This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
File: 486F1988E524109FEE5954E3D13AD3BEA739160B.mft (raw, json)
Hash identifier: kwtGbDk+wRDOB/O443nhY5yAdxLoJX0ksgBt3qtTzuw=
Subject key identifier: 0E:CC:71:AE:CC:22:EF:0A:65:39:65:52:16:9E:4E:5C:8A:13:E5:05
Authority key identifier: 48:6F:19:88:E5:24:10:9F:EE:59:54:E3:D1:3A:D3:BE:A7:39:16:0B
Certificate issuer: /CN=486F1988E524109FEE5954E3D13AD3BEA739160B
Certificate serial: 2AD565A719FDA37531C78E4A940D61FD6166E227
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
Manifest number: 0333
Signing time: Sat 20 Dec 2025 14:35:34 +0000
Manifest this update: Sat 20 Dec 2025 14:30:34 +0000
Manifest next update: Sun 21 Dec 2025 16:35:34 +0000
Files and hashes: 1: 3139302e3131352e38302e302f32322d3234203d3e20323730343535.roa (hash: sxLPpB22UfB14OamzqKocBAD2WPku1yTLrOQpKGlgJk=)
2: 486F1988E524109FEE5954E3D13AD3BEA739160B.crl (hash: 2rV3pSJX6099i9/QrtkImelvAa/Pu3W5V/4LqPQIFmU=)
3: 323830343a366334303a3a2f33322d3438203d3e20323730343535.roa (hash: EOxsB8csRRjHNER5YoQtpmRco45XZ31J0J3TSyssxsA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.crl
rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 16:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d5:65:a7:19:fd:a3:75:31:c7:8e:4a:94:0d:61:fd:61:66:e2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486F1988E524109FEE5954E3D13AD3BEA739160B
Validity
Not Before: Dec 20 14:30:34 2025 GMT
Not After : Dec 21 16:35:34 2025 GMT
Subject: CN=0ECC71AECC22EF0A65396552169E4E5C8A13E505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:80:98:74:cb:e1:52:95:25:6d:2d:e0:20:
ab:a1:fc:c9:20:ea:c5:ad:95:27:1c:00:1f:52:56:
f6:9c:13:85:27:78:24:f6:bf:c4:39:2a:fd:18:d1:
f4:82:51:2a:00:a3:c1:fa:f2:17:34:cd:4b:65:77:
24:73:9e:64:02:57:80:a5:a7:98:fb:70:2e:62:fa:
98:9d:47:e0:5f:12:64:b4:b5:80:ca:e2:99:8f:ae:
65:f5:b8:b8:f5:20:58:3f:6c:04:6b:7d:eb:87:ba:
00:e1:6f:ca:1c:d9:0a:94:98:53:ce:d5:c7:f6:ce:
6c:f4:f2:50:0b:f7:6a:c3:0d:3a:3f:98:a8:5d:90:
02:2f:70:55:98:a5:f6:24:87:35:c7:3a:9a:39:90:
a3:f8:05:10:77:12:62:64:56:45:fe:a2:23:17:85:
b4:35:91:59:a1:d6:98:a2:de:03:6d:5e:cb:10:a0:
bf:01:18:b9:a2:a5:02:58:71:c1:a7:db:32:c8:2f:
2c:df:d1:75:97:89:70:e6:e2:95:aa:f5:be:5c:b6:
d7:e7:c5:b3:9d:a9:75:7c:36:ad:57:eb:7f:79:7c:
c8:5c:21:d3:13:d7:03:10:30:6a:72:bf:40:52:40:
e1:74:26:17:9f:d6:de:c0:73:99:5b:e0:02:b5:76:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CC:71:AE:CC:22:EF:0A:65:39:65:52:16:9E:4E:5C:8A:13:E5:05
X509v3 Authority Key Identifier:
keyid:48:6F:19:88:E5:24:10:9F:EE:59:54:E3:D1:3A:D3:BE:A7:39:16:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/486F1988E524109FEE5954E3D13AD3BEA739160B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/486F1988E524109FEE5954E3D13AD3BEA739160B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0b:d4:53:06:ae:0b:f3:ed:69:f7:42:e6:d6:b4:42:82:4d:
40:21:89:1d:c5:0e:a8:ef:17:84:de:1b:55:5e:40:e9:ce:9a:
ef:1c:22:ed:26:d8:f4:1b:0a:a9:e9:1d:82:07:c2:d7:42:16:
4b:4e:7d:c9:ed:0d:3d:95:4a:f1:8b:49:3e:55:5c:6e:20:c6:
64:27:28:da:23:db:9d:9b:f0:28:8d:c5:a2:bd:ce:55:be:44:
b3:ef:a0:fc:9f:3a:83:90:61:8a:dc:b9:9c:9f:e6:66:98:bc:
3d:83:58:fe:ec:07:80:82:c6:14:fd:61:2e:e5:11:2f:bc:7e:
48:fb:7d:03:28:68:43:df:21:dd:c6:1f:e3:69:42:42:dd:3b:
c9:18:27:8d:3c:d3:cc:05:36:00:73:2c:fa:52:d5:71:ee:7c:
e4:55:40:8b:c8:84:8f:cc:df:48:3c:23:35:67:72:18:2e:07:
1b:d5:20:36:06:fc:42:c8:c5:b2:10:20:60:4c:f7:c2:d8:91:
97:20:0a:ca:63:66:06:79:52:ca:97:95:3e:dc:1e:cb:da:ee:
43:31:64:b0:b8:b7:d0:a3:2b:1a:e4:ec:d2:76:81:82:b1:a4:
25:34:66:5b:3d:20:ab:4e:15:72:3b:2f:28:9e:6f:48:e9:63:
b5:3d:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:59:22 2025 by rpki-client