This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
File: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft (raw, json)
Hash identifier: DUajPenUhWmD5SlaGuoD/Io5fT8yQEyj7aVtrdff8bo=
Subject key identifier: 4E:65:A0:CB:A4:A6:E7:03:1E:F1:41:97:62:F0:C8:C8:5A:30:1E:73
Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39
Certificate issuer: /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
Certificate serial: 594FE3E868A22FA11596D1A61F8B8E4C6C6EC7EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
Manifest number: 83
Signing time: Sat 20 Dec 2025 22:21:35 +0000
Manifest this update: Sat 20 Dec 2025 22:16:35 +0000
Manifest next update: Mon 22 Dec 2025 00:56:35 +0000
Files and hashes: 1: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=)
2: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl (hash: F5TPwv6an6lYd++quNEVSHIt9b0aTh5UbPnJnZ1cWas=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl
rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 00:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4f:e3:e8:68:a2:2f:a1:15:96:d1:a6:1f:8b:8e:4c:6c:6e:c7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939
Validity
Not Before: Dec 20 22:16:35 2025 GMT
Not After : Dec 22 00:56:35 2025 GMT
Subject: CN=4E65A0CBA4A6E7031EF1419762F0C8C85A301E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:21:0f:17:33:80:20:0a:b6:2c:42:bc:a9:
7e:88:96:9b:7a:cf:e6:25:e6:39:27:1d:ad:57:a5:
b0:c3:91:a0:f7:51:a6:af:4a:54:18:86:8c:cd:a1:
76:ce:00:b7:9a:f2:f7:4f:14:23:72:03:5e:a0:c1:
d6:b2:20:70:0f:bb:19:9d:f0:1d:41:46:8f:94:65:
d8:02:44:ba:94:2d:e1:da:78:92:c7:68:8f:ed:27:
a4:67:70:ce:3b:cf:cc:de:ce:53:92:bf:22:d5:0f:
87:71:35:ed:1c:67:9b:91:61:20:bc:83:ba:ee:f7:
29:01:92:b1:55:da:c7:d9:77:1e:49:44:26:3d:b1:
c3:8d:34:8c:6f:bb:bb:35:c0:70:d8:2f:65:5f:69:
f3:63:aa:42:85:98:4a:9f:4a:b1:89:0d:47:95:d2:
a4:b4:d3:62:53:7c:4e:61:7f:2d:8f:49:2f:18:f8:
e6:10:be:2c:17:1e:3a:a4:0a:ca:2a:8f:56:e0:67:
b0:98:cc:29:7c:a5:be:01:19:a9:eb:40:1e:ac:3a:
4b:17:58:98:b8:13:05:55:57:d6:46:31:64:24:69:
25:19:31:13:c8:1d:2c:0f:9d:9c:7d:b8:da:e4:2e:
9d:de:a8:87:d4:51:43:54:42:2c:25:2a:ac:4b:32:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:A0:CB:A4:A6:E7:03:1E:F1:41:97:62:F0:C8:C8:5A:30:1E:73
X509v3 Authority Key Identifier:
keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9e:37:74:5c:1b:00:98:12:0d:0d:57:4e:2b:96:91:a8:4a:
16:82:08:fb:75:b3:07:b4:c7:f9:8f:c3:6b:d1:40:7f:6e:a9:
47:55:ff:73:44:64:15:7f:38:75:ec:5a:dc:c0:74:8b:01:84:
ef:8f:64:e4:b8:8f:0d:31:be:82:82:44:22:81:8b:fd:d7:a7:
ee:5f:67:ae:db:67:06:d2:68:44:8f:53:1a:de:a2:01:24:21:
55:57:00:8b:96:1a:4c:23:51:e1:67:38:9c:98:c1:30:6e:70:
58:22:64:ee:11:c5:43:08:43:68:9f:7a:ff:ea:46:37:dc:d1:
e8:3e:49:e6:3f:c3:98:31:78:42:f9:04:66:a2:98:2b:76:a6:
7f:30:c6:c0:ca:7c:3d:a3:79:a7:7d:01:86:82:95:2a:1e:92:
09:9b:3b:dd:09:43:b0:50:a4:9c:30:f8:4b:45:dd:24:9f:8d:
1e:69:8d:e6:0a:3e:91:47:0f:59:34:8b:cc:cd:05:b7:ee:db:
92:e5:ce:cf:bf:04:62:18:8a:d1:a9:e0:dd:03:b7:1f:84:76:
48:5d:59:de:a8:8c:11:3c:3a:24:0f:ee:aa:28:09:73:0d:88:
84:e8:2c:ce:2d:9f:fa:db:a7:28:f2:eb:a0:15:89:f5:d0:c1:
17:58:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:15:52 2025 by rpki-client