This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
File: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft (raw, json)
Hash identifier: DeATmcCD8hmVry6CndkFwc4hvBY89T+RoIuKCuX8qHw=
Subject key identifier: 20:9E:56:CA:02:24:58:27:F4:81:C7:38:22:5D:15:87:C1:44:F3:6A
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Certificate issuer: /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial: 2FF2E133A332504CD326BE9828D854AAF334164A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
Manifest number: 021E
Signing time: Mon 22 Dec 2025 06:34:53 +0000
Manifest this update: Mon 22 Dec 2025 06:29:53 +0000
Manifest next update: Tue 23 Dec 2025 09:30:53 +0000
Files and hashes: 1: 3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (hash: nVS1ig476qeVEp3ktQ874Yh7cQPZ9tR3j/G5N42qT4o=)
2: 323830343a323533633a3a2f33322d313238203d3e20323634323637.roa (hash: lJfA/yR5OSfz2uZV5mR5QEGG1Hs/os0F7/PG4G01w8o=)
3: AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl (hash: MKmxZvh63Pi9Ei1JPxh6Y775VoqYCJa2NBgFuODlw8s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 09:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f2:e1:33:a3:32:50:4c:d3:26:be:98:28:d8:54:aa:f3:34:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Validity
Not Before: Dec 22 06:29:53 2025 GMT
Not After : Dec 23 09:30:53 2025 GMT
Subject: CN=209E56CA02245827F481C738225D1587C144F36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:b8:8c:97:71:c2:6b:79:3e:bc:79:98:7f:
66:b7:0b:9e:d7:4f:f6:6f:b0:9f:bc:43:d2:84:96:
1e:b4:8c:44:7e:ac:ab:de:50:92:83:cc:19:26:ee:
d8:7c:08:f5:e6:b2:c6:bf:05:88:1e:18:ba:a5:fa:
c4:b2:11:e0:a2:2c:a7:aa:4e:4e:7c:fd:a3:05:cc:
d3:15:74:54:70:30:2b:2a:c9:08:24:5f:5f:90:31:
1a:6f:61:3f:a2:67:bc:cd:0c:76:78:2c:58:1c:cb:
ba:c6:c6:17:8f:0d:67:5a:1b:79:5b:3d:46:34:4a:
cb:bb:79:96:cc:2c:f6:ea:0a:28:6d:ce:e3:29:94:
e1:05:d7:39:1b:b8:82:ca:eb:8e:3c:c8:ad:ff:9f:
3f:0d:f9:44:36:86:d9:92:d1:6c:da:97:76:b4:44:
53:21:87:56:02:12:45:ee:ae:7a:27:55:55:29:ce:
31:31:3b:5e:0f:4a:d1:5f:d0:17:6e:d7:ed:10:70:
f0:4f:5a:33:1b:ec:5c:c4:37:86:e4:d2:c9:18:5e:
24:07:09:5a:92:c4:ec:f0:a2:7d:64:be:3b:5e:fe:
b2:54:b0:d8:44:15:92:fc:79:ef:b9:a6:de:4a:23:
58:e5:d9:65:ce:28:82:76:8f:9b:14:ca:a4:4e:4f:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:56:CA:02:24:58:27:F4:81:C7:38:22:5D:15:87:C1:44:F3:6A
X509v3 Authority Key Identifier:
keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:0c:d9:1b:27:ae:e7:2f:32:3b:6c:44:8e:96:2c:57:30:
2f:61:03:c9:93:43:aa:f0:d6:71:de:2d:db:a6:4a:36:59:45:
71:ec:2b:33:71:78:0c:60:ed:10:8a:c5:26:5e:af:af:f5:3c:
5a:80:ac:0b:1f:3f:69:8f:6c:e5:5e:b8:a9:bc:49:7f:fc:e8:
5b:7e:7d:e3:e8:3d:8a:41:5c:21:52:65:9b:4a:9c:21:52:51:
ee:02:01:70:bc:e1:4c:72:76:de:81:18:11:16:af:e5:63:0f:
4e:10:b5:87:1d:0d:ce:0c:0a:78:08:a7:a8:af:1f:ae:ca:5d:
b1:00:05:73:0e:99:7e:b0:6d:aa:51:63:e0:17:c7:08:17:61:
e6:76:27:15:7f:42:49:3a:12:0c:a3:3e:fc:25:c5:0b:3f:1d:
c3:af:cb:39:4f:b9:c4:0b:de:b8:72:50:e9:8e:13:81:fb:a4:
3d:a5:fd:0b:f1:4c:41:d0:be:b7:eb:b2:b2:0f:b8:c6:28:3e:
b6:f2:a9:1e:a4:60:68:a7:0e:41:5c:70:1b:97:cd:57:26:b1:
72:53:1b:43:11:e8:86:9f:e7:f1:2b:18:54:51:2e:9d:13:f1:
e4:a2:aa:0b:73:d8:71:06:71:4d:59:e3:bd:69:0a:28:98:77:
a0:ed:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:48:59 2025 by rpki-client