:9f:17:06:9c:
89:ec:5f:dd:21:8c:ad:f2:33:1c:0f:a8:e1:6f:7e:9d:f2:1c:
ed:28:ef:ea:38:b6:0f:74:b4:7c:fe:32:b4:2e:55:12:32:44:
51:68:67:3e:f3:0c:a0:7b:91:13:30:b9:7d:f6:c2:84:6f:4b:
2b:b3:28:f9:4d:56:14:de:b5:b3:7d:ee:96:88:5d:30:32:df:
38:66:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:46 2025 by rpki-client