This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.mft
File: 92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.mft (raw, json)
Hash identifier: NfLJkyuDyaGleXCUoJZv4qu4bSVVp0b15N0tr7W/mRQ=
Subject key identifier: 64:23:4A:9E:90:40:90:70:1D:1F:CA:D9:0B:15:8E:26:70:5E:A3:6D
Authority key identifier: 92:C8:B0:87:70:CF:9E:6E:E7:AE:9F:27:72:CA:5C:A8:99:24:51:7F
Certificate issuer: /CN=92C8B08770CF9E6EE7AE9F2772CA5CA89924517F
Certificate serial: 2D2DB8DBFD4771B3BDAA2BDC3EC3F818592E3921
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.mft
Manifest number: 41
Signing time: Wed 24 Dec 2025 05:41:47 +0000
Manifest this update: Wed 24 Dec 2025 05:36:47 +0000
Manifest next update: Thu 25 Dec 2025 06:39:47 +0000
Files and hashes: 1: 92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.crl (hash: xPixxqewIOxB5YdtPTkhJceHuvlG59atA+ic6l7Sd/I=)
2: 323830343a386438343a3a2f33322d3430203d3e20323733333632.roa (hash: 9fR8V9pA9DtKv3bo2YSes0mctv41AMhYL3V4WP32Mnc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.crl
rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 06:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2d:b8:db:fd:47:71:b3:bd:aa:2b:dc:3e:c3:f8:18:59:2e:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92C8B08770CF9E6EE7AE9F2772CA5CA89924517F
Validity
Not Before: Dec 24 05:36:47 2025 GMT
Not After : Dec 25 06:39:47 2025 GMT
Subject: CN=64234A9E904090701D1FCAD90B158E26705EA36D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:83:dc:44:f9:62:62:94:d4:d0:b6:14:2e:
49:fe:a9:ba:f2:ec:eb:c3:5c:04:c3:17:d7:1a:25:
03:a8:51:90:82:eb:93:bd:ab:21:0d:6c:db:02:b9:
57:a8:c1:be:78:3e:54:c1:03:79:a8:ca:01:3e:57:
d8:5d:0c:d8:8c:fe:a3:b2:78:66:dd:4f:f8:7c:7a:
ca:be:79:de:f4:11:60:97:c9:e7:5d:6d:9f:e4:1d:
17:e7:51:d1:34:f4:ac:d3:b8:4d:41:b7:c0:1e:61:
15:ed:a1:6f:25:15:48:4f:fb:fa:90:c2:c9:1d:02:
e7:fd:cc:e4:eb:e3:e4:57:54:c6:fc:fd:2d:1c:85:
ad:b2:87:ca:53:a8:cc:d4:d1:f1:f7:4a:9d:d2:0b:
2a:c9:2d:a9:a1:21:49:75:91:c9:3b:0e:64:63:9f:
b4:3e:be:99:53:2f:7c:36:97:0d:2e:e5:2e:0f:d0:
34:02:e3:c3:9f:0f:78:48:fd:39:25:70:63:20:e8:
31:2d:ed:aa:63:b8:f0:05:8c:af:be:a6:e2:76:14:
fc:df:d2:70:cd:d7:9c:81:09:6a:c7:cd:b8:fb:e9:
01:07:31:3a:c1:4a:e6:9d:a2:1c:6a:a6:f0:8b:1b:
b6:8f:df:ad:1e:a5:20:d0:41:43:f3:6f:80:d0:0f:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:23:4A:9E:90:40:90:70:1D:1F:CA:D9:0B:15:8E:26:70:5E:A3:6D
X509v3 Authority Key Identifier:
keyid:92:C8:B0:87:70:CF:9E:6E:E7:AE:9F:27:72:CA:5C:A8:99:24:51:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/92C8B08770CF9E6EE7AE9F2772CA5CA89924517F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:e9:e3:61:a8:dd:84:e7:dc:95:cf:4d:31:3c:8b:7e:2a:
3b:78:1c:12:ae:5e:af:e7:71:1a:e9:5d:48:02:cc:f4:63:c0:
4c:bd:8f:5a:a3:be:72:27:09:01:9e:11:62:c7:d4:ed:8e:20:
b8:35:5e:f4:2b:c3:bc:ce:ea:d0:bc:90:30:f6:66:5e:45:7c:
c4:59:99:7a:e7:f0:99:45:08:e5:83:1e:30:ae:0b:4d:f9:b0:
aa:85:97:cc:c2:40:e7:f6:6f:38:d0:4c:8e:e0:7a:3f:74:df:
0c:a0:ea:44:50:47:7b:a6:7d:4c:30:c4:ca:4b:42:a6:4b:c7:
6d:74:04:7d:2f:60:86:f6:df:9f:71:10:8e:0f:51:f9:7d:16:
2b:5c:39:3b:9c:b2:2d:ae:8f:15:f9:91:63:27:2b:30:80:89:
20:eb:c9:02:0d:3c:44:07:77:03:13:b6:d6:71:4a:72:e4:c4:
13:24:8b:52:29:78:ad:18:c5:6d:5a:3b:74:ce:d6:29:e8:dd:
5c:0a:43:73:e3:78:90:e8:e0:c4:88:b7:d2:c7:3c:14:b4:07:
87:84:f1:2c:13:2c:6c:2e:ca:41:09:2a:c1:4d:c4:14:62:0c:
cb:ec:6d:70:4b:66:b9:46:2d:9a:ed:3e:62:fb:99:da:3f:76:
e2:2e:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:24:20 2025 by rpki-client