This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json)
Hash identifier: LV+FwhiO1DqfHas37Qoofhk6wRws3txq/kYIXM67Vpc=
Subject key identifier: C6:72:C0:51:EB:E7:A4:80:47:2B:6E:71:6D:72:87:A6:9D:98:29:4E
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial: 0E7E75B576BBD363433610AB48E1B3EB324AB591
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
Manifest number: 034A
Signing time: Wed 24 Dec 2025 01:03:06 +0000
Manifest this update: Wed 24 Dec 2025 00:58:06 +0000
Manifest next update: Thu 25 Dec 2025 02:23:06 +0000
Files and hashes: 1: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: tfcpjQMdWnYeWBfBGwSK9K0VLao46clIXi5o/6JgQj0=)
2: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=)
3: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 02:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7e:75:b5:76:bb:d3:63:43:36:10:ab:48:e1:b3:eb:32:4a:b5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Validity
Not Before: Dec 24 00:58:06 2025 GMT
Not After : Dec 25 02:23:06 2025 GMT
Subject: CN=C672C051EBE7A480472B6E716D7287A69D98294E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:a4:8f:cf:85:2f:81:ac:dc:97:e4:c4:56:
8e:c8:33:c5:15:a4:c9:93:a6:28:be:47:dc:e6:a2:
c9:20:70:40:cc:01:fa:43:e6:05:e9:7f:ef:01:23:
3d:7d:bd:ef:8f:eb:1f:d1:88:2a:d7:bb:9e:92:f6:
84:0e:0e:3f:5f:fa:41:d3:a4:82:4c:9d:80:b9:39:
46:bd:4d:72:de:fc:6b:59:95:69:0c:36:67:c3:b9:
55:dd:5b:78:ec:94:c3:cf:c8:76:e6:14:44:df:1c:
3f:ac:8d:b4:63:9e:a2:9c:b7:66:f0:45:b7:a9:a4:
f0:e9:ce:81:2c:59:df:5e:eb:6e:74:cd:35:9c:a6:
d6:5f:21:3d:16:4b:b0:c2:04:e1:ae:ea:28:4c:12:
ff:59:a1:84:66:be:39:87:1f:ee:1e:88:d8:c2:8f:
55:44:94:c0:4b:f1:10:b9:45:9b:8b:b2:bc:20:ee:
45:bc:55:4d:e4:33:9e:50:9c:82:6e:08:14:91:11:
12:cf:cd:f2:66:b0:b6:3e:4b:2c:4a:cb:4d:ae:f8:
69:92:26:14:9e:41:72:be:70:46:15:40:4a:2e:95:
78:24:b4:84:0f:df:18:96:ab:3e:23:b0:fc:1b:0c:
bd:16:e9:7d:cb:d1:a1:ca:e0:4e:ca:e3:ab:9b:07:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:C0:51:EB:E7:A4:80:47:2B:6E:71:6D:72:87:A6:9D:98:29:4E
X509v3 Authority Key Identifier:
keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e9:59:b0:04:cd:cb:43:ae:0b:21:81:06:e6:b0:9e:1e:bb:
43:f3:9c:8b:08:74:e0:95:9c:22:b1:01:de:de:8b:e9:9a:94:
16:27:11:cf:18:30:2d:19:9b:58:c6:9c:bf:4e:95:52:c7:b3:
5f:39:c7:ef:5e:e7:b5:81:67:70:aa:91:47:dc:38:b0:81:3c:
06:3b:08:fb:bf:4e:a2:75:44:74:d3:fd:37:20:68:fb:cc:c8:
ce:27:4c:92:75:71:6d:cd:d8:83:0f:bb:d0:c0:ca:79:f2:d9:
d0:17:15:2d:46:4c:b2:c4:8b:94:56:b7:de:c3:d6:c9:62:a5:
98:2f:a2:78:b1:0f:5d:b5:22:a5:d0:01:c1:b5:f5:ee:fe:cd:
27:3a:c9:cc:46:81:c5:30:2a:12:f4:24:7c:4a:d8:8d:9e:20:
03:a6:31:d6:73:25:da:42:9f:83:e5:2b:b8:06:08:d3:ff:5e:
c9:67:3c:c6:24:1d:07:fd:10:91:80:a6:29:d5:cf:4e:81:36:
13:9d:e5:7b:12:50:a2:05:c0:e2:6c:d0:81:53:6a:8c:c0:f0:
88:a7:cf:67:af:86:96:ce:61:76:12:d4:cd:93:e2:04:ad:52:
19:ff:7a:82:8f:48:71:91:bb:bd:4f:50:78:33:9b:5f:5d:b8:
75:0e:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:27:15 2025 by rpki-client