This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
File: 98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json)
Hash identifier: Tu5rrt/eranAikTzIxielUtKozpM2I2wK+gDWB4Uo98=
Subject key identifier: 97:CC:75:E7:D2:3B:70:F4:47:95:90:30:BF:63:AF:30:DD:FA:1C:B3
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Certificate issuer: /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial: 265B89970EDAE60E20FF968A4F90549D4585CB63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
Manifest number: 0342
Signing time: Sat 20 Dec 2025 10:13:12 +0000
Manifest this update: Sat 20 Dec 2025 10:08:12 +0000
Manifest next update: Sun 21 Dec 2025 10:45:12 +0000
Files and hashes: 1: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: uZx6MKqpTg13sIPZCAlz9trqbeJwgRlXEg00ldqRU1M=)
2: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: YqZ3SJPT6Xcqs9peUTXMNxMHIB0EzaAQ68UaAdgZNVs=)
3: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: qnBH4Ns76Q3Nb/TjCWTO4WOFunIPsbeT64MpQ7fLuY4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 10:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5b:89:97:0e:da:e6:0e:20:ff:96:8a:4f:90:54:9d:45:85:cb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Validity
Not Before: Dec 20 10:08:12 2025 GMT
Not After : Dec 21 10:45:12 2025 GMT
Subject: CN=97CC75E7D23B70F447959030BF63AF30DDFA1CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:86:4f:d8:cd:b4:13:fa:36:5c:e6:1f:40:
27:15:cd:e2:2c:00:98:0c:f7:01:dc:c9:63:a0:9d:
a1:49:c8:00:d1:aa:38:49:21:51:92:63:62:2c:91:
23:ca:ce:82:ea:5b:e7:58:81:ea:03:16:1d:3c:57:
ab:d3:d2:87:66:ef:2a:7b:a4:7b:f4:ad:1d:bd:41:
98:b6:5e:9f:7e:dc:f9:2e:92:b3:bf:51:8a:ce:17:
f0:1a:bf:a5:70:45:0c:a4:42:11:e9:63:b0:cd:6a:
6a:5f:82:a8:c5:99:7e:59:b4:7d:56:9a:cb:92:55:
ed:7e:76:b7:d3:df:74:73:2b:ab:bb:b2:a4:8a:93:
b0:3f:9d:73:53:3e:ca:ae:59:21:81:a0:cc:41:59:
21:c1:ac:fb:a9:0f:26:7b:76:2c:0b:3d:68:1c:c4:
b8:1d:1e:a9:18:e4:22:ce:85:39:a3:f4:8d:73:3a:
18:1d:b1:9f:f5:26:0c:7c:c1:67:e0:19:11:ec:dc:
61:68:5e:25:2e:d1:fb:63:d7:3c:25:55:39:22:ef:
03:7d:c3:2b:c0:88:97:85:7c:b6:37:42:af:00:12:
ca:4f:46:3c:80:2b:3d:76:26:40:c3:a2:10:f0:ae:
52:4d:e2:bc:c7:c6:c4:cc:f6:20:d6:80:d6:cb:49:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CC:75:E7:D2:3B:70:F4:47:95:90:30:BF:63:AF:30:DD:FA:1C:B3
X509v3 Authority Key Identifier:
keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bb:f3:af:77:7b:ee:50:2a:c1:a0:e2:75:86:aa:3f:5a:f1:
8a:d5:8c:ef:a3:43:d5:38:f6:ff:f4:36:d4:08:27:07:d0:88:
cc:7d:da:4d:94:e7:1b:1d:76:50:4f:99:ea:72:44:21:2d:e2:
a7:ab:1a:6f:43:6a:f6:a8:1f:b4:4e:55:82:91:a9:73:98:5c:
aa:b7:ec:1f:a0:24:db:98:86:1b:08:81:05:01:f1:0d:50:4f:
2f:63:64:4e:69:c1:5b:9f:9f:05:f7:13:b8:15:ec:21:3c:c5:
b9:c9:a7:5d:f7:38:ef:48:f5:4f:3c:e6:5e:60:ee:a7:01:f5:
7f:e3:d9:ad:79:c0:79:93:18:71:10:17:e3:6d:91:65:55:d8:
f4:d1:94:1c:97:2d:ba:c5:6a:90:ac:8b:7d:71:a1:fc:7a:15:
d3:d1:1c:68:32:84:21:39:1b:41:67:26:d6:cc:47:c0:2f:33:
a2:df:42:79:5e:b1:95:53:dd:7a:f2:3e:97:93:86:0c:75:79:
38:08:a9:39:98:08:6a:99:76:ad:66:97:6f:6e:ca:ce:61:97:
17:d9:68:c8:72:1f:72:4b:00:be:39:da:8d:68:aa:95:4c:b3:
32:2a:c6:d7:ab:1b:40:c8:85:42:dd:5b:06:ef:e9:6c:ea:7f:
5d:b0:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:34:46 2025 by rpki-client