This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
File: D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft (raw, json)
Hash identifier: KLCcNtATz+B9M4Ux8EXfjV12Q66Q4dr+l+0va/dIQ8U=
Subject key identifier: AA:62:5D:91:A6:19:9E:B4:7F:AA:EF:17:53:C2:2A:2E:E8:AD:56:63
Authority key identifier: D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
Certificate issuer: /CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Certificate serial: 0590ED811167F7A1FE93C65640FC8080AB9301DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
Manifest number: A5
Signing time: Fri 19 Dec 2025 19:09:42 +0000
Manifest this update: Fri 19 Dec 2025 19:04:42 +0000
Manifest next update: Sat 20 Dec 2025 19:46:42 +0000
Files and hashes: 1: D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl (hash: 3iT8aD+ajgUMIbpk4BFtGqNvJ2j+Or0jgeJ88gMu6sY=)
2: 323830343a353434383a3a2f33322d313238203d3e20323638363430.roa (hash: FPH5t3f9p9u23ePvWI4mh8ez4iCBapk+tdB2o6Jl1+E=)
3: 34352e3136342e3139362e302f32322d3332203d3e20323638363430.roa (hash: 1f4Li89JjfMh3Zvwa4e6/48Ur/rzUCE7uzz/lzOZsCc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 19:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:90:ed:81:11:67:f7:a1:fe:93:c6:56:40:fc:80:80:ab:93:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D531DF5F1FC99036157857A3BC1208D0D6677AF6
Validity
Not Before: Dec 19 19:04:42 2025 GMT
Not After : Dec 20 19:46:42 2025 GMT
Subject: CN=AA625D91A6199EB47FAAEF1753C22A2EE8AD5663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:1f:8b:73:39:2b:cf:6a:c5:b4:15:d0:c5:
ca:d2:f5:5e:1f:1d:bd:51:36:75:82:4a:1e:d7:ca:
15:7d:7d:20:bf:fa:6b:cd:f5:f0:e6:73:a8:0d:55:
59:de:41:81:11:99:61:77:a6:8a:11:77:81:af:0c:
b4:12:84:e3:f7:9d:af:f4:9d:1a:09:f9:66:5d:0c:
75:32:bb:b0:34:98:8e:02:79:ba:d8:3a:5d:b2:68:
c5:ce:6d:47:12:9a:6b:99:28:74:6c:7a:60:a1:6b:
7e:e2:33:ce:2d:94:ce:7b:76:8e:9b:6f:d7:65:90:
0a:7c:23:91:d2:aa:d7:f0:cc:0b:7a:a2:d2:cb:c0:
59:65:3c:3b:fc:c6:09:23:ce:11:84:f5:b2:2d:8c:
e4:b0:c2:bd:e9:c8:26:c3:07:2c:24:70:dd:ce:b1:
9f:a1:25:e2:eb:b3:f2:07:87:b5:98:84:1b:52:05:
59:ec:bc:f1:2c:39:e5:e9:d2:ef:2e:f8:f1:24:b1:
6b:c9:44:b1:4f:71:76:fc:c2:99:e9:fb:b0:82:e9:
11:51:3b:08:99:72:14:00:bc:0c:7f:97:ed:4f:83:
ab:2a:a9:0f:aa:49:75:d0:e9:9c:04:86:d3:60:00:
41:12:dc:5c:02:84:fe:31:b8:75:11:5d:45:5c:44:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:5D:91:A6:19:9E:B4:7F:AA:EF:17:53:C2:2A:2E:E8:AD:56:63
X509v3 Authority Key Identifier:
keyid:D5:31:DF:5F:1F:C9:90:36:15:78:57:A3:BC:12:08:D0:D6:67:7A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D531DF5F1FC99036157857A3BC1208D0D6677AF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/D531DF5F1FC99036157857A3BC1208D0D6677AF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ba:86:ac:cb:3a:35:9a:ab:bc:42:29:22:f6:73:93:8f:9c:
a3:7c:cb:2c:d8:90:f1:1f:9c:f0:de:57:90:8f:7f:5e:5e:d4:
93:75:a1:7c:95:25:bd:98:32:e5:bf:fb:97:11:89:ca:80:28:
a2:40:6b:f3:12:eb:7a:bb:78:74:18:e7:5a:4e:d2:75:5f:0c:
d6:ac:48:e8:80:b3:eb:20:6e:c4:66:4f:e2:31:6b:bd:ea:e9:
1c:a1:57:71:24:9f:f6:b7:4b:82:cd:b8:27:07:2e:63:e3:24:
b2:e0:35:c6:e2:92:5e:5a:8f:9c:45:96:9e:4c:43:f3:dc:68:
85:9a:f6:b5:c1:de:99:04:77:86:a8:36:01:75:73:73:e9:a3:
c1:2d:13:13:16:4f:53:8e:36:ec:de:70:c9:c6:ea:da:3e:06:
21:f1:2e:8e:f9:f7:b4:79:b9:3e:3f:c5:9c:3a:6c:85:88:5a:
82:d0:6e:c7:a9:8d:09:15:7b:23:cd:70:45:10:51:d9:de:92:
8d:05:40:8a:31:44:b8:fb:c5:f6:94:c7:83:ba:af:d0:b1:9d:
b3:0d:53:2b:da:8a:96:a2:18:f4:00:a6:ee:5a:4e:c8:f8:08:
6d:99:db:54:3b:33:4f:73:e7:a1:db:35:8d:ec:b9:b3:46:fb:
a2:03:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:34:18 2025 by rpki-client