This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft
File: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft (raw, json)
Hash identifier: 6IUqN5mtj23lp2UZiW4kqZVM8iW+X1s9RBaK03N2Esc=
Subject key identifier: 34:31:A0:EF:A4:29:A6:62:FF:7B:41:06:44:FE:45:AA:2C:73:F7:89
Authority key identifier: 8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23
Certificate issuer: /CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423
Certificate serial: 0246B22A03D834B799F24A6F127688BA85C51667
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft
Manifest number: 0223
Signing time: Tue 23 Dec 2025 05:07:21 +0000
Manifest this update: Tue 23 Dec 2025 05:02:21 +0000
Manifest next update: Wed 24 Dec 2025 08:56:21 +0000
Files and hashes: 1: 3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa (hash: V5tvgEYxwqyrBiZbfBmfrrGfxjZimkFzr+SP4Ye2TY8=)
2: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl (hash: qUS8ug5uFCX2SOWdvkXycul+KcImJbZrHBENOXLi9yE=)
3: 323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (hash: nto9EgJXC/dWG0WEdavSKMEwi3srLv0jSlA+N/kLPP4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl
rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 08:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:46:b2:2a:03:d8:34:b7:99:f2:4a:6f:12:76:88:ba:85:c5:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423
Validity
Not Before: Dec 23 05:02:21 2025 GMT
Not After : Dec 24 08:56:21 2025 GMT
Subject: CN=3431A0EFA429A662FF7B410644FE45AA2C73F789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:06:e1:46:66:0f:a8:39:0d:d4:7a:d7:bd:
82:81:5e:a5:c6:78:35:9e:fc:b5:f2:0d:f4:5a:ba:
a5:c3:47:2a:ea:45:8b:d7:82:20:6e:c9:0f:85:60:
e5:c2:eb:c8:04:f8:eb:12:7c:5c:b7:8a:18:e3:46:
c8:dd:61:d3:ed:78:11:99:30:22:19:a8:d1:72:c9:
ab:3a:51:d9:96:65:f4:f1:af:56:e3:46:ee:ce:91:
be:cb:ed:28:b4:de:20:28:d4:dc:5a:b7:b8:b3:bc:
ec:1e:da:cf:ef:9d:1d:66:cc:53:8b:73:dc:0b:19:
07:a1:37:91:0b:c7:ab:cf:33:e2:87:8d:74:f4:3c:
c0:61:9f:e8:28:9d:8a:eb:01:62:4e:9a:48:d2:eb:
67:cf:a1:1a:5b:53:40:9f:32:8a:c2:ce:b2:83:ff:
9c:2f:10:30:3e:32:ca:60:09:30:14:9b:39:24:e7:
e6:a4:99:d3:68:29:c6:41:01:77:c8:61:f0:08:a9:
e3:61:bb:95:65:59:99:1a:5d:85:8a:11:28:67:9b:
f9:8a:83:87:d5:1f:80:cf:e2:fd:21:37:59:75:e9:
3d:81:86:69:d7:fb:23:11:88:00:8d:5f:98:06:8b:
d6:5c:c0:07:6f:90:65:fb:70:7d:4a:7a:74:96:e5:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:31:A0:EF:A4:29:A6:62:FF:7B:41:06:44:FE:45:AA:2C:73:F7:89
X509v3 Authority Key Identifier:
keyid:8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:35:a6:4d:c8:3a:04:e4:78:e2:51:9d:73:d0:ae:73:50:98:
44:70:70:07:bc:2c:b7:a8:de:5e:ea:8c:87:6f:b8:a1:82:26:
0d:df:b0:f0:f1:d9:f7:20:91:f8:cc:80:de:6b:92:95:a3:a2:
e4:ce:f0:0c:14:7a:79:1b:cc:c3:0f:16:33:8c:5b:83:5c:2d:
2e:e1:09:86:87:cb:05:ea:90:06:17:24:8a:0e:ca:38:f7:ee:
dc:55:91:89:a4:3a:96:25:a7:19:5f:b0:fb:e4:2c:69:1e:15:
f2:47:7e:81:9d:66:97:2d:ae:5c:dd:80:59:77:85:5a:5b:f9:
c8:3a:4c:0d:32:95:9c:6f:6e:0f:f6:97:6f:5d:d2:3f:5e:0a:
84:ff:51:bc:b4:f9:6e:91:9a:9e:61:35:9f:93:73:54:7f:50:
63:f7:bc:b9:d0:4b:b1:ff:d4:ad:7c:bd:0d:86:df:35:21:2a:
b4:75:29:cd:e9:05:2f:f0:2a:e6:0a:a8:03:4f:e8:bc:07:33:
4a:d5:4d:a3:7f:a6:5f:f7:88:54:da:67:ae:6f:21:ad:0a:5a:
75:c0:73:bd:a6:c0:36:fc:a5:c7:2e:1b:1f:e3:eb:76:ef:e8:
a2:a1:56:32:81:7b:52:07:7c:b5:da:09:d1:60:67:3b:47:8e:
07:63:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:38:05 2025 by rpki-client