This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
File: 5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft (raw, json)
Hash identifier: mbn7IKvscKmkTkt+loLZMGU/maEh/f0L9b+ba60Fe4o=
Subject key identifier: C0:79:8C:EB:68:6B:41:44:DC:C3:D3:69:17:94:A6:66:03:CE:1A:6C
Authority key identifier: 5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49
Certificate issuer: /CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849
Certificate serial: 1D3943BDB40A946EA3CB26CD8084E981D4FE54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
Manifest number: 0225
Signing time: Tue 23 Dec 2025 20:02:19 +0000
Manifest this update: Tue 23 Dec 2025 19:57:19 +0000
Manifest next update: Wed 24 Dec 2025 21:09:19 +0000
Files and hashes: 1: 323830343a383738303a3a2f33322d3634203d3e20323732373133.roa (hash: iwB4G7o8/hqOjc7JM0qav32ieoxe3LTOUmlnkMiDHbg=)
2: 5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl (hash: h+ArIsm4Lm2nds1UGKhQabyLQB9M6zQ2xjPGR0ktl3M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl
rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 21:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:39:43:bd:b4:0a:94:6e:a3:cb:26:cd:80:84:e9:81:d4:fe:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F747E40A246A0CA7811CAAD9BEE953DCF8DB849
Validity
Not Before: Dec 23 19:57:19 2025 GMT
Not After : Dec 24 21:09:19 2025 GMT
Subject: CN=C0798CEB686B4144DCC3D3691794A66603CE1A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:11:0f:db:bc:1a:37:37:e6:13:63:48:a4:
3b:bf:c9:34:8c:ea:ba:32:9c:cd:fe:63:2f:7a:c6:
b1:3c:f0:1b:8e:62:08:ad:97:f0:9e:8f:91:b3:84:
81:66:ea:d1:51:83:26:52:6a:29:e3:73:bc:a3:b4:
84:8a:09:2c:4d:14:61:e6:d6:1a:84:8b:db:72:45:
3d:95:8a:72:4a:62:b4:79:be:1b:80:04:cf:31:8f:
63:73:6a:7f:5d:77:c5:ad:c2:87:3e:e2:08:dc:88:
1b:81:56:a8:e3:02:b5:e4:9a:a9:18:c1:a1:f2:d9:
66:e4:55:05:03:3f:74:68:08:f2:e4:c3:20:1c:8c:
84:a8:ca:62:60:0a:a9:06:38:ae:02:eb:93:9b:85:
cf:c2:ca:18:49:26:86:f2:7c:68:2b:79:66:42:30:
56:11:0b:9e:27:a1:10:6f:23:2f:30:26:92:75:43:
2d:02:bc:e9:90:b0:6b:cd:91:8b:be:f7:08:8e:cc:
59:f1:f7:b1:2b:69:32:28:1f:54:0d:ee:95:82:d5:
eb:e9:26:9d:0d:eb:09:26:72:c8:bf:18:f5:42:3b:
94:33:af:cd:fe:e6:c5:c7:e1:25:dd:d2:07:57:8a:
d6:5c:93:9a:c2:9e:ec:64:99:a6:2d:2d:74:65:21:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:8C:EB:68:6B:41:44:DC:C3:D3:69:17:94:A6:66:03:CE:1A:6C
X509v3 Authority Key Identifier:
keyid:5F:74:7E:40:A2:46:A0:CA:78:11:CA:AD:9B:EE:95:3D:CF:8D:B8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTJRRG5KYZx4nDvcv8f8aAz97Vb6tLuNAW4xn8yQFksG/0/5F747E40A246A0CA7811CAAD9BEE953DCF8DB849.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:43:1c:6c:68:d9:ca:df:12:02:fb:4c:6e:88:df:db:7c:76:
