This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
File: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json)
Hash identifier: 78GjyDRii+7M/jwNkEWgCk7xRha7Hpmxtp5JyipybTk=
Subject key identifier: DF:C2:20:AD:6C:6E:35:45:CC:F9:1A:EE:A6:FA:5C:44:36:DB:B4:E3
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Certificate issuer: /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial: 0F59E467C88534D208FF7AC62102DEE6BE0E60BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
Manifest number: 7A
Signing time: Tue 23 Dec 2025 20:06:17 +0000
Manifest this update: Tue 23 Dec 2025 20:01:17 +0000
Manifest next update: Wed 24 Dec 2025 22:09:17 +0000
Files and hashes: 1: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=)
2: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: FOsQVUwUDl+rvYKt7CF7ev39SFzM9ShAU1kRm0XPA1U=)
3: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 22:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:59:e4:67:c8:85:34:d2:08:ff:7a:c6:21:02:de:e6:be:0e:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Validity
Not Before: Dec 23 20:01:17 2025 GMT
Not After : Dec 24 22:09:17 2025 GMT
Subject: CN=DFC220AD6C6E3545CCF91AEEA6FA5C4436DBB4E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:3d:35:9e:18:7a:12:e4:02:25:ca:62:00:
e4:39:c1:bf:ef:60:bc:0e:78:72:2b:f7:3b:37:15:
0d:f2:6c:c5:55:8a:b5:90:9a:ea:d0:40:de:cd:b0:
d0:f6:65:63:b2:21:5f:f2:2c:46:60:21:76:cd:e1:
91:01:82:5c:31:b2:55:df:e8:61:75:07:6f:82:0f:
bf:c5:8f:85:bb:54:28:1e:1d:46:60:7d:ba:0b:01:
e9:b7:5d:55:b6:62:c6:12:aa:94:23:3b:d5:35:06:
57:09:86:89:da:e5:3b:a9:bf:65:d1:6d:54:a9:df:
e9:a2:ec:a7:d6:3f:05:82:fd:9c:69:45:f8:06:91:
a4:6d:6d:21:3c:40:53:35:4b:71:61:3b:59:64:56:
e6:7e:39:01:f8:a0:af:d9:3c:84:6d:25:2c:df:25:
92:df:f0:a2:c6:de:7a:60:8c:87:78:00:81:33:66:
23:2e:d3:25:58:e2:04:ea:0b:f3:05:34:1b:e4:a1:
17:bf:ff:95:ef:8a:0c:0e:0d:94:b2:4a:8c:9b:d3:
81:ea:a6:b9:85:2f:4c:80:76:bd:fc:90:9c:86:38:
14:fb:f4:4f:4c:af:01:8f:68:41:5c:33:34:cb:a2:
0a:81:f6:2f:60:e9:f3:f1:4b:e2:7a:db:88:ef:d7:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:20:AD:6C:6E:35:45:CC:F9:1A:EE:A6:FA:5C:44:36:DB:B4:E3
X509v3 Authority Key Identifier:
keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:34:ee:a7:65:80:26:a9:58:18:29:61:69:d8:c4:55:38:d7:
35:ac:2d:2f:39:a6:be:f2:7d:e6:40:6d:51:ae:b5:bc:eb:19:
b9:b4:5b:e1:97:7e:b7:9c:d2:e9:da:b4:3e:5c:8f:c1:a3:4f:
49:a8:0e:5b:b3:aa:78:90:8a:c0:d1:75:a3:4b:22:16:ef:9f:
65:d1:e3:51:39:23:8f:1a:64:fb:0d:10:51:6e:c5:c9:7b:8c:
19:85:42:2d:56:0d:d2:fe:88:2d:f8:36:af:39:cb:a1:34:e3:
e9:d4:a7:e1:94:ea:a2:29:8f:5a:1e:51:ad:f5:a2:6a:e5:ec:
bc:31:5f:d4:bf:60:43:50:9e:25:c2:6d:60:04:f6:df:d3:24:
99:30:e1:73:c3:d5:64:0e:3f:45:56:00:f1:b6:ee:1f:a3:55:
4f:e9:31:6f:59:2a:05:93:32:4a:d0:f0:1f:ab:47:6f:7a:ec:
df:55:91:1f:89:ab:a4:a1:9b:81:73:6c:8d:33:68:7f:90:0a:
f1:81:a0:9a:80:9e:22:91:75:ba:58:3d:2a:1e:5e:60:2f:09:
35:f2:f1:b8:e8:af:a6:d6:f3:79:62:c6:c7:6a:0d:fb:4a:f3:
da:44:d5:68:9b:80:d0:e5:2d:dd:24:18:95:00:e8:cc:58:c3:
55:d9:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:25:48 2025 by rpki-client