This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
File: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json)
Hash identifier: XLB7cySw9tx93fOAH3Jgpdz5Ytvt87eSkdM75DdYHzM=
Subject key identifier: BC:38:BE:F9:81:80:E0:7B:80:B3:AD:AE:8A:83:BE:DE:65:85:63:0F
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Certificate issuer: /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial: 3CB275D181D5E1EC75DD372A8305D3FAAA884885
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
Manifest number: 01D4
Signing time: Mon 22 Dec 2025 15:07:32 +0000
Manifest this update: Mon 22 Dec 2025 15:02:32 +0000
Manifest next update: Tue 23 Dec 2025 17:05:32 +0000
Files and hashes: 1: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: 5gf4A5jTNLH9AoV4kZlw2Knr+KxiGra6HbwLEn+B+sg=)
2: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: y4BU9tAgBE8KAu9lC6vS02GM0gSjit3IUwZsrYSuI7I=)
3: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: 0aFXlJkY7vY6nHQ13emZkyqJtImkUYXm8oiHUaeQtmM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 17:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b2:75:d1:81:d5:e1:ec:75:dd:37:2a:83:05:d3:fa:aa:88:48:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Validity
Not Before: Dec 22 15:02:32 2025 GMT
Not After : Dec 23 17:05:32 2025 GMT
Subject: CN=BC38BEF98180E07B80B3ADAE8A83BEDE6585630F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:d5:a6:1f:40:c9:db:7f:ba:0a:93:2c:69:
7e:85:5a:ec:a8:f2:6d:cc:e9:ea:d8:4d:a6:0a:5a:
0a:cb:43:e6:3e:01:00:33:85:3f:81:c1:1a:78:20:
02:01:eb:3d:4e:cd:0a:4b:21:d5:8e:4a:21:f7:a5:
6d:f9:02:af:7e:23:a6:02:11:d2:dc:53:a5:f8:bb:
aa:53:6b:29:cb:d6:c2:fc:2c:b2:d4:74:be:fa:9a:
bb:ab:d5:1a:08:f0:61:03:41:75:38:2f:2a:69:6d:
4f:55:55:5a:85:62:96:a5:65:80:d7:a3:3a:5f:47:
08:f0:e8:dc:3a:13:37:44:c2:db:2d:62:4a:5e:04:
15:dd:b8:41:93:cb:fc:b1:99:5f:a3:1a:60:54:1c:
36:8f:42:48:b8:f0:ec:8d:91:c7:db:7f:0b:6a:5b:
63:49:72:a1:15:a3:6d:b9:26:07:f0:80:9c:37:4e:
93:2b:6d:66:a5:5c:a2:98:e1:68:58:52:fb:81:79:
53:0a:99:12:ae:87:46:34:33:cf:d5:b1:e8:9a:4c:
7f:79:ad:e6:5d:38:9b:db:ca:7b:8f:9e:df:90:e6:
d6:81:8d:58:36:4a:f4:6f:05:e2:53:34:b9:17:0f:
73:43:9d:ba:d2:3f:99:8d:81:db:1c:52:68:c4:b7:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:BE:F9:81:80:E0:7B:80:B3:AD:AE:8A:83:BE:DE:65:85:63:0F
X509v3 Authority Key Identifier:
keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:44:ad:3a:cd:b4:bf:c0:1a:a8:cf:e1:21:da:c3:01:21:ca:
52:3f:4e:a9:c1:92:2c:11:4f:ea:91:98:1a:87:fb:a9:b5:4a:
cd:1c:61:5f:d1:e5:2b:27:fa:fd:b3:07:8c:cf:64:82:59:9c:
04:0e:c7:db:f3:29:b3:a7:d2:54:f7:a9:46:9b:47:a8:8d:e4:
ec:79:df:23:9e:1b:bf:ba:82:74:46:cc:b7:7b:01:7a:a1:13:
98:ac:2e:17:8e:4a:c0:e3:2d:1d:28:74:58:dd:e3:91:a4:d2:
cd:77:7f:b0:d2:8f:31:31:cc:93:5b:2b:fd:d4:10:f7:78:e7:
91:7a:f8:9e:fd:88:86:1c:06:25:cd:01:4b:c3:aa:e2:40:3c:
b3:4e:7f:8d:c6:a0:8a:d6:cd:1b:3f:2d:3d:d6:18:32:71:86:
5d:b9:ee:42:4e:72:54:9f:30:22:c7:57:74:03:17:12:a9:a8:
a1:69:6a:10:9c:36:9c:83:5d:13:e9:22:a6:b9:0a:49:2d:2b:
f8:7c:bf:9c:30:ea:2d:f5:03:ac:49:98:34:9b:c5:3f:bc:13:
ee:c2:8b:df:f3:e2:24:aa:51:a9:d7:bf:e9:0a:ec:11:83:52:
db:bd:6c:21:d6:9a:d1:5d:17:66:b2:49:62:2f:82:6a:1f:0f:
4a:c8:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:47:57 2025 by rpki-client