This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft
File: D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft (raw, json)
Hash identifier: lKSLB+CDNUEFmgjK47Qxla1PvqQ2Oi9HMM5CYgOqrL8=
Subject key identifier: 11:38:66:FE:53:CD:58:6E:F0:FD:35:B8:2E:95:23:5D:32:98:5A:4C
Authority key identifier: D2:9B:42:90:8C:C2:9F:32:94:64:DE:38:C3:D0:3C:B9:E6:3C:3D:C5
Certificate issuer: /CN=D29B42908CC29F329464DE38C3D03CB9E63C3DC5
Certificate serial: 138B59F9A86AF17D6F5EFB9F097B9385555E50B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft
Manifest number: 4F
Signing time: Wed 24 Dec 2025 10:34:13 +0000
Manifest this update: Wed 24 Dec 2025 10:29:13 +0000
Manifest next update: Thu 25 Dec 2025 11:57:13 +0000
Files and hashes: 1: 323830343a343638303a3a2f33322d313238203d3e20323636393933.roa (hash: LHvIW3ECSdm40+1I40OKH3SRqiRIU0hBxVlWoFKTcqs=)
2: 34352e3232362e3130382e302f32322d3332203d3e20323636393933.roa (hash: Z6xp+ak0v8Qyp2vmtOALPsuo4K6cHKyMKGNHL8CfwuE=)
3: D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl (hash: VkOrvfJwBYclx04GUelI3Hr7G9lAA7fX5YqjZIKo8dU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl
rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 11:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8b:59:f9:a8:6a:f1:7d:6f:5e:fb:9f:09:7b:93:85:55:5e:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D29B42908CC29F329464DE38C3D03CB9E63C3DC5
Validity
Not Before: Dec 24 10:29:13 2025 GMT
Not After : Dec 25 11:57:13 2025 GMT
Subject: CN=113866FE53CD586EF0FD35B82E95235D32985A4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:6d:9b:41:66:6f:c9:ed:04:09:90:12:1b:
e9:89:d8:fd:a6:25:4e:03:7c:31:87:6f:0a:fa:c7:
f8:69:42:27:ff:eb:ef:05:ef:3d:b2:8b:ef:81:24:
49:55:57:c5:5e:0b:ed:ef:b0:cc:69:3b:30:88:d2:
dd:c5:8b:65:6c:7d:d6:d8:26:29:bd:98:0a:af:7e:
c9:74:f4:df:e4:fe:df:2c:b1:97:85:b2:03:e9:e5:
e8:24:35:61:02:15:46:52:3d:a4:cf:61:ef:ac:36:
55:4e:7a:40:90:c9:83:e1:3b:71:ee:be:e9:47:f9:
5d:1b:08:a2:d1:73:0a:bc:6e:19:9c:20:40:82:02:
31:4f:49:a7:52:5c:70:e5:09:ad:59:be:0e:92:f5:
06:ca:99:88:c3:8a:19:a4:09:09:06:25:d3:14:1b:
51:d9:7f:18:af:53:8f:e8:c0:49:aa:bd:3d:f4:84:
13:a5:c4:40:21:fd:a4:06:f6:ba:b1:4d:cb:65:08:
2c:72:e0:e8:83:86:11:27:e8:55:3d:cb:b0:fd:59:
64:83:ab:6c:05:96:96:b0:25:d1:ae:44:14:01:99:
50:91:21:73:a2:49:eb:1d:6a:31:b1:b9:c7:63:9b:
e3:05:33:34:61:77:9b:6d:6c:1f:a8:60:4a:7f:c2:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:66:FE:53:CD:58:6E:F0:FD:35:B8:2E:95:23:5D:32:98:5A:4C
X509v3 Authority Key Identifier:
