This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
File: 0F44F5750AB24A7D6E844281A724F470994C316E.mft (raw, json)
Hash identifier: 0zc3Tsn5+t3Y9JMjkPRHzbTEVTjHCH9NYhI6Hg/jdEQ=
Subject key identifier: CD:6E:35:12:1B:10:67:93:1C:31:16:E8:16:BA:D6:47:C0:B1:E3:F9
Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E
Certificate issuer: /CN=0F44F5750AB24A7D6E844281A724F470994C316E
Certificate serial: 293AD1E0832BEDB5458326554A98BA024201F519
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
Manifest number: 01E7
Signing time: Sun 21 Dec 2025 12:48:22 +0000
Manifest this update: Sun 21 Dec 2025 12:43:22 +0000
Manifest next update: Mon 22 Dec 2025 12:55:22 +0000
Files and hashes: 1: 34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa (hash: YdoF+7d38TupvLHfFFGrLqea38RQ20/TNcHeY4fDrqo=)
2: 323830343a343564343a3a2f33322d3334203d3e20323636393532.roa (hash: CXzNb4G2GphJ1TIFeCdVumYJctK0+mEXyMAVo+V69Ek=)
3: 0F44F5750AB24A7D6E844281A724F470994C316E.crl (hash: M+GmZc7rKcvKNCaq8NZK0l4AzwaTeaFRVOqxgvHYvBs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl
rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 12:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3a:d1:e0:83:2b:ed:b5:45:83:26:55:4a:98:ba:02:42:01:f5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E
Validity
Not Before: Dec 21 12:43:22 2025 GMT
Not After : Dec 22 12:55:22 2025 GMT
Subject: CN=CD6E35121B1067931C3116E816BAD647C0B1E3F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:97:44:39:48:4c:bc:ba:2e:29:a9:aa:5d:
02:a0:4d:75:67:b4:17:47:c2:67:1c:80:b5:d5:65:
21:47:bc:0b:7d:47:aa:3e:d7:e1:a5:a3:54:c8:cb:
13:b0:66:71:4b:08:fd:5f:4c:cc:2e:4a:3a:31:bd:
d7:fb:63:58:a7:80:d9:af:b4:3c:c2:4f:cd:2a:d6:
42:5c:2b:e8:67:f2:22:a7:d0:8d:12:22:ba:6c:da:
d3:4e:1e:78:fe:1e:27:fb:9d:d0:29:1f:b3:68:95:
36:1c:32:08:e3:75:7d:92:79:f3:96:d0:74:c1:8f:
0f:43:cd:e2:b8:5a:b2:ac:b9:a0:7a:8a:22:60:05:
78:b9:4e:5f:3b:3e:6d:57:5c:41:28:d8:91:2f:6c:
81:19:7d:7a:22:e9:52:ac:2e:3c:fe:1a:5f:c7:32:
c3:af:9d:d4:07:5b:c8:52:53:0a:af:68:98:55:4a:
76:72:b4:c9:f4:ab:60:fd:b0:7f:5b:70:de:a9:a0:
6d:f2:59:0f:5f:c3:3a:25:77:78:dd:cb:98:6f:43:
b4:24:00:4b:26:fa:8f:1b:4e:11:a7:b5:dd:10:c6:
04:77:17:da:42:ec:71:89:c5:09:38:89:f1:7d:56:
2c:74:64:50:c4:be:8a:63:7e:0f:0e:f0:e7:c1:9f:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:35:12:1B:10:67:93:1C:31:16:E8:16:BA:D6:47:C0:B1:E3:F9
X509v3 Authority Key Identifier:
keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:98:47:87:87:ed:f0:db:43:68:2b:c6:01:93:3f:90:1b:2a:
2f:b2:51:a5:28:19:e3:fe:a6:2f:a4:82:75:55:f1:3c:78:2d:
d6:7f:60:90:bf:bb:7a:93:9c:e4:a6:d7:1d:de:0c:ea:d5:0c:
9f:2a:8b:0e:fd:40:0c:8d:b1:d3:8d:b8:55:9a:43:a7:0f:8c:
7c:01:ae:71:22:ab:75:40:5b:ad:04:f7:b0:a4:71:dc:72:6a:
f6:cf:a3:47:20:34:2e:7c:5f:04:55:8a:b3:a9:d6:fa:37:d9:
57:25:d7:45:63:15:d7:8e:68:78:7e:30:35:0e:4f:0a:ab:a5:
21:cd:5b:07:fb:eb:cd:46:69:d1:da:3e:5a:83:65:a1:64:6b:
1a:ae:be:2a:9a:4f:87:14:f0:ef:f9:3d:c6:6e:df:9b:0b:96:
43:01:d6:9e:dc:e3:e1:8a:85:2a:44:3e:5b:9d:8e:bf:c6:a2:
a2:8f:b6:d1:9f:7f:2b:a3:8b:8e:46:09:c3:3c:80:53:9e:86:
fa:ff:83:d4:e5:31:ef:10:b0:df:3c:3c:41:11:02:90:9e:80:
a7:71:e2:5d:c5:0a:56:fd:a8:d1:2a:01:b9:65:a6:2f:da:23:
43:bc:f0:f2:2c:fb:6e:57:f6:66:ee:4d:28:0a:cd:26:84:7e:
e5:b1:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:03:12 2025 by rpki-client