This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
File: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft (raw, json)
Hash identifier: bIlTqA7sJsL1NYmxIwHeINM6ft1R+5Cngsj19D9+k6o=
Subject key identifier: D6:02:72:B7:61:E8:49:79:8E:60:0F:3D:E7:EE:2B:B2:12:7A:6A:35
Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F
Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F
Certificate serial: 205A0AC0D057C9C8DAB1A844022EAD82BC96B8A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
Manifest number: 9A
Signing time: Wed 24 Dec 2025 11:46:56 +0000
Manifest this update: Wed 24 Dec 2025 11:41:56 +0000
Manifest next update: Thu 25 Dec 2025 13:00:56 +0000
Files and hashes: 1: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc=)
2: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl (hash: nWbdDl7cXNDlTHSXZA8zWF514OPeBFjzgTTdGECV4ro=)
3: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=)
4: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl
rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5a:0a:c0:d0:57:c9:c8:da:b1:a8:44:02:2e:ad:82:bc:96:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F
Validity
Not Before: Dec 24 11:41:56 2025 GMT
Not After : Dec 25 13:00:56 2025 GMT
Subject: CN=D60272B761E849798E600F3DE7EE2BB2127A6A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:e5:bc:06:87:65:50:ea:48:03:b0:f9:2e:
17:ab:f0:f7:31:e3:66:9c:6d:cc:e0:da:bf:1a:2e:
b1:2d:a8:c9:a6:c8:b7:1d:d0:f2:85:c3:99:f9:74:
e8:00:87:2c:9e:a7:b2:7d:d8:37:4a:a6:16:8c:58:
c5:8c:c9:53:e6:08:66:b3:ce:df:16:1f:b4:e9:9d:
24:87:85:36:73:b5:41:ac:c6:0c:ae:05:e4:41:fa:
bd:69:00:f4:61:e6:2b:79:d0:a9:82:1d:a8:4d:33:
92:fb:c4:58:15:46:d2:aa:fd:f4:69:b4:77:18:51:
e9:be:06:84:e8:89:16:0e:49:13:85:e5:05:15:a4:
ae:6a:9d:10:8e:0b:42:62:69:2c:40:04:3c:a8:08:
a9:4c:1c:7f:f6:a0:bf:4f:1f:69:cd:42:c1:b0:fe:
90:5a:d9:a1:b3:4a:53:d0:36:fc:cf:dc:20:7f:16:
4a:84:bd:c2:6e:e6:78:33:49:bf:94:82:68:40:c2:
29:d5:05:7f:da:bd:d3:16:75:c4:a7:a6:3d:85:63:
62:81:4a:5c:03:24:ec:40:b7:1d:86:ef:a8:1c:8d:
d7:ff:36:98:5d:05:db:5a:5b:d0:a2:5c:40:f5:e0:
93:ff:b3:57:7f:41:a5:26:52:f3:3a:28:06:81:bc:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:72:B7:61:E8:49:79:8E:60:0F:3D:E7:EE:2B:B2:12:7A:6A:35
X509v3 Authority Key Identifier:
keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:db:20:0f:0f:34:1b:3e:23:80:e3:44:4b:76:bf:43:71:
6d:fd:a4:4f:3c:cd:30:a4:21:11:f0:ea:65:28:3c:dc:d1:63:
61:c2:a2:96:6f:21:31:8b:49:01:4e:f0:8c:b8:12:38:1f:fc:
a2:37:a0:12:12:87:bc:5b:c2:46:e4:fe:2e:e9:f2:1a:94:b9:
90:84:6b:7c:1f:34:a3:cc:f9:1b:6d:9b:61:a2:ed:35:94:cb:
7e:f1:98:f4:3e:42:81:66:a4:81:1e:0d:58:27:85:4d:e4:86:
a4:8e:17:f9:65:99:16:6e:c1:56:9e:5e:48:2d:20:ac:78:1d:
cf:d8:a2:6b:ce:e3:a5:5e:13:9f:49:4b:c4:dd:82:09:d5:92:
5a:76:71:7f:4c:3c:2f:9a:fc:d0:d7:75:4c:5c:11:74:84:28:
83:4b:06:96:43:8c:0a:41:19:ae:84:ad:62:4a:89:ef:75:f2:
1f:bd:2f:b9:30:3b:c5:2d:29:37:5e:18:32:89:b4:bc:b3:76:
b2:a3:56:db:2c:ee:a3:4b:44:13:8b:b3:e2:f7:3d:d6:23:dd:
4e:20:ce:a6:76:75:40:d5:c6:0e:2b:74:e5:d5:e1:67:0b:bf:
75:18:52:01:ab:ca:6c:26:07:29:23:63:4c:a2:26:9c:c9:10:
41:0f:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:39 2025 by rpki-client