This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
File: ED21D10C23C2376429733090A859B9263A7A9ADC.mft (raw, json)
Hash identifier: n5el6K4mPlZU+luEEhGFT5y+yvSQTzqG99FRlmV5kbs=
Subject key identifier: 8F:43:E8:8B:8A:48:A5:D7:D3:7F:63:27:7D:C2:28:EE:04:D4:8F:66
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Certificate issuer: /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial: 3BED667AB5AAB57B54D9F541AF34675CB61B1FF5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
Manifest number: 0289
Signing time: Mon 22 Dec 2025 20:51:49 +0000
Manifest this update: Mon 22 Dec 2025 20:46:49 +0000
Manifest next update: Wed 24 Dec 2025 00:04:49 +0000
Files and hashes: 1: 34352e3138382e3137362e302f32322d3332203d3e20323639353335.roa (hash: qVrhSjcY3K4UfNwcC/dV12GQv2xMkkxByFEq3c9l3as=)
2: ED21D10C23C2376429733090A859B9263A7A9ADC.crl (hash: CNPoV+ZwnrgQXJzSffMeFTGMXsPAwWm5ILpWzqwgUtc=)
3: 323830343a363633633a3a2f33322d313238203d3e20323639353335.roa (hash: 4GsVdnrX70b5P2ipb6ZsdX0i4/IV3OWiKJlfoqHPjdQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 00:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ed:66:7a:b5:aa:b5:7b:54:d9:f5:41:af:34:67:5c:b6:1b:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Validity
Not Before: Dec 22 20:46:49 2025 GMT
Not After : Dec 24 00:04:49 2025 GMT
Subject: CN=8F43E88B8A48A5D7D37F63277DC228EE04D48F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:2c:a3:5a:57:91:88:b0:d2:02:a9:5d:8e:
5a:23:1c:fa:77:05:ed:4c:f1:54:4c:81:65:0c:fd:
a3:76:b9:bc:26:14:be:25:b3:87:3b:b8:64:c4:10:
44:7f:e2:91:99:47:fc:dc:bb:66:d0:9e:c8:c1:38:
bf:a3:4b:5b:07:18:d8:e4:45:a5:c3:50:b3:5d:72:
53:71:50:5e:ee:61:21:3c:f7:28:d4:76:dc:2f:e3:
be:55:ac:8f:2a:78:68:98:66:3e:fd:68:7b:c0:7b:
13:2d:ed:a8:42:83:63:77:1d:fa:fa:c3:1b:f2:e7:
68:f2:8e:25:22:c0:fa:6d:d6:1f:30:f5:88:ea:1e:
1e:12:9b:19:3e:f9:49:b7:8b:2b:09:2a:9e:d5:1f:
c4:85:5a:0b:d3:5a:2d:ee:f7:73:e4:5f:d9:42:76:
3a:e2:e9:04:81:46:90:6b:17:c8:7a:10:f2:4d:26:
02:98:23:2f:1d:b6:af:9d:98:88:59:09:5f:f2:3e:
b2:41:72:c3:25:3f:c9:76:e6:ce:a6:4e:48:93:e5:
e1:21:08:b3:7e:96:bd:a4:63:9f:38:60:53:fb:e1:
c7:5e:cc:7b:c5:62:63:8c:49:b3:13:6e:de:1a:c4:
a9:74:c7:a5:fd:32:d1:01:3e:7f:7f:04:9e:ac:a7:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:E8:8B:8A:48:A5:D7:D3:7F:63:27:7D:C2:28:EE:04:D4:8F:66
X509v3 Authority Key Identifier:
keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:48:df:0b:d6:61:df:6e:d0:c4:69:d2:24:e1:e2:a2:e0:c2:
fe:b4:dc:ae:93:dd:15:c0:02:3a:4f:bd:25:3f:75:ca:cc:ad:
b3:f8:40:25:00:20:02:ea:e9:ab:6f:02:45:78:34:88:55:90:
3a:d8:15:53:d4:82:d5:31:94:c8:58:ff:ed:44:c4:1d:e4:15:
56:ec:9d:be:9e:0f:3a:88:05:65:49:ae:f8:1e:cb:64:81:80:
4c:0f:1d:89:44:cb:2c:b5:27:57:0b:ad:ec:35:fb:e9:73:cc:
2b:7c:60:ff:ac:30:1f:31:31:59:3f:c8:da:a3:e8:da:2a:94:
8c:06:67:0b:8a:97:b6:be:1a:db:48:49:d4:2f:d5:6a:7a:4f:
5c:5a:85:ad:b7:29:01:61:8a:0d:5d:5e:03:e5:eb:43:7f:76:
76:a3:64:38:ea:9e:89:b1:fa:bc:39:e8:b5:52:1e:ed:5d:53:
13:62:18:c1:8f:a4:5b:f4:7f:d8:39:17:65:fb:55:f8:b5:1b:
d8:6f:52:17:a7:88:6f:4f:58:28:35:fd:f8:8c:a6:16:b4:6f:
53:1d:0d:73:af:ee:02:5d:33:bb:d1:72:28:b4:c6:1e:18:16:
f7:ab:f3:73:09:a1:45:01:e4:e3:8b:70:e2:78:a8:dd:ca:85:
a5:8d:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:48:13 2025 by rpki-client