This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
File: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json)
Hash identifier: IFKJGfQBOEepeDEUt5uTv3Q9zG4q33nwLtRsDceyXJE=
Subject key identifier: 0A:C9:9D:AD:06:07:B7:90:21:20:5C:1B:7A:01:B5:92:5B:CD:4A:F2
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial: 3246143A2887A8F7D16A6ED95AD49782F873964A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
Manifest number: 0337
Signing time: Fri 19 Dec 2025 18:20:33 +0000
Manifest this update: Fri 19 Dec 2025 18:15:33 +0000
Manifest next update: Sat 20 Dec 2025 19:36:33 +0000
Files and hashes: 1: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: BGGRbeeaeZS32mb9BjaJTEl1ccIG5JQl9PMlKir5qCM=)
2: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=)
3: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 19:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:46:14:3a:28:87:a8:f7:d1:6a:6e:d9:5a:d4:97:82:f8:73:96:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Validity
Not Before: Dec 19 18:15:33 2025 GMT
Not After : Dec 20 19:36:33 2025 GMT
Subject: CN=0AC99DAD0607B79021205C1B7A01B5925BCD4AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:27:01:9b:3d:fd:23:5e:ea:14:9e:15:8e:
a8:e3:67:d5:30:0f:e8:ca:12:26:16:b5:b9:1f:78:
2b:5c:0d:78:43:7d:05:16:89:29:c4:74:55:92:cb:
71:17:d4:73:16:39:84:34:dc:89:87:5d:6d:be:15:
9a:17:c2:59:02:60:30:39:b3:5b:4a:5a:82:12:05:
ca:da:d3:b7:9f:47:e0:be:a9:b9:0a:f9:1c:a9:74:
58:ab:69:fc:54:c1:85:f9:9a:e0:4d:30:62:5a:49:
09:4e:92:7a:66:46:86:27:1a:6a:fb:c1:b2:60:92:
e8:0c:3f:aa:fa:a2:b3:2a:f1:48:45:3d:59:39:bb:
56:b1:b7:bc:4f:85:28:38:1d:f5:1d:9e:fc:bf:6c:
3d:d7:dd:23:7c:69:3c:25:3e:c7:2b:f2:18:71:a4:
95:7b:40:dc:f5:50:a4:7f:40:3a:f3:1c:fb:c6:de:
8d:5f:80:d2:78:78:cc:0a:e2:45:50:3e:28:b1:26:
5b:76:60:df:57:c7:56:a5:1f:47:ce:00:06:f6:a9:
8d:df:08:78:11:75:11:6f:26:c8:a4:0d:40:48:41:
62:ca:0c:49:60:0d:b5:10:c3:2e:45:39:6a:cd:bd:
e2:68:c9:a4:4c:de:39:a9:76:14:4a:4c:65:ef:f2:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:9D:AD:06:07:B7:90:21:20:5C:1B:7A:01:B5:92:5B:CD:4A:F2
X509v3 Authority Key Identifier:
keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e0:0b:1f:00:86:18:7a:5d:8e:94:12:24:b0:1a:e7:bf:7e:
1e:ea:53:a0:6c:9e:8f:c7:c7:a0:e4:62:25:b4:eb:aa:a3:7e:
85:58:df:bb:60:dd:7e:95:80:ef:1f:dd:7c:6f:16:e6:79:46:
b7:e7:69:b2:25:8e:b9:f0:9d:d2:f5:20:a7:34:13:31:71:42:
e5:69:41:3a:76:14:20:ee:37:c7:85:1b:1c:78:35:06:b2:e0:
bb:b5:dc:16:f4:fb:b4:ed:41:39:fd:e7:37:0c:32:cb:a2:d7:
34:ce:17:61:25:64:6e:6a:ed:89:14:30:2d:dd:3d:f7:df:98:
97:e2:d3:c7:4f:cb:a8:05:c0:02:cb:89:4e:57:b5:e8:1c:5e:
09:2a:47:35:a0:df:64:f1:60:ce:31:27:4e:ca:79:a3:6c:53:
ec:77:00:d7:74:93:94:de:c7:6e:a1:56:10:4d:d6:37:52:5f:
72:1a:57:d2:4b:ff:ad:c9:96:d5:fc:e2:29:80:cc:88:f9:18:
70:aa:ca:71:ee:b3:ce:bc:f9:12:46:71:0e:69:1d:32:05:19:
90:0a:94:72:c2:fd:98:5c:d2:e9:16:88:bc:68:b2:07:d2:62:
fd:02:ce:cb:8f:b8:86:52:ef:e1:7c:3d:0a:0b:33:3e:2a:b4:
df:18:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:25:03 2025 by rpki-client