This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft
File: BD11125724CB8C5430E605E8628C6235B0ECD037.mft (raw, json)
Hash identifier: 8R7tyl7iQ2eENisSWRb8T++nj65tidyPs7ckckDvHK8=
Subject key identifier: C4:1A:74:FD:3C:7A:55:FE:20:BC:51:5D:6D:AC:43:7C:D1:C9:75:F9
Authority key identifier: BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37
Certificate issuer: /CN=BD11125724CB8C5430E605E8628C6235B0ECD037
Certificate serial: 700FD42994BC5C7245C3C1425BE28C721D965503
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft
Manifest number: 014F
Signing time: Mon 22 Dec 2025 20:10:11 +0000
Manifest this update: Mon 22 Dec 2025 20:05:09 +0000
Manifest next update: Tue 23 Dec 2025 22:08:09 +0000
Files and hashes: 1: 3137372e35322e33322e302f32322d3332203d3e20323632343336.roa (hash: RtrsE+xGCCVr2chEHvLdQ7AT5f/sRQG9Zyqj0JzNMs0=)
2: 3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa (hash: +AusLg2SKOw9O5wiWzX6vgr5NojjKfN8e30wCraIzYo=)
3: BD11125724CB8C5430E605E8628C6235B0ECD037.crl (hash: 6TtrmbaUDPxNoY+iUO/6Tu1cIM8B1FaV5CBKOB5lHgM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl
rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 22:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0f:d4:29:94:bc:5c:72:45:c3:c1:42:5b:e2:8c:72:1d:96:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD11125724CB8C5430E605E8628C6235B0ECD037
Validity
Not Before: Dec 22 20:05:09 2025 GMT
Not After : Dec 23 22:08:09 2025 GMT
Subject: CN=C41A74FD3C7A55FE20BC515D6DAC437CD1C975F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:b7:03:14:a5:9d:3e:b2:b6:03:00:ce:98:
83:4c:ea:34:49:64:ba:96:7f:9e:a3:6a:d4:d1:76:
da:72:4d:7e:24:07:aa:df:fb:31:2b:a2:b2:0a:5e:
d5:5a:bd:3a:ba:af:54:d0:15:ef:92:81:c5:ec:17:
84:44:ea:69:99:1a:8c:f2:cf:01:46:aa:29:04:29:
4b:6d:bf:7b:42:64:b9:3c:93:a0:f6:5a:37:ef:ee:
83:2d:f2:91:df:c2:89:1c:e9:35:7c:a4:fa:46:ce:
c6:11:d6:d1:68:3a:47:78:77:8e:03:39:51:a3:06:
62:96:87:8d:a0:59:95:1b:9d:16:73:29:79:b3:d7:
7b:08:af:49:04:f4:c6:b6:51:14:fb:b8:df:f2:77:
38:29:2f:83:02:c3:90:42:59:9a:e4:5e:2b:90:51:
3c:6f:db:19:9b:6a:7a:b2:bf:ed:48:24:3a:d9:c1:
05:73:be:9f:ec:66:42:5e:b0:31:3a:ba:1d:89:cb:
18:ba:08:27:ef:b4:a7:d6:f3:6b:85:4b:ac:92:ca:
b3:52:2a:01:f4:ee:d2:1b:0d:b0:72:3b:aa:22:e6:
8d:0c:4a:0a:5c:64:41:b0:ab:6f:cb:da:71:cd:12:
6d:ee:e2:85:a3:54:19:d1:72:61:fb:24:65:89:44:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:74:FD:3C:7A:55:FE:20:BC:51:5D:6D:AC:43:7C:D1:C9:75:F9
X509v3 Authority Key Identifier:
keyid:BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:ea:e1:72:86:98:9d:7c:3f:3f:09:c5:78:c6:82:84:8b:
d9:d1:e7:52:37:41:5a:a4:da:6b:80:c6:dc:8d:e5:df:10:18:
f3:9c:23:88:4f:d2:2b:fa:3a:00:2f:d7:2d:2a:af:9d:83:71:
36:1c:36:ff:82:d6:2e:c3:05:00:89:fe:7f:71:23:67:b8:91:
cd:95:50:53:e0:ed:c2:86:02:55:2a:c5:5d:84:cd:0a:f3:f7:
f5:8a:32:f8:c0:74:9d:46:58:05:bc:b4:37:ed:0b:c4:23:51:
47:b5:23:0c:a3:fa:3a:66:36:52:e5:a5:7e:73:83:64:cb:1c:
0a:31:06:b5:10:68:cb:c4:38:9e:e6:7a:42:17:4b:ba:b8:1d:
85:b9:4c:46:b9:7b:b5:91:d9:40:99:38:34:f5:b7:ea:b0:02:
23:c9:88:42:bd:21:7c:3d:42:72:ee:e1:f3:ce:8f:93:0d:17:
fb:8c:49:ad:e0:3b:93:9a:c0:48:35:b1:24:2c:1c:fc:0e:03:
c2:9b:08:28:1c:9b:21:da:b5:eb:8c:95:ed:2c:e0:48:c4:14:
dc:74:e5:dc:ce:79:c4:af:26:4f:4c:66:a8:fb:89:1d:af:3e:
2f:19:79:28:78:ac:85:c4:39:65:25:17:fe:1d:45:8b:ce:96:
79:64:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:25:34 2025 by rpki-client