This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json)
Hash identifier: yKo6e5jHIBBSPybnHP7CC1Wnkgy+txXYCZ34KfSAl7A=
Subject key identifier: E2:7E:EE:BF:82:9D:A4:6C:C2:F9:E0:B3:5C:F7:FF:6D:EB:CE:33:F5
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial: 49E65FFE0F7889912ECF4B98A48A569BECB7372F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
Manifest number: 0344
Signing time: Tue 23 Dec 2025 22:25:40 +0000
Manifest this update: Tue 23 Dec 2025 22:20:40 +0000
Manifest next update: Thu 25 Dec 2025 00:30:40 +0000
Files and hashes: 1: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=)
2: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=)
3: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: E4rws40fAIw3Kcw9jaLO6uSBffYU6GY52HZ/ZTRH10Y=)
4: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 00:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e6:5f:fe:0f:78:89:91:2e:cf:4b:98:a4:8a:56:9b:ec:b7:37:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Validity
Not Before: Dec 23 22:20:40 2025 GMT
Not After : Dec 25 00:30:40 2025 GMT
Subject: CN=E27EEEBF829DA46CC2F9E0B35CF7FF6DEBCE33F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:f8:36:b0:46:a7:bc:ce:e3:fc:fd:8f:27:
cc:5f:96:84:09:ff:51:97:b2:5f:5e:a8:1a:d9:a1:
82:df:17:48:70:a7:3f:fe:da:6a:13:81:0b:c7:f2:
bc:ea:53:c8:39:5a:99:5a:4f:9b:f1:46:36:d2:d1:
92:b5:3f:e5:5c:eb:c2:ab:af:68:e0:fc:4b:59:47:
1d:7e:fc:fc:5e:48:cb:3c:15:1c:bc:b6:07:1a:23:
7a:02:d3:05:7d:79:4d:c7:6d:95:98:06:15:f5:b6:
bf:cc:e3:18:a4:78:1f:62:0f:c4:f7:32:ec:70:5a:
b1:86:dd:f6:41:50:8e:ac:48:3b:0a:de:c7:de:c2:
33:30:27:4f:66:22:1a:6b:1f:ea:8d:ca:44:6f:24:
33:b3:e7:7e:47:f3:23:7f:ef:f2:ce:24:84:e4:62:
4c:95:40:c7:15:74:9d:68:6e:c9:67:fc:63:e4:39:
bd:a7:a0:91:84:5f:14:76:2d:28:d6:98:38:c4:d7:
af:d8:fc:7b:41:51:07:f7:00:13:dd:f2:d8:28:5b:
de:01:db:bf:9b:ca:aa:a9:eb:87:dd:80:6d:71:f1:
0f:0e:6d:3a:82:10:79:7f:10:73:49:a9:f8:dd:51:
6e:4b:9f:af:f8:d6:25:e8:8c:4c:4e:ab:05:f6:e0:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:EE:BF:82:9D:A4:6C:C2:F9:E0:B3:5C:F7:FF:6D:EB:CE:33:F5
X509v3 Authority Key Identifier:
keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e7:2a:5a:4b:a3:31:cc:11:1c:28:30:d1:56:32:2c:e9:30:
68:92:23:31:78:3d:2f:df:c1:75:82:36:23:9c:5a:f5:54:f1:
06:9d:5f:1d:b6:48:d2:d7:db:cd:a8:9e:71:c1:e8:e8:02:45:
78:49:b1:d3:7e:ad:43:32:8a:3a:d4:87:46:36:16:31:98:96:
71:19:2d:7d:e0:7d:f6:4d:54:3c:84:fd:30:61:f8:2b:c9:38:
e5:e3:d3:5f:f5:ae:fd:c5:f4:c9:21:32:4e:de:58:30:a3:7e:
9d:f6:44:28:b7:f7:5f:e7:88:b5:43:22:b5:e0:24:84:97:f8:
ab:2d:39:12:bb:73:60:46:8e:b6:00:cb:2e:b2:be:8d:35:7b:
e7:6e:9c:0e:3f:0e:eb:a8:a1:fd:74:ba:5e:59:bc:94:07:12:
8b:e9:18:08:e2:95:03:4f:9c:af:86:d7:eb:bc:e1:02:d8:59:
b3:db:ac:44:9c:66:53:cd:9e:d1:9b:70:cc:c0:e6:3f:98:0e:
c0:4d:e2:e3:37:44:64:bf:f6:67:04:ff:bf:08:2f:97:46:3b:
38:8d:46:2c:f5:5e:44:b0:8a:43:1d:5f:2e:cf:da:7d:43:60:
2a:f1:d3:f6:bb:23:02:b4:e1:b5:c2:c5:a2:8d:64:e4:e0:d7:
02:f3:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:26:43 2025 by rpki-client