This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft
File: D74EFE2D47A320A7B31005AF365FC275085C95CE.mft (raw, json)
Hash identifier: BU/1PqTEfU6db6ayzYPIffXXf49yD7TcNfvRNAocrZE=
Subject key identifier: A7:32:16:1A:C3:4F:6F:CE:F3:13:EF:53:CC:8C:DB:7C:7B:E3:0F:48
Authority key identifier: D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE
Certificate issuer: /CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
Certificate serial: 65B1BF7BF1F614C52251BE44F31B6DB43B7ECF03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft
Manifest number: 0342
Signing time: Sun 21 Dec 2025 09:28:32 +0000
Manifest this update: Sun 21 Dec 2025 09:23:32 +0000
Manifest next update: Mon 22 Dec 2025 10:53:32 +0000
Files and hashes: 1: 323830343a383132343a3a2f33322d3438203d3e20323732343335.roa (hash: cbf4PO3OBqGOnJbDUnRHTBHlU5wNzjzc1TuUDxP7Kak=)
2: 3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (hash: amnmfn2/lMKCh7Kl+GlEk8dTLAe/ObrWGr1dPWGiiqg=)
3: D74EFE2D47A320A7B31005AF365FC275085C95CE.crl (hash: MSvdFsvKoAdrRwk6yknElghi2yotBNeeHiiD1oGtdgM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl
rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 10:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b1:bf:7b:f1:f6:14:c5:22:51:be:44:f3:1b:6d:b4:3b:7e:cf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
Validity
Not Before: Dec 21 09:23:32 2025 GMT
Not After : Dec 22 10:53:32 2025 GMT
Subject: CN=A732161AC34F6FCEF313EF53CC8CDB7C7BE30F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:e3:89:ac:1f:de:6e:33:aa:3d:65:6d:84:
54:6f:15:41:a3:ae:16:e8:80:e0:1e:34:75:fd:19:
0a:51:20:1c:83:4d:81:13:a0:33:d1:a8:0d:20:e1:
7b:ff:58:fc:cf:c0:36:55:55:c4:86:f3:af:2e:11:
0d:0e:eb:e3:c3:9b:df:db:11:90:d8:4a:db:90:a3:
eb:55:23:b7:a3:0b:90:ae:31:8d:30:e4:66:df:7b:
cd:45:db:ad:01:0f:d6:6d:b1:18:90:c0:db:b7:e7:
f4:7b:c9:e0:6d:28:38:f3:b8:04:4c:cc:b5:84:9f:
b4:5e:19:cf:60:23:b9:85:ef:2e:26:16:e4:f0:65:
ab:0f:78:33:1a:74:44:a6:de:57:f6:63:b0:c8:14:
e8:6b:f8:61:df:0d:cb:97:ea:f3:51:63:75:9a:78:
be:60:28:18:24:9b:5d:7c:70:1a:58:a7:28:88:7a:
a9:83:63:3c:b7:fc:9b:a8:c3:24:a5:88:e4:c7:eb:
53:01:a5:42:6d:95:78:42:9b:80:bd:cb:3b:30:d3:
38:fb:b9:38:83:9e:d9:cb:75:58:9f:24:6f:58:04:
f4:35:ae:f3:ab:4e:06:b8:9b:f6:34:20:04:bf:19:
91:12:05:b0:d1:be:00:50:2c:58:e8:57:6f:e2:bc:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:32:16:1A:C3:4F:6F:CE:F3:13:EF:53:CC:8C:DB:7C:7B:E3:0F:48
X509v3 Authority Key Identifier:
keyid:D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:1a:01:8e:65:f0:a3:30:e9:03:4e:76:3d:6d:d2:f3:a3:
57:6b:e1:4f:33:89:8e:27:cd:44:b5:96:fb:e6:1b:47:2f:72:
50:06:b2:7e:13:c3:8a:5d:71:5f:e8:3c:0b:74:c0:8c:b6:03:
f4:3d:01:7c:f6:8c:47:da:02:89:44:d3:48:2c:bc:9c:64:12:
3e:8d:b1:ff:ee:8c:cd:33:a3:5b:52:45:4d:0b:b1:b4:36:db:
bd:7b:12:92:e5:91:6a:3e:f2:77:cb:77:46:ee:11:c0:b9:54:
9b:d8:87:49:57:27:a8:7b:e8:8a:91:37:6c:f6:f8:a8:2e:89:
0c:ec:1a:c7:75:ec:82:34:13:2e:6a:85:3c:77:b9:2b:56:ae:
aa:b3:b9:ec:8d:c0:56:05:18:1f:f2:18:ad:c7:27:c2:91:1a:
56:08:fb:de:e1:a6:31:80:19:01:d6:20:4f:4b:79:fe:5a:d9:
7c:03:1f:ac:e5:c8:ac:96:4d:5f:2b:ce:b3:48:bf:10:dc:59:
03:ea:6d:39:00:f1:eb:6b:82:43:f1:96:44:8b:c7:df:94:e0:
1e:4d:72:6a:ed:16:03:49:d3:31:c7:78:23:c3:a0:73:0a:f1:
64:43:42:3f:dc:af:12:58:02:de:27:6a:fe:b8:c9:5f:fe:c0:
cf:26:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:40:07 2025 by rpki-client