This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json)
Hash identifier: ePcn/KIN06ZlcSO0rgFf7Q5jZZMyn9bNmAVXFB1rIdg=
Subject key identifier: 5F:71:B5:31:CA:22:31:52:30:1F:82:AD:5A:EC:BF:80:94:B7:06:61
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial: 0294E305BE05EA1EDD3AFA6E28023475EC17E1BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
Manifest number: 0342
Signing time: Fri 19 Dec 2025 05:35:04 +0000
Manifest this update: Fri 19 Dec 2025 05:30:04 +0000
Manifest next update: Sat 20 Dec 2025 08:27:04 +0000
Files and hashes: 1: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=)
2: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=)
3: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: ASDF6p+/8U0mOYkrib+X5gzB3lKvsvwHZWHya3TiStA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 08:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:94:e3:05:be:05:ea:1e:dd:3a:fa:6e:28:02:34:75:ec:17:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Validity
Not Before: Dec 19 05:30:04 2025 GMT
Not After : Dec 20 08:27:04 2025 GMT
Subject: CN=5F71B531CA223152301F82AD5AECBF8094B70661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:6c:22:c5:98:5a:ab:ce:e3:d9:77:54:7f:
05:95:ff:7a:64:19:3c:ae:39:4e:b9:02:83:b3:ef:
01:e0:d3:b2:99:ea:e7:49:91:ec:17:ad:41:3b:9b:
d4:1f:0e:fd:f3:55:0e:e2:5b:e5:3f:f0:b8:32:b3:
c5:15:7f:8a:4e:b1:1b:9e:9b:4d:38:bb:f4:d1:e6:
ba:0a:cc:ea:f9:39:cb:1e:15:6a:8c:0a:06:4c:ff:
43:68:81:ca:59:dc:43:34:4e:e9:bb:20:bc:26:d5:
f0:6c:41:7b:5f:14:9e:76:a8:f6:6a:bb:1e:da:f6:
8f:e5:bb:af:4f:bb:79:e6:64:32:99:92:f8:b1:a0:
f3:a7:09:b3:f8:27:97:b5:21:25:06:65:63:58:07:
da:74:26:cc:e2:27:5a:a9:e8:a0:c5:22:dc:91:e7:
d1:f7:9c:55:7a:d5:1d:a1:74:1f:f3:46:8e:cb:a3:
38:e8:b2:a5:a2:fe:d8:70:27:dd:3f:9f:65:37:a7:
f7:b1:39:32:58:f1:83:a8:58:a5:e7:84:f6:f5:49:
07:ac:18:ec:32:e8:ff:4d:44:da:b2:2e:e1:83:b0:
74:92:17:6d:23:41:0d:28:fc:f8:d9:c7:db:02:9a:
da:de:a6:48:ce:4a:ca:da:95:1c:57:13:c3:cf:80:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:B5:31:CA:22:31:52:30:1F:82:AD:5A:EC:BF:80:94:B7:06:61
X509v3 Authority Key Identifier:
keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:95:7a:39:b6:43:f5:4c:c8:68:29:e6:c3:29:b9:4e:e7:
80:ac:6d:90:5b:8d:da:6b:8f:7d:9e:1d:95:0c:05:51:64:f0:
f6:d4:5b:40:a5:5e:a5:39:69:c1:ac:ab:ad:d4:6c:55:ea:2a:
f5:40:d2:fe:a3:c3:4f:21:2f:53:43:96:ac:b6:73:4d:ac:54:
7f:07:ee:9d:4f:94:e3:c0:56:80:db:bc:97:57:95:94:43:37:
72:cb:d2:0e:43:fd:71:7c:bc:3c:5e:78:82:94:7b:19:65:98:
57:b3:3b:15:91:4b:21:b1:2f:38:e6:d4:ea:da:f9:c4:a9:95:
e8:51:b8:c5:19:93:32:ca:00:09:d7:19:45:a3:23:1f:8f:5e:
b1:bd:d7:2d:1b:71:f0:d2:81:4b:cc:c7:4c:ab:ae:70:39:c4:
4b:ee:89:c2:d0:c4:24:77:f2:31:b2:e3:aa:e0:7d:dc:9d:42:
a6:b0:e9:2e:b9:bd:d3:79:40:42:1d:94:f3:c2:fe:3f:cc:24:
b3:2b:06:c5:8d:69:c6:cc:67:77:71:17:41:57:44:f3:46:d7:
a9:18:62:d7:c8:5e:c0:2c:72:75:46:a8:ae:0e:53:d3:71:bc:
68:0f:0a:56:44:e8:81:64:f7:51:3d:10:4b:f9:46:0c:d9:e4:
79:9e:38:70
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUApTjBb4F6h7dOvpuKAI0dewX4bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy
RkYwRjYyOTAeFw0yNTEyMTkwNTMwMDRaFw0yNTEyMjAwODI3MDRaMDMxMTAvBgNV
BAMTKDVGNzFCNTMxQ0EyMjMxNTIzMDFGODJBRDVBRUNCRjgwOTRCNzA2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnmwixZhaq87j2XdUfwWV/3pk
GTyuOU65AoOz7wHg07KZ6udJkewXrUE7m9QfDv3zVQ7iW+U/8Lgys8UVf4pOsRue
m004u/TR5roKzOr5OcseFWqMCgZM/0NogcpZ3EM0Tum7ILwm1fBsQXtfFJ52qPZq
ux7a9o/lu69Pu3nmZDKZkvixoPOnCbP4J5e1ISUGZWNYB9p0JsziJ1qp6KDFItyR
59H3nFV61R2hdB/zRo7LozjosqWi/thwJ90/n2U3p/exOTJY8YOoWKXnhPb1SQes
GOwy6P9NRNqyLuGDsHSSF20jQQ0o/PjZx9sCmtrepkjOSsralRxXE8PPgLLZAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUX3G1McoiMVIwH4KtWuy/gJS3BmEwHwYDVR0j
BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV
LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE
RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE
enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB
RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Ch6Vejm2Q/VMyGgp5sMpuU7ngKxtkFuN2muPfZ4dlQwFUWTw9tRbQKVepTlpwayr
rdRsVeoq9UDS/qPDTyEvU0OWrLZzTaxUfwfunU+U48BWgNu8l1eVlEM3csvSDkP9
cXy8PF54gpR7GWWYV7M7FZFLIbEvOObU6tr5xKmV6FG4xRmTMsoACdcZRaMjH49e
sb3XLRtx8NKBS8zHTKuucDnES+6JwtDEJHfyMbLjquB93J1CprDpLrm903lAQh2U
88L+P8wksysGxY1pxsxnd3EXQVdE80bXqRhi18hewCxydUaorg5T03G8aA8KVkTo
gWT3UT0QS/lGDNnkeZ44cA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:11:07 2025 by rpki-client