This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.mft
File: 3393707B27158FD41132C980C5592453DB68920C.mft (raw, json)
Hash identifier: TriekpIxaSmyoQaHMvexStwwlFU9tl7Pad/FoKWd/Ec=
Subject key identifier: 02:EE:D8:A4:D3:9C:54:A5:DA:A6:52:64:E0:EC:84:D3:DF:29:5F:A6
Authority key identifier: 33:93:70:7B:27:15:8F:D4:11:32:C9:80:C5:59:24:53:DB:68:92:0C
Certificate issuer: /CN=3393707B27158FD41132C980C5592453DB68920C
Certificate serial: 4548354105614D6D0FD1C7B06FA21B100D5124F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3393707B27158FD41132C980C5592453DB68920C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.mft
Manifest number: 2F
Signing time: Wed 24 Dec 2025 06:48:42 +0000
Manifest this update: Wed 24 Dec 2025 06:43:42 +0000
Manifest next update: Thu 25 Dec 2025 08:36:42 +0000
Files and hashes: 1: 3393707B27158FD41132C980C5592453DB68920C.crl (hash: ILzwMD1denjjwZR+cPFHcTFCo/1BpV3kc9ZcuSCaoIk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.crl
rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3393707B27158FD41132C980C5592453DB68920C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 08:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:48:35:41:05:61:4d:6d:0f:d1:c7:b0:6f:a2:1b:10:0d:51:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3393707B27158FD41132C980C5592453DB68920C
Validity
Not Before: Dec 24 06:43:42 2025 GMT
Not After : Dec 25 08:36:42 2025 GMT
Subject: CN=02EED8A4D39C54A5DAA65264E0EC84D3DF295FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:4e:ca:53:86:55:18:a0:2f:df:88:a4:cc:
6f:68:3c:77:1e:02:68:64:94:8c:d4:3a:ba:f1:35:
a4:78:49:6e:de:a7:dc:ae:2c:cc:c9:09:44:f4:d4:
6a:e6:47:45:3e:95:f0:fe:c0:eb:5a:57:ea:3f:3c:
8a:1a:ec:12:82:dd:ce:23:8c:0f:58:38:93:fc:85:
77:44:5b:56:5d:99:99:30:c8:57:fc:c8:f0:80:16:
37:24:06:31:57:73:37:d7:90:f7:cb:a5:b4:1e:c3:
7d:07:5f:07:7c:bb:66:36:0b:e3:3d:40:9a:42:42:
59:ea:c8:de:75:dc:3d:0a:0f:b5:d6:f5:b1:d8:00:
b4:96:b3:d1:88:b1:13:92:f0:58:d4:a9:4a:45:0d:
f7:db:d1:a7:30:9f:02:1f:d5:e6:cd:a4:c2:d4:71:
1e:fc:49:c3:4d:07:e4:77:29:d2:3e:7c:44:93:a1:
d5:f2:e4:42:93:1e:10:45:24:8c:38:04:68:df:d3:
5f:b2:49:b7:f1:61:1f:ba:e7:6e:1d:f0:1b:d5:48:
92:ce:63:7f:72:65:a1:2e:a0:c2:2a:17:13:d1:17:
21:e3:61:c6:4a:ef:8c:99:f5:2e:e1:a1:8f:cd:f6:
52:53:46:87:93:22:a0:18:90:dd:1e:1c:8c:60:cc:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:D8:A4:D3:9C:54:A5:DA:A6:52:64:E0:EC:84:D3:DF:29:5F:A6
X509v3 Authority Key Identifier:
keyid:33:93:70:7B:27:15:8F:D4:11:32:C9:80:C5:59:24:53:DB:68:92:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3393707B27158FD41132C980C5592453DB68920C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:98:09:ed:11:53:01:c5:96:36:5d:98:60:44:c8:1e:83:5d:
bd:49:3d:b9:25:fb:a4:9f:e1:fe:e0:f2:0b:40:38:34:d6:03:
03:4b:1e:df:0b:f2:50:f6:99:b7:00:55:5f:41:8c:0a:04:49:
b8:07:fc:85:dc:71:82:30:87:5a:a9:6f:c2:1b:fc:b2:1f:9f:
a7:38:4a:00:8d:b5:0c:00:09:38:67:d5:c6:92:86:5e:c0:c4:
a1:65:85:ef:e3:b9:5b:c9:9e:ab:a9:24:3d:3d:8f:f3:06:fa:
1f:dc:cd:bb:e7:3d:2a:4f:f5:c6:92:e0:ce:e2:10:b2:28:bd:
c7:c9:94:f5:2b:c9:ea:36:d2:33:c6:21:60:d4:95:96:97:37:
69:f3:80:bf:d0:31:c1:36:fd:ee:0b:57:59:8f:5b:3f:06:c6:
d8:17:d2:3e:cf:10:41:a9:25:71:51:e6:a1:95:28:8b:d3:1a:
89:ec:22:32:78:9e:96:8b:b9:15:d9:20:fd:f3:3f:6b:b9:03:
9d:7f:a3:18:4e:df:83:2e:03:5b:a4:95:54:98:3d:4e:5f:e5:
d0:e7:2e:7a:54:fe:8d:f7:68:d4:2d:85:63:ea:de:76:2f:0f:
6f:bf:7f:a0:1b:09:4d:c5:86:90:2e:47:d5:4e:53:bc:c7:66:
e0:53:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:22 2025 by rpki-client