This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
File: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft (raw, json)
Hash identifier: BBq7GSuv0OkUIW79huBZlglJXVrowQpHi4I5Mv4spFQ=
Subject key identifier: 53:DA:D3:29:84:A1:73:E9:68:9D:52:EE:CD:57:39:82:41:2A:C3:32
Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
Certificate issuer: /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
Certificate serial: 2F6EDF30FBCC58FBECDA30478813C32DCD4BCC85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
Manifest number: 28
Signing time: Wed 24 Dec 2025 01:18:24 +0000
Manifest this update: Wed 24 Dec 2025 01:13:24 +0000
Manifest next update: Thu 25 Dec 2025 01:20:24 +0000
Files and hashes: 1: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl (hash: EZ3SSjfpjaHfnh+VI33DDYaRIObG3fMB63MBFdF+FOI=)
2: 3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (hash: WlfPkdvQaK+2iNV2J8DnE42kv5R/ULsDx9rhkKjR0cA=)
3: 3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa (hash: N91dwFlRpIMGXso4PKVxPSMTeHaKnAVRNeylT8GL1f4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl
rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 01:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6e:df:30:fb:cc:58:fb:ec:da:30:47:88:13:c3:2d:cd:4b:cc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
Validity
Not Before: Dec 24 01:13:24 2025 GMT
Not After : Dec 25 01:20:24 2025 GMT
Subject: CN=53DAD32984A173E9689D52EECD573982412AC332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:e0:2f:65:7e:88:6c:19:84:6b:36:88:eb:
bf:f1:58:e7:bb:22:6c:6d:0f:1c:6c:e0:35:bc:52:
b5:b8:f3:d2:36:77:b1:96:1b:ac:40:dc:9d:43:7a:
ee:0d:2c:43:a8:aa:b1:bd:de:ed:5f:6e:9a:b3:60:
66:a1:42:4e:fd:14:64:43:76:e0:c8:bb:86:d2:48:
7d:2e:e0:0e:c4:12:97:4b:21:0d:2d:84:90:8a:f2:
e1:79:16:10:1e:a7:c1:d0:bd:34:4e:71:9c:69:9a:
ef:de:94:3a:0a:dc:95:c2:9c:25:2f:56:bf:a3:5d:
51:5c:9f:c2:09:5d:55:f8:9f:58:65:9a:d2:a9:d2:
e3:43:91:7e:f8:b9:40:40:b1:c8:ab:e5:4d:ef:c3:
62:f7:ba:4b:82:c4:18:0c:da:1a:54:33:25:a8:24:
ac:6a:9c:2a:7d:fb:28:fa:da:66:94:13:b6:b6:df:
ae:de:57:15:5e:37:12:dc:ca:0f:3c:09:5e:fb:1e:
ad:7c:84:27:b7:be:7c:db:bc:6c:e2:96:98:c1:e7:
ae:2b:2c:f3:90:3d:e5:9f:e9:c3:73:80:a1:5a:ac:
7f:6b:55:00:52:2e:d2:7d:54:d5:00:04:fb:89:0b:
ac:a7:a1:f0:d6:58:2c:87:8b:b2:32:a4:ac:22:75:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:D3:29:84:A1:73:E9:68:9D:52:EE:CD:57:39:82:41:2A:C3:32
X509v3 Authority Key Identifier:
keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a2:8e:c0:f6:2d:30:5e:c7:23:5e:b8:78:93:a1:ba:6a:15:
8b:d2:61:31:91:44:7e:4e:17:fd:c1:a9:39:c3:1b:fb:5e:1a:
9e:86:1b:5b:17:f5:ac:b2:ce:0d:45:37:e7:f9:28:ab:12:dc:
90:3e:4e:34:1e:a2:9d:44:f5:f6:7e:e3:e1:be:d4:92:40:26:
df:15:c1:4a:43:dd:9e:e9:44:1e:62:08:05:41:da:63:13:08:
ac:e7:08:c5:df:4f:11:27:d0:12:05:18:14:19:c9:63:82:15:
c0:5a:a2:2f:2b:83:63:3f:6e:8d:a0:00:dc:a2:c4:bf:d7:a4:
6c:04:a2:cd:9a:89:37:0d:95:a7:9e:1f:7c:db:c4:e2:77:3d:
21:45:b6:57:37:31:65:3f:07:17:3b:f3:70:aa:dc:5d:34:3c:
03:9f:ac:a2:4e:15:db:b0:44:ce:11:39:42:21:2a:b3:65:42:
99:98:ec:17:58:bb:3f:0c:9e:b2:70:4f:77:fd:53:7b:db:a3:
44:85:59:cc:20:d7:7b:07:2f:b2:56:55:6b:dd:5a:61:3c:b3:
d8:07:83:b8:75:fb:76:81:b5:c7:ab:2d:c3:8c:d2:cf:16:e6:
39:95:d3:66:00:22:63:79:af:c8:6b:48:69:7e:6c:40:17:66:
d2:00:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:19 2025 by rpki-client