This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
File: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft (raw, json)
Hash identifier: 7drojOB//qs5WvbStJBVwn+cWabaG+2ULou2xcqMN6E=
Subject key identifier: 08:DC:18:A4:1A:77:FF:F0:CF:8C:65:4A:0B:53:C3:45:C8:DA:C5:D8
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Certificate issuer: /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial: 29A764F47521AC02EA98FBE71AA3A226649F77C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
Manifest number: 0342
Signing time: Tue 23 Dec 2025 05:50:00 +0000
Manifest this update: Tue 23 Dec 2025 05:45:00 +0000
Manifest next update: Wed 24 Dec 2025 08:22:00 +0000
Files and hashes: 1: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: /I5vajGjFQQ7M9n3lu24TssVjqdIlopWk+bSOlpSkFE=)
2: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: ODfMmaHbZE0gEskMRFLRp3jCARbHA/qcQoXVqBzR2ik=)
3: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl (hash: XufMGO6zcZ7aXT1c/VXzYqRy6Mj7duS2IU6dQXO9oY8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 07:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a7:64:f4:75:21:ac:02:ea:98:fb:e7:1a:a3:a2:26:64:9f:77:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Validity
Not Before: Dec 23 05:45:00 2025 GMT
Not After : Dec 24 08:22:00 2025 GMT
Subject: CN=08DC18A41A77FFF0CF8C654A0B53C345C8DAC5D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c9:f3:a2:81:d0:d6:80:4a:7c:b0:09:fe:c7:
43:d4:6c:e8:b4:e5:3c:dd:7b:bd:b5:a0:10:a9:cf:
e8:ab:fb:c2:fd:0f:5e:69:b8:68:51:8c:95:89:52:
c7:77:6b:9f:75:44:c0:9c:29:de:b7:6e:f3:2e:66:
26:36:54:64:d0:df:ae:35:08:16:6d:bb:8e:92:47:
05:fb:c8:df:a7:3e:2e:96:05:7c:5a:47:52:ce:c1:
b7:58:f3:2c:c5:ff:72:c2:20:53:a6:00:61:35:ce:
78:a1:50:90:22:8b:d0:c0:a1:f4:83:8f:1f:31:c2:
69:aa:04:20:85:32:b5:b2:84:d3:61:b2:1b:f6:ad:
7c:88:7d:5c:26:6a:dd:99:f5:b6:75:dd:0b:17:7a:
b8:12:9d:1d:56:27:c1:43:db:2f:47:4c:fc:70:ee:
58:81:88:ea:e3:a7:e3:d4:76:1a:6b:bf:6d:a2:73:
06:03:9d:91:54:30:6c:23:b5:cd:0f:76:b5:de:09:
05:73:50:a6:5f:fc:33:63:f0:79:87:54:49:9e:ae:
36:d7:a4:70:ec:0b:75:3e:c1:e3:f1:8a:ee:a5:b0:
92:55:cb:17:cf:95:9e:fb:95:ec:39:67:16:a3:5e:
e6:2e:47:ae:08:46:ea:e4:5d:c4:cf:51:b4:44:59:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:18:A4:1A:77:FF:F0:CF:8C:65:4A:0B:53:C3:45:C8:DA:C5:D8
X509v3 Authority Key Identifier:
keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:85:99:8a:06:a0:c7:73:9d:7b:a5:86:84:2f:6f:a9:6b:
31:4f:56:68:0e:43:71:b0:db:27:78:b7:33:07:f7:3f:06:3f:
75:54:cf:85:6f:4c:bd:4a:4c:1b:39:e7:a2:c9:14:06:37:fa:
fd:46:3e:ad:c1:11:d6:af:33:de:44:04:f8:12:5a:4a:d5:73:
34:7d:c5:30:15:38:b3:8a:53:a4:0c:52:cf:c0:e2:1f:3c:cf:
ba:c8:28:6e:a5:0a:55:68:de:62:b4:0b:93:90:bb:a3:f6:e7:
b1:cd:e3:45:d1:fb:ac:5f:ef:1d:7a:43:36:df:6a:dc:3f:24:
30:0a:88:bb:6c:a2:df:67:95:50:db:0a:39:d0:71:a3:df:25:
03:28:bd:a6:43:23:53:95:4d:c7:41:10:cf:92:cb:ed:fd:f9:
81:63:d3:92:09:77:7e:4c:a8:da:40:6a:ce:83:35:ce:98:ec:
60:2b:6f:f2:99:74:f5:21:7d:fa:a4:f9:4b:18:17:cd:8e:44:
82:ba:f1:3c:90:67:09:79:3b:e4:30:9a:12:73:17:36:37:74:
e8:a5:d3:7d:b3:37:e8:0e:52:c6:d4:6a:59:4f:8b:e9:d4:10:
bc:5d:79:3b:ad:c2:ef:52:8f:05:e8:24:63:37:94:67:3d:55:
ea:f0:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:41:58 2025 by rpki-client