keyid:D2:9B:42:90:8C:C2:9F:32:94:64:DE:38:C3:D0:3C:B9:E6:3C:3D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0f:3d:5b:e0:d4:66:fe:62:59:97:3a:d8:5c:3f:91:1d:ad:
b6:93:77:55:30:71:38:d2:5c:d3:4b:fc:a9:44:04:f2:5a:8c:
5f:dc:64:26:ea:21:96:0f:6c:54:69:3d:76:c1:8b:6c:20:98:
d5:56:d7:1e:21:83:f6:8e:4d:17:0e:16:c3:cd:9a:fe:f1:81:
f3:b3:8e:73:69:ee:19:3b:a6:8b:cc:41:9a:96:10:28:c5:4e:
61:67:6c:49:79:ba:26:1b:bb:87:22:27:3b:b6:c1:51:f6:58:
e0:39:01:90:aa:94:c2:78:d5:e7:2a:bd:2e:95:8d:c8:a6:ce:
3e:81:a7:23:b4:54:04:99:fc:3b:e4:52:07:2f:51:75:8a:d7:
40:de:09:34:36:19:b0:53:e5:1c:77:b5:aa:1e:f7:46:24:a7:
42:af:db:bb:db:bf:0d:2f:f3:95:09:0b:73:03:7d:a4:90:a9:
ac:0b:6d:04:0a:4e:06:b8:1b:f3:01:d7:79:76:79:76:5c:c5:
c4:70:d5:05:07:19:40:2e:e9:8f:9e:2d:c2:0f:f7:42:fa:78:
69:86:3c:35:b9:44:53:66:40:db:82:34:58:09:1d:d5:91:95:
07:03:57:84:2a:25:4b:7a:fb:df:dd:97:c1:07:fe:3c:4d:96:
84:a1:95:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE4tZ+ahq8X1vXvufCXuThVVeULQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5QjQyOTA4Q0MyOUYzMjk0NjRERTM4QzNEMDNDQjlF
NjNDM0RDNTAeFw0yNTEyMjQxMDI5MTNaFw0yNTEyMjUxMTU3MTNaMDMxMTAvBgNV
BAMTKDExMzg2NkZFNTNDRDU4NkVGMEZEMzVCODJFOTUyMzVEMzI5ODVBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxd22bQWZvye0ECZASG+mJ2P2m
JU4DfDGHbwr6x/hpQif/6+8F7z2yi++BJElVV8VeC+3vsMxpOzCI0t3Fi2VsfdbY
Jim9mAqvfsl09N/k/t8ssZeFsgPp5egkNWECFUZSPaTPYe+sNlVOekCQyYPhO3Hu
vulH+V0bCKLRcwq8bhmcIECCAjFPSadSXHDlCa1Zvg6S9QbKmYjDihmkCQkGJdMU
G1HZfxivU4/owEmqvT30hBOlxEAh/aQG9rqxTctlCCxy4OiDhhEn6FU9y7D9WWSD
q2wFlpawJdGuRBQBmVCRIXOiSesdajGxucdjm+MFMzRhd5ttbB+oYEp/wuGtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEThm/lPNWG7w/TW4LpUjXTKYWkwwHwYDVR0j
BBgwFoAU0ptCkIzCnzKUZN44w9A8ueY8PcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWRXMnRndkNoQmZpc0pYOTcyWFZjNWZ1a2U5RlRNMmNEYXN0dFlOQUV4
N3EvMC9EMjlCNDI5MDhDQzI5RjMyOTQ2NERFMzhDM0QwM0NCOUU2M0MzREM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOUI0MjkwOENDMjlGMzI5
NDY0REUzOEMzRDAzQ0I5RTYzQzNEQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWRXMnRndkNoQmZpc0pYOTcyWFZjNWZ1a2U5RlRNMmNEYXN0dFlOQUV4N3EvMC9E
MjlCNDI5MDhDQzI5RjMyOTQ2NERFMzhDM0QwM0NCOUU2M0MzREM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiQ89W+DUZv5iWZc62Fw/kR2ttpN3VTBxONJc00v8qUQE8lqMX9xkJuohlg9s
VGk9dsGLbCCY1VbXHiGD9o5NFw4Ww82a/vGB87OOc2nuGTumi8xBmpYQKMVOYWds
SXm6Jhu7hyInO7bBUfZY4DkBkKqUwnjV5yq9LpWNyKbOPoGnI7RUBJn8O+RSBy9R
dYrXQN4JNDYZsFPlHHe1qh73RiSnQq/bu9u/DS/zlQkLcwN9pJCprAttBApOBrgb
8wHXeXZ5dlzFxHDVBQcZQC7pj54twg/3Qvp4aYY8NblEU2ZA24I0WAkd1ZGVBwNX
hColS3r7392XwQf+PE2WhKGVNg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:24 2025 by rpki-client