This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
File: 2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft (raw, json)
Hash identifier: VK0bfs9lp8VfvohriHVUGUecVDGgmMB6mxqLEi3QYxQ=
Subject key identifier: 77:CA:76:6C:E9:1F:C5:F4:38:27:16:FF:82:1F:21:E3:2E:EC:D3:2E
Authority key identifier: 21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC
Certificate issuer: /CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC
Certificate serial: 10BE0467475B1AB3A51E618BD567FB5261DA71CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
Manifest number: D1
Signing time: Wed 24 Dec 2025 02:34:04 +0000
Manifest this update: Wed 24 Dec 2025 02:29:04 +0000
Manifest next update: Thu 25 Dec 2025 04:57:04 +0000
Files and hashes: 1: 323830343a363731343a3a2f33322d3438203d3e20323639363032.roa (hash: TGVWsGNJFdug9RaukeBlnbFOq0S5LHWB8/5b2RXmLXE=)
2: 34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa (hash: gAWQ8M9C1wzgTODsoLIiZ6lqQhw33L9/YHKUnfKHE4M=)
3: 2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl (hash: qoXcCX+NzDfTawT4IXvJWKZiva5IL9QzHN/lZLkasME=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl
rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 04:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:be:04:67:47:5b:1a:b3:a5:1e:61:8b:d5:67:fb:52:61:da:71:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC
Validity
Not Before: Dec 24 02:29:04 2025 GMT
Not After : Dec 25 04:57:04 2025 GMT
Subject: CN=77CA766CE91FC5F4382716FF821F21E32EECD32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:16:92:e8:a2:6e:d2:66:c0:ab:97:02:86:
8e:74:ed:a0:97:c4:83:0c:3c:b9:6d:0a:00:5f:9d:
10:f3:f4:09:62:86:e5:8a:5f:44:ca:fc:e9:97:e7:
ef:e1:ff:f5:05:c8:f3:e5:93:c3:56:2b:c5:79:fb:
a8:bd:b7:09:4b:98:29:44:6c:7c:e5:cd:b8:38:88:
17:21:8c:63:6a:79:26:27:f0:d2:cd:16:ac:3f:ae:
43:3a:d5:15:0a:5a:05:04:62:e6:78:ff:92:f0:00:
05:aa:fc:70:b2:f2:77:7e:ab:4a:28:26:6b:43:cd:
27:b0:3b:9e:16:c7:5d:0e:39:cf:33:ff:ec:0f:4e:
ff:be:d6:83:21:69:fb:e7:41:9c:70:6a:7d:0c:17:
b2:66:64:83:b0:cc:9f:d8:4c:08:45:d2:b0:ca:e2:
e0:8b:93:fd:0f:45:3f:31:7a:4e:1f:27:42:24:9d:
7b:b4:31:1e:d0:8a:de:01:98:86:36:8a:d3:80:fb:
e6:53:a8:43:59:5e:4c:0b:f1:c1:b3:3b:40:81:2f:
07:9f:eb:8a:11:fb:74:81:fc:cd:cd:e7:bf:61:76:
f1:74:83:f1:18:99:32:95:cd:24:16:21:b9:6e:f7:
5d:ea:57:ba:90:bb:a5:54:ba:f2:55:cf:ac:d9:e6:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:76:6C:E9:1F:C5:F4:38:27:16:FF:82:1F:21:E3:2E:EC:D3:2E
X509v3 Authority Key Identifier:
keyid:21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:58:43:19:5a:b5:c9:b0:73:1e:66:cf:f2:a5:76:17:c6:5c:
f4:e2:70:ac:ae:9c:1a:f9:4d:fe:1a:bf:9c:20:3e:0e:2f:3d:
35:20:6c:23:75:d7:c7:2c:f8:24:dc:37:9f:b6:77:f2:9e:5d:
6f:18:1d:b4:46:28:99:91:e3:10:05:8e:e6:eb:41:8c:c3:b0:
d7:03:d7:d1:bd:1c:11:42:ae:8c:2b:b8:cf:54:b1:c6:dd:71:
57:21:cd:ce:2d:98:af:07:72:d2:18:8f:5d:d6:9e:16:02:ed:
40:aa:24:59:88:3c:8f:f4:21:0d:f1:20:31:a8:b2:65:7f:67:
3d:5a:09:39:b5:01:f4:81:2f:24:4d:e3:f1:2c:62:5c:c8:8f:
56:c9:ce:49:d8:05:a6:9b:1e:56:38:4c:59:25:c1:f9:2d:61:
d4:7f:93:d6:02:ee:7f:d1:a9:87:a1:25:ec:56:65:77:4f:78:
8b:a9:99:a8:5b:38:9b:20:44:76:2f:17:b5:68:39:61:36:29:
3e:ad:72:e8:4c:43:8f:d8:84:f2:46:78:f7:25:e7:3a:0b:51:
32:ba:f6:7d:e5:fc:55:06:2d:de:41:65:49:49:0d:ce:d4:dd:
d6:eb:00:16:43:3d:ec:d8:fe:fb:8f:eb:ab:3c:9a:b4:77:d5:
e0:0d:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:05:06 2025 by rpki-client