This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json)
Hash identifier: AqXL8TU4kwr/mxy64v0OvaV1DtUIDXkfYB7lubBTIrw=
Subject key identifier: 75:2A:CF:D9:67:AC:50:74:AE:76:A2:1F:A4:8A:33:60:0D:AB:F6:E5
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial: 4226C847F21FD92CA6722C5E4CB89B8BF264C3C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
Manifest number: 034A
Signing time: Tue 23 Dec 2025 02:57:27 +0000
Manifest this update: Tue 23 Dec 2025 02:52:27 +0000
Manifest next update: Wed 24 Dec 2025 03:22:27 +0000
Files and hashes: 1: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=)
2: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=)
3: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: jknnpXflD9t6uZtlkHZfBaShxc5Ivryz19OpAO1dbLk=)
4: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 03:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:26:c8:47:f2:1f:d9:2c:a6:72:2c:5e:4c:b8:9b:8b:f2:64:c3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Validity
Not Before: Dec 23 02:52:27 2025 GMT
Not After : Dec 24 03:22:27 2025 GMT
Subject: CN=752ACFD967AC5074AE76A21FA48A33600DABF6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:36:18:d3:b6:ef:02:99:69:4b:b1:33:40:
b5:31:ad:a6:9b:1a:89:b8:97:78:74:4c:64:7f:fe:
30:c0:37:79:7c:c5:04:1c:f5:07:21:1f:87:1b:40:
fb:5a:db:47:be:75:8c:8b:31:7a:e7:c3:1e:54:bb:
66:de:b5:55:81:e9:36:c6:d6:d8:7c:47:fb:0b:fb:
33:cc:93:c1:c5:5d:62:47:aa:3b:0d:88:46:9d:69:
97:28:c4:2d:20:fd:e8:6a:49:e5:b0:96:b8:f8:14:
2a:27:08:2c:61:0b:c4:b5:84:18:9a:ea:da:17:71:
28:09:0e:ff:27:75:ac:e9:88:f7:11:1f:f1:54:05:
ac:b7:32:97:5a:4a:42:de:3d:9b:62:65:e1:71:b8:
33:40:7c:51:29:48:25:34:4b:3c:05:31:70:00:c3:
57:a0:f5:bc:e9:ef:62:0b:08:a1:eb:79:72:d7:2e:
2f:71:0b:70:d4:b9:b9:70:1c:73:6a:22:6a:0e:d3:
1a:1c:4d:f2:44:18:4b:05:5f:73:3b:7f:8e:0d:8f:
32:88:cd:5d:02:b1:a3:9f:89:3a:40:db:1d:25:37:
d2:29:21:4f:c0:ed:3b:8d:f3:47:11:f3:f5:46:11:
1c:62:11:a6:f2:7a:90:70:96:9c:bc:cb:19:d2:1a:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:CF:D9:67:AC:50:74:AE:76:A2:1F:A4:8A:33:60:0D:AB:F6:E5
X509v3 Authority Key Identifier:
keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:60:a1:ed:78:43:27:62:5b:3a:77:84:9c:58:56:b8:f2:69:
43:dc:38:9d:19:f8:74:ad:20:6e:76:33:a0:b6:f5:dc:90:8b:
5f:c3:22:3a:ea:70:5f:9c:95:cd:7f:c2:7a:19:a5:c8:33:a1:
99:cf:62:4d:90:cd:53:d6:83:99:97:58:ac:91:37:0f:92:f7:
8b:38:ab:ca:90:19:5b:61:42:88:db:1a:e2:aa:f6:1f:84:50:
59:82:9e:07:4c:6a:5f:c4:25:72:09:39:35:e4:29:0a:ba:d1:
aa:9d:fa:1f:93:89:18:82:3b:f0:a9:92:01:87:67:5e:32:e5:
89:06:6e:99:32:e9:3b:7b:58:f6:e2:75:7b:db:08:f1:cd:48:
da:e0:94:33:d4:09:62:e1:ed:85:d9:a3:44:64:69:85:00:38:
5e:02:16:b9:55:42:36:56:5b:44:e6:48:52:79:ce:71:ad:89:
98:8b:90:cb:80:c2:15:cc:dd:65:63:6b:03:24:5e:ba:eb:2c:
fd:c3:c9:ed:df:8a:69:d6:18:24:8f:69:62:b6:bd:e1:67:7f:
99:ff:f9:7e:5d:29:b7:d3:cd:9c:44:6f:1f:38:01:d1:91:2a:
7d:c3:79:c8:a0:92:a2:0d:20:61:be:81:ec:ba:af:c9:4f:1e:
15:f2:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:43:36 2025 by rpki-client