This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
File: 0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft (raw, json)
Hash identifier: 9d1SKvv/xvzcoATiOnjhdBV+Ve/XDzb6Vdfv2XXrQc0=
Subject key identifier: 68:EE:7F:AE:5D:7C:F4:93:DD:04:C3:24:78:F6:BC:B8:6F:1F:67:42
Authority key identifier: 0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58
Certificate issuer: /CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
Certificate serial: 6E8D0B68B7361384DA306B48E162C0EAB7DC2972
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
Manifest number: 0143
Signing time: Wed 24 Dec 2025 04:22:53 +0000
Manifest this update: Wed 24 Dec 2025 04:17:53 +0000
Manifest next update: Thu 25 Dec 2025 07:04:53 +0000
Files and hashes: 1: 3139322e3134312e3138342e302f32322d3332203d3e20323637343733.roa (hash: +HOrbWsIeWd5kgSYjNjFVYSR8P1o1dE9sv1nHGV2r60=)
2: 323830343a343230383a3a2f33322d313238203d3e20323637343733.roa (hash: sau3ZA+uFSmmFUIuKDRztWOtW+waliROsZZFvV4FudU=)
3: 0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl (hash: iuuyjloOgg//ec2OBWuyXNj49RRnqAHFj8XF9VPX3O8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl
rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 07:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8d:0b:68:b7:36:13:84:da:30:6b:48:e1:62:c0:ea:b7:dc:29:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
Validity
Not Before: Dec 24 04:17:53 2025 GMT
Not After : Dec 25 07:04:53 2025 GMT
Subject: CN=68EE7FAE5D7CF493DD04C32478F6BCB86F1F6742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:c6:e9:4c:af:2c:eb:f3:54:2c:b1:59:31:
d1:f8:90:b5:f9:fb:b7:fd:fd:ba:3f:a0:4e:ca:21:
ef:53:f2:7b:43:a2:df:46:34:f1:70:13:00:7d:ff:
24:d1:bf:fc:24:1f:78:7b:08:c1:08:0b:bc:23:6c:
bf:a4:3c:7c:2d:3b:ec:bc:96:c8:e1:59:b1:e1:9f:
a5:2f:e1:d2:f8:6e:aa:5c:15:20:ae:de:a7:ea:ba:
5d:59:0a:27:2a:46:a6:8c:69:a5:e8:9e:ef:e0:e2:
8e:77:c3:57:72:e9:63:41:48:8b:6c:ff:21:68:a2:
ae:8b:23:6f:5c:fc:80:fc:7e:cf:93:7e:e2:99:83:
c4:8f:aa:c3:6b:25:ed:42:30:e8:db:1e:5f:9e:5d:
82:02:8d:a3:29:04:de:02:be:08:28:ad:e4:6e:58:
d5:36:11:18:11:67:e7:2c:db:09:fa:54:4e:9f:e2:
54:8b:79:ca:f0:47:42:d8:d4:ed:a2:c5:3f:4a:91:
38:1c:d2:4b:16:04:de:d4:f7:5b:07:de:52:a5:a3:
ed:11:31:25:e6:50:01:fe:66:67:51:f7:a6:c2:0a:
fc:13:82:71:fe:64:d4:8e:70:b1:d7:aa:03:b9:ef:
dc:8e:f6:27:ae:8e:56:c1:e9:c6:ee:04:1d:4f:c0:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:7F:AE:5D:7C:F4:93:DD:04:C3:24:78:F6:BC:B8:6F:1F:67:42
X509v3 Authority Key Identifier:
keyid:0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:84:23:9e:a5:1c:19:82:89:43:2f:a4:29:e7:d5:18:f4:87:
c4:4f:6d:f4:f0:b7:86:37:31:c4:40:b0:52:91:d4:46:d8:a3:
0f:38:43:a0:09:50:76:d3:e3:37:5b:e3:1a:4b:99:94:7d:43:
f2:82:a3:a1:9b:75:2b:de:6d:9c:6f:79:cf:55:24:0a:9e:7e:
47:05:58:d7:a0:bc:c4:12:45:47:5a:f5:42:02:da:a5:1a:77:
3a:fe:f9:08:92:c3:1a:66:84:b5:a4:ad:dd:09:a8:de:1d:56:
52:db:cc:e3:f4:29:0d:a4:78:2a:54:8c:86:bb:7a:c2:45:32:
28:43:c9:0b:b1:96:d8:da:f3:17:5c:5a:8b:a9:74:41:38:c5:
3d:ad:95:5e:39:a0:c6:d3:13:2a:85:1e:1b:02:61:da:f8:54:
3d:98:7d:99:6c:84:cf:2f:9f:5b:c3:61:d2:99:a9:95:78:12:
8e:9f:f4:99:81:20:2b:27:93:04:31:a2:3d:bd:1b:0b:d1:8b:
63:e6:70:d1:bd:45:19:e5:66:15:5c:fe:5a:da:db:d9:7a:b9:
26:6d:84:a2:34:91:a2:16:7b:22:e4:b2:0c:93:19:3b:a7:ac:
e0:2d:9a:97:cc:14:67:72:5e:f2:59:7e:a7:b2:2e:5a:32:27:
84:9c:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:16:42 2025 by rpki-client