This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
File: 8FBA71A8DD4044953FA3772B55E18831A51A7141.mft (raw, json)
Hash identifier: IJlG2weXSufDkuDIacVRONm3gdnVcynGyKrAjSaNq3o=
Subject key identifier: 21:E1:45:4D:0A:6C:58:63:1D:2C:87:03:2A:23:BD:D5:3C:3E:CF:97
Authority key identifier: 8F:BA:71:A8:DD:40:44:95:3F:A3:77:2B:55:E1:88:31:A5:1A:71:41
Certificate issuer: /CN=8FBA71A8DD4044953FA3772B55E18831A51A7141
Certificate serial: 7102E89F719D6AFF1E355436753B3EA276DC512E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
Manifest number: EA
Signing time: Fri 19 Dec 2025 01:26:44 +0000
Manifest this update: Fri 19 Dec 2025 01:21:44 +0000
Manifest next update: Sat 20 Dec 2025 04:23:44 +0000
Files and hashes: 1: 8FBA71A8DD4044953FA3772B55E18831A51A7141.crl (hash: fSsFRAl4vJDJCIeJdCtG+6eOIFulRdRjYOUZ5G3RxYI=)
2: 323830343a376131383a3a2f33322d313238203d3e20323731333437.roa (hash: RiT+Jr/qWk/mKEE5Yn7Gn/093I92rwAI8YyPWCFq+rM=)
3: 3230302e35332e39322e302f32322d3332203d3e20323731333437.roa (hash: BhaKMGiMRINJbaGhZ3UAep4X1IaToSKNjiFwtH7hrIM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.crl
rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 04:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:02:e8:9f:71:9d:6a:ff:1e:35:54:36:75:3b:3e:a2:76:dc:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FBA71A8DD4044953FA3772B55E18831A51A7141
Validity
Not Before: Dec 19 01:21:44 2025 GMT
Not After : Dec 20 04:23:44 2025 GMT
Subject: CN=21E1454D0A6C58631D2C87032A23BDD53C3ECF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:27:65:70:66:35:a2:0b:5c:2b:58:6d:fd:
4c:c6:58:f6:3f:fb:49:da:e3:34:64:3a:e7:28:49:
00:cc:6b:20:85:90:75:df:0f:8c:f6:97:e5:af:fe:
52:48:ae:af:6f:cf:b0:56:0d:f8:ab:19:a3:2e:7e:
79:41:9d:ac:c0:70:81:01:51:ac:14:83:1d:b8:8e:
d0:7e:1f:b7:a8:0c:15:11:a8:1e:26:b4:b5:54:7f:
df:7f:6f:c3:27:fe:31:41:39:a7:58:44:d4:29:3e:
c7:29:d3:93:79:61:f9:c9:ac:ab:ee:9d:90:ce:9a:
c9:6f:75:41:46:80:d8:0e:c2:c3:b5:4f:ed:17:ef:
ab:e7:40:3f:b5:ad:20:fa:68:11:81:c4:b3:75:52:
99:1b:a4:a2:01:84:a8:bc:6c:b5:dc:50:c3:da:b9:
26:04:5f:46:b4:f7:c6:1c:43:8f:68:f9:71:aa:aa:
30:97:45:3a:28:fe:1c:8f:9d:c1:0a:a7:63:ba:a3:
2a:2e:0f:c4:7c:fe:d1:fe:8f:f2:cc:d2:03:af:6b:
44:39:91:aa:22:01:87:2c:b2:a3:79:f3:e6:4a:7c:
59:d8:5c:28:e7:25:c4:0e:47:fc:7b:b3:ca:ed:24:
14:46:be:8c:83:82:af:84:bc:d1:f6:d7:d3:1b:db:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:45:4D:0A:6C:58:63:1D:2C:87:03:2A:23:BD:D5:3C:3E:CF:97
X509v3 Authority Key Identifier:
keyid:8F:BA:71:A8:DD:40:44:95:3F:A3:77:2B:55:E1:88:31:A5:1A:71:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:db:16:13:a5:31:2b:b6:95:06:05:18:30:9d:ca:7a:ce:
cf:a3:bb:fa:b2:25:6b:b1:28:e5:76:41:22:1f:60:28:47:9f:
05:2c:b7:b4:11:be:8e:f0:04:98:c5:82:f6:6e:b8:8d:2a:ab:
dc:62:e5:da:d2:a9:6b:26:c8:89:f2:5f:43:8c:a6:70:d6:f3:
95:e5:63:5a:52:4c:80:72:e5:fb:8f:79:4d:4f:89:04:7d:3f:
dc:57:c8:8d:9f:46:e7:fb:0d:90:e7:c9:61:d9:11:76:3c:d9:
4a:76:03:63:98:15:c7:5e:cf:33:11:a0:d0:cf:19:f8:99:5a:
94:b2:14:ae:7f:8d:8c:57:e0:b6:c6:4a:05:86:c8:47:05:a5:
2f:3c:86:41:d0:19:d9:4e:1e:66:1d:f4:fd:12:5b:ab:e5:cc:
6b:1e:dc:79:b9:e1:72:d4:43:c1:77:8e:95:43:f2:43:e8:6d:
81:c0:31:dc:9e:19:fc:f7:59:8e:27:a9:45:c8:8a:c3:59:55:
47:2c:62:32:ac:f1:c8:e8:db:60:7f:42:28:b7:6c:e3:07:7e:
93:fe:65:49:5b:f2:6b:60:10:5d:d7:d0:bc:55:c9:f8:80:cc:
97:46:0a:33:d6:46:5f:5f:38:7f:59:9a:b5:7d:9e:92:70:24:
d3:da:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:25:57 2025 by rpki-client