This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft
File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json)
Hash identifier: U3uhn95gi3+GqNBIyPHjww9zC5tsnkswuLP/lfC+4Y4=
Subject key identifier: CC:FD:14:08:2F:3D:70:D2:B5:12:09:93:C1:AD:C2:8D:9F:48:95:56
Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74
Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74
Certificate serial: 58F68C230C5ED4D7463718A5649D6B2CFD76CEAD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft
Manifest number: 0347
Signing time: Wed 24 Dec 2025 08:03:38 +0000
Manifest this update: Wed 24 Dec 2025 07:58:38 +0000
Manifest next update: Thu 25 Dec 2025 08:14:38 +0000
Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=)
2: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=)
3: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: KlIxzXCdaUOq02Wlwz92/behtEye1/kP33j4DhP6gpY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl
rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 08:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f6:8c:23:0c:5e:d4:d7:46:37:18:a5:64:9d:6b:2c:fd:76:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74
Validity
Not Before: Dec 24 07:58:38 2025 GMT
Not After : Dec 25 08:14:38 2025 GMT
Subject: CN=CCFD14082F3D70D2B5120993C1ADC28D9F489556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:dc:5c:57:93:a3:82:f5:35:4e:78:ec:14:
68:c6:d8:9e:09:fe:86:6e:a8:2a:0d:c9:76:8d:a5:
78:12:c3:19:ec:ff:78:38:21:99:2e:52:ba:58:94:
67:26:1b:30:57:fd:52:ed:fa:4c:f4:5c:e3:b3:09:
b1:6b:1b:cb:4f:6a:da:d5:94:f4:3f:3b:75:36:18:
e0:96:cd:b8:e6:77:65:e1:1a:9f:f3:d0:9a:7f:c8:
3f:92:b7:90:c2:ff:ea:47:61:45:14:d6:cc:ca:81:
5e:f9:d0:08:af:9e:46:f9:fe:37:0e:80:68:0b:81:
ca:31:68:d2:f7:16:bf:d4:1f:3b:7d:6b:e3:49:2a:
ce:f4:d0:ab:5d:10:fa:63:5f:81:dd:60:7e:10:20:
90:a9:54:50:03:4c:48:71:80:f0:f6:7f:4f:d5:37:
a3:a8:91:2a:a9:64:4c:ea:c1:22:38:7e:de:a1:57:
99:60:50:34:98:e4:a0:b7:2e:58:53:8c:68:60:10:
ae:9b:dd:b9:38:b0:ec:2f:be:1d:07:e8:04:9c:35:
15:9e:ef:89:8d:13:79:18:8e:19:d9:d0:42:2b:bc:
ab:8b:09:d5:dd:e9:18:39:c3:d7:2b:0b:0b:4a:36:
2b:ab:a6:45:be:cb:b2:5f:78:57:ae:13:61:7a:c6:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:14:08:2F:3D:70:D2:B5:12:09:93:C1:AD:C2:8D:9F:48:95:56
X509v3 Authority Key Identifier:
keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8f:b0:4d:f6:45:bc:b9:d0:46:92:c6:28:71:c1:03:b1:66:
f6:06:1f:db:68:08:e9:08:98:f6:35:7d:37:9c:09:b1:9c:30:
1d:8c:e1:d6:3f:3e:0b:8b:4d:c7:04:d7:51:34:56:18:fc:fd:
ac:d8:7b:54:02:6a:5a:3d:1c:18:e8:71:9d:45:7d:f8:7c:bf:
92:94:22:04:86:d8:86:05:11:62:60:1e:9e:21:cc:b6:6d:a1:
66:23:38:50:45:e8:df:c1:78:28:b4:bd:90:94:ec:9a:0a:68:
72:91:fc:d1:e7:10:d6:6a:ef:ef:81:45:fe:95:1e:ae:86:a5:
6d:f7:a6:e4:43:45:ee:96:4f:bb:18:26:e5:62:02:94:2b:ab:
b6:3c:f6:4b:83:db:ae:53:5f:0a:3b:5b:5f:69:c4:89:62:66:
2d:d1:7b:67:8d:ca:8b:48:0e:2a:32:4a:82:46:35:f1:39:d8:
3d:57:9e:70:01:98:2d:e0:67:f0:94:6c:a5:16:42:17:cb:c6:
8a:db:e1:f2:0c:cb:c1:a8:9f:c2:56:56:ea:82:ef:0d:6b:14:
cb:f8:4b:88:f3:1e:bb:c3:b8:48:2a:75:1a:f6:07:8f:7d:40:
61:0f:ce:1e:25:0b:be:06:92:b2:00:c3:51:4f:04:c0:dc:5f:
f7:ba:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:06:06 2025 by rpki-client