5e:fd:a0:55:e7:5a:3e:d4:d1:68:a2:5a:00:8e:10:99:84:75:
b6:36:00:2f:c5:c0:1a:3e:ba:66:6b:6d:b2:5f:4a:d2:a3:ec:
d2:c9:c6:8e:e9:d2:16:81:ce:57:4d:84:71:56:21:0b:9e:f0:
fd:5f:41:76:1e:cb:09:50:a5:bc:1c:14:76:56:d0:2e:d4:51:
b5:b2:32:d6:49:f8:b9:b8:a2:b8:2c:18:23:48:88:3f:84:24:
2d:f3:71:88:8e:7b:5c:8c:9c:65:a5:73:c1:a9:3f:21:26:7e:
41:e9:c9:dd:3d:16:88:71:83:1a:23:5e:8a:b1:06:02:2e:15:
b5:cd:01:3e:04:07:03:28:38:e5:8f:77:e2:4d:0e:8b:ec:9b:
f3:86:db:f2:0e:10:90:af:02:c8:37:97:ae:4f:a9:bd:dc:42:
55:d9:e1:5d:e8:9f:f5:9a:d5:30:39:52:1a:43:cb:c2:e1:a1:
f9:05:a2:f1:f5:b9:d0:92:da:b2:03:43:1e:85:be:99:99:15:
0b:da:b5:af:3d:9f:52:ea:8f:cc:e6:54:9a:8b:bb:d4:62:90:
0f:90:04:74:af:13:35:c1:a2:02:f0:0e:e2:1d:39:bb:e4:ef:
87:93:ae:30
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgITHTlDvbQKlG6jyybNgITpgdT+VDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg1Rjc0N0U0MEEyNDZBMENBNzgxMUNBQUQ5QkVFOTUzRENG
OERCODQ5MB4XDTI1MTIyMzE5NTcxOVoXDTI1MTIyNDIxMDkxOVowMzExMC8GA1UE
AxMoQzA3OThDRUI2ODZCNDE0NERDQzNEMzY5MTc5NEE2NjYwM0NFMUE2QzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALPWEQ/bvBo3N+YTY0ikO7/JNIzq
ujKczf5jL3rGsTzwG45iCK2X8J6PkbOEgWbq0VGDJlJqKeNzvKO0hIoJLE0UYebW
GoSL23JFPZWKckpitHm+G4AEzzGPY3Nqf113xa3Chz7iCNyIG4FWqOMCteSaqRjB
ofLZZuRVBQM/dGgI8uTDIByMhKjKYmAKqQY4rgLrk5uFz8LKGEkmhvJ8aCt5ZkIw
VhELniehEG8jLzAmknVDLQK86ZCwa82Ri773CI7MWfH3sStpMigfVA3ulYLV6+km
nQ3rCSZyyL8Y9UI7lDOvzf7mxcfhJd3SB1eK1lyTmsKe7GSZpi0tdGUhFXkCAwEA
AaOCAlkwggJVMB0GA1UdDgQWBBTAeYzraGtBRNzD02kXlKZmA84abDAfBgNVHSME
GDAWgBRfdH5AokagyngRyq2b7pU9z424STAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HVEpSUkc1S1laeDRuRHZjdjhmOGFBejk3VmI2dEx1TkFXNHhuOHlRRmtz
Ry8wLzVGNzQ3RTQwQTI0NkEwQ0E3ODExQ0FBRDlCRUU5NTNEQ0Y4REI4NDkuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNUY3NDdFNDBBMjQ2QTBDQTc4
MTFDQUFEOUJFRTk1M0RDRjhEQjg0OS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK
BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9H
VEpSUkc1S1laeDRuRHZjdjhmOGFBejk3VmI2dEx1TkFXNHhuOHlRRmtzRy8wLzVG
NzQ3RTQwQTI0NkEwQ0E3ODExQ0FBRDlCRUU5NTNEQ0Y4REI4NDkubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDyQxxsaNnK3xIC+0xuiN/bfHZe/aBV51o+1NFooloAjhCZhHW2NgAvxcAaPrpm
a22yX0rSo+zSycaO6dIWgc5XTYRxViELnvD9X0F2HssJUKW8HBR2VtAu1FG1sjLW
Sfi5uKK4LBgjSIg/hCQt83GIjntcjJxlpXPBqT8hJn5B6cndPRaIcYMaI16KsQYC
LhW1zQE+BAcDKDjlj3fiTQ6L7JvzhtvyDhCQrwLIN5euT6m93EJV2eFd6J/1mtUw
OVIaQ8vC4aH5BaLx9bnQktqyA0Mehb6ZmRUL2rWvPZ9S6o/M5lSai7vUYpAPkAR0
rxM1waIC8A7iHTm75O+Hk64w
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:27 2025 by rpki-client