This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
File: 2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft (raw, json)
Hash identifier: 2f+nib8AkvEuXUFNmpe4uavghRC/6JPSWYvi2zdkiCg=
Subject key identifier: 9B:B5:54:69:96:A0:1F:ED:6E:56:6C:B5:5C:42:DB:8B:02:2A:82:4D
Authority key identifier: 2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB
Certificate issuer: /CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
Certificate serial: 3F71B9C3659B0D3304049E24A2068113B78AE8A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
Manifest number: E0
Signing time: Tue 23 Dec 2025 20:07:00 +0000
Manifest this update: Tue 23 Dec 2025 20:02:00 +0000
Manifest next update: Wed 24 Dec 2025 22:17:00 +0000
Files and hashes: 1: 323830343a316461383a3a2f33322d313238203d3e20323634333834.roa (hash: SZNfQnJy+8YoF6N8/31nwyII2wLm84N7RXT1MK3wY88=)
2: 3133312e3136312e3137362e302f32322d3332203d3e20323634333834.roa (hash: mlbCfD0T4gM9tMdfnfarkiKhJLAPHHaOU4fUgTbl9WM=)
3: 2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl (hash: mzaCRn817sHlozZVnf/5somnG5AGdVAnHiLDDJGZuqQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl
rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 22:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:71:b9:c3:65:9b:0d:33:04:04:9e:24:a2:06:81:13:b7:8a:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
Validity
Not Before: Dec 23 20:02:00 2025 GMT
Not After : Dec 24 22:17:00 2025 GMT
Subject: CN=9BB5546996A01FED6E566CB55C42DB8B022A824D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:17:7e:8b:52:a1:68:f2:03:af:79:c1:d0:
d0:de:3b:63:09:76:f3:0e:39:de:49:13:81:51:c9:
e9:db:2b:8d:da:a8:e4:02:34:dd:cb:2f:c7:f9:98:
67:c6:72:cd:25:17:88:73:9a:7a:46:c6:e2:42:f5:
38:fd:0f:9a:5c:c1:95:16:52:ce:ee:8a:11:70:22:
9d:5c:69:f1:41:e5:55:8b:17:9d:3e:c8:4c:5a:0a:
60:01:1f:1f:d6:c4:59:3e:70:f7:bf:f6:80:40:a5:
48:ab:b1:0c:41:37:d2:94:ff:96:76:b9:c0:6c:f4:
52:c9:ec:82:8b:24:7b:e7:7d:37:d2:68:5e:3b:e9:
2d:e2:1f:a1:a6:e6:73:81:f0:9f:7f:1e:df:bc:12:
76:39:d5:94:b9:68:14:00:70:6e:70:ab:d0:b4:a5:
a0:e3:14:f2:14:d3:c1:08:21:f2:28:f6:4f:ad:06:
fc:51:57:27:aa:26:1d:ad:c2:3a:9c:ad:10:02:50:
61:3d:30:9f:c3:b0:4d:16:c4:69:de:9b:28:ec:c5:
e2:3b:38:34:60:11:8c:15:c1:7d:56:50:40:88:a8:
da:a4:b1:90:12:2b:01:f0:52:95:9a:be:60:39:3f:
6d:2b:fd:54:25:b2:bd:b2:c5:07:30:3b:19:eb:93:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:54:69:96:A0:1F:ED:6E:56:6C:B5:5C:42:DB:8B:02:2A:82:4D
X509v3 Authority Key Identifier:
keyid:2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:48:9c:f1:9d:fd:95:77:89:da:1c:39:6d:4e:cb:15:d1:
e2:bf:04:ca:90:f6:32:10:86:4c:84:89:9c:6a:25:72:66:49:
e0:78:24:77:15:a5:e9:e5:27:db:e2:58:4f:f0:39:68:61:81:
6c:0c:a3:b5:dd:23:4a:fc:57:31:f2:c0:4e:5c:f7:b2:65:58:
15:fc:ce:d1:d8:b2:33:d2:2f:cd:9c:e2:6c:a3:08:05:04:42:
2b:26:a4:d7:37:b2:dd:2f:39:8d:3a:f9:b5:80:e4:21:31:ff:
aa:e1:62:49:c0:9f:92:9b:1e:18:e8:de:e2:9a:a2:e7:12:0c:
70:0d:63:21:a2:a9:05:73:ec:cb:ad:9b:e2:91:5b:ac:bd:d3:
ee:7a:57:1b:37:42:ed:f8:d7:9e:56:c3:19:af:94:6a:22:89:
cf:77:73:03:e3:f4:f1:2b:c2:1e:b2:4f:5d:ef:6c:7b:60:52:
26:04:a8:b9:42:58:ff:d8:a8:59:13:02:06:e1:d8:6d:b6:6f:
47:fe:d8:03:c9:04:90:ab:28:38:6e:6e:2f:c6:4e:6b:7c:fd:
9d:a6:98:c7:11:1c:56:5b:7c:9b:24:e9:4d:87:c1:64:c4:c7:
c3:71:06:5e:3d:c3:05:6a:cb:54:7e:0e:2e:a1:e3:3f:77:53:
1d:da:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:14 2025 by rpki-client