This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
File: BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft (raw, json)
Hash identifier: QJsVcQhErTQgyYSLXOdYJi+s6D/CY4wy7Ne8MstxIdQ=
Subject key identifier: 29:A9:36:C1:39:4C:44:62:7D:B4:28:43:A1:00:40:D5:75:14:35:E4
Authority key identifier: BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
Certificate issuer: /CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Certificate serial: 1996C533E129D21638BFB53BFFE7EEA48EF8AB04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
Manifest number: AD
Signing time: Tue 23 Dec 2025 05:52:30 +0000
Manifest this update: Tue 23 Dec 2025 05:47:30 +0000
Manifest next update: Wed 24 Dec 2025 06:16:30 +0000
Files and hashes: 1: 323830343a363830303a3a2f33322d3438203d3e20323639363634.roa (hash: qfb6AfqGl8bOQeHXD/A3gn8XVKh+t8Os//kVhwqFnkU=)
2: BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl (hash: ErVTFQ7G3FqXqpH8OradJK466yPaGf5Ei7PcidUegqw=)
3: 34352e3139312e32302e302f32322d3234203d3e20323639363634.roa (hash: DjdMDcke6ilnD8tmmfgHtUJXmWqTF52hHf84c4Ol0mc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 06:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:96:c5:33:e1:29:d2:16:38:bf:b5:3b:ff:e7:ee:a4:8e:f8:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Validity
Not Before: Dec 23 05:47:30 2025 GMT
Not After : Dec 24 06:16:30 2025 GMT
Subject: CN=29A936C1394C44627DB42843A10040D5751435E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:8d:aa:2f:af:66:c1:9b:b7:9e:81:77:8e:
df:7d:e9:b4:b0:9f:52:9f:0e:25:13:9b:ed:06:5f:
1c:76:cf:3f:5a:6a:ea:3a:8f:70:f2:9c:eb:20:00:
65:17:b5:2f:b0:67:a6:dc:78:18:d7:ef:31:32:e1:
d5:e8:52:49:74:71:09:3c:4d:d9:3b:48:44:b0:db:
c9:33:70:19:88:8e:81:a2:30:52:db:3e:4a:a9:f4:
91:c4:c6:ce:54:a2:56:bb:ee:f9:69:24:8b:53:38:
2f:5c:ae:14:01:76:83:8b:a3:59:e4:a1:22:af:38:
55:78:cd:30:f3:45:20:32:ed:2b:57:61:94:93:e1:
f5:88:15:d1:0a:75:30:0b:eb:18:4c:0f:64:cd:b8:
ad:96:e9:a2:bd:fb:cc:49:4d:56:d9:23:a1:45:06:
b1:20:97:22:f6:73:e8:13:f2:f0:d7:cd:8e:04:6b:
83:70:7b:e4:c4:39:46:d1:94:3f:5d:48:30:4e:ba:
a7:3f:81:83:e5:a9:36:20:73:6c:84:29:71:ba:2b:
5b:4f:d4:29:44:8f:cc:62:55:5d:0e:14:0e:d3:68:
49:87:bf:ab:49:6d:4c:21:9f:0b:c7:a4:07:bf:b0:
23:09:a3:a4:76:83:75:d1:05:23:2e:fc:40:f7:87:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:36:C1:39:4C:44:62:7D:B4:28:43:A1:00:40:D5:75:14:35:E4
X509v3 Authority Key Identifier:
keyid:BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ca:56:4d:05:b8:69:dd:5d:44:05:cc:61:56:02:2a:39:3f:
99:12:fe:83:a2:36:2c:c9:de:2b:bb:8b:07:28:cc:63:67:3f:
5a:3c:dd:e5:72:8d:77:6b:41:44:79:6f:14:85:5c:51:a4:ab:
86:29:8b:a0:2d:0c:e6:df:cb:e6:47:6f:93:4e:1c:6d:45:3c:
3d:b3:7f:ef:92:57:f9:b4:e4:d8:c9:53:ca:b9:58:55:8a:1e:
67:f8:95:ac:d6:de:39:cb:2e:ad:53:32:53:5c:9e:05:81:c6:
5c:3d:e9:be:24:5d:a4:26:c4:b4:c3:b3:2e:b4:b4:0b:7d:88:
90:eb:2a:8b:c3:62:a5:c0:36:96:fa:19:95:46:ca:35:28:08:
97:f0:1c:61:a4:50:67:88:fd:92:7a:17:50:85:3d:45:7c:fb:
01:d6:0d:c8:ce:2a:31:61:34:ae:ce:bb:79:06:0b:1d:87:1a:
6b:39:2e:d1:c3:8e:9f:e7:c0:8e:33:77:a9:a8:12:38:62:e0:
0c:e0:a3:88:c5:f6:5f:7a:14:53:e2:fa:4d:1e:22:2e:95:bf:
7b:60:55:d9:c7:63:71:d8:49:fb:90:63:df:81:a1:d1:97:8d:
cd:35:ef:d1:43:05:ba:b2:79:ba:71:0c:b9:e5:12:83:84:fd:
cf:98:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:34:31 2025 by rpki-client