This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json)
Hash identifier: GW8uPCG8JgISSBTbwXtZME1n/3bLcL1Vs2RKCKgD8Go=
Subject key identifier: 19:D9:9F:56:EA:85:0C:7A:4A:D3:9C:20:6B:CA:40:D2:CB:EA:23:5A
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial: 5E3975AAD039B0FF01193BC395663732ED674152
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
Manifest number: 033B
Signing time: Thu 18 Dec 2025 21:10:44 +0000
Manifest this update: Thu 18 Dec 2025 21:05:44 +0000
Manifest next update: Fri 19 Dec 2025 23:31:44 +0000
Files and hashes: 1: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: Bi13WAzQo6vlEWbxLW5EmBMIYmzYy2Cy5kYGggX68Ys=)
2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=)
3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 23:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:39:75:aa:d0:39:b0:ff:01:19:3b:c3:95:66:37:32:ed:67:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
Validity
Not Before: Dec 18 21:05:44 2025 GMT
Not After : Dec 19 23:31:44 2025 GMT
Subject: CN=19D99F56EA850C7A4AD39C206BCA40D2CBEA235A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:f3:a6:c3:dc:2c:b6:5f:5b:bd:2e:8d:c3:
ed:87:0b:08:42:9d:93:db:b3:33:ac:5e:dc:0a:ab:
9b:8f:fb:01:29:c4:30:5c:b2:64:ce:40:19:05:b4:
e2:92:52:92:c2:c1:bf:be:41:ee:96:5c:04:a0:51:
36:2b:fc:cf:d3:6f:d3:b5:3d:bb:df:7c:72:49:25:
45:22:0a:c7:a7:67:2e:47:8b:84:48:b3:59:3e:b3:
7a:1a:f4:8d:20:83:6b:7b:36:46:2f:6b:d3:d9:a5:
ce:aa:12:69:7e:da:55:d4:f6:86:e6:f5:a9:ec:fe:
9b:07:c6:20:af:11:8b:8c:c4:68:7d:30:53:d1:38:
fd:d6:83:12:22:ae:cc:73:70:7d:90:5f:ef:97:f9:
ad:08:2e:e3:8b:3d:f9:1c:dc:04:dd:12:93:fb:7f:
69:a5:dd:c0:dd:4c:fd:40:2e:23:e6:6d:dd:50:d2:
7b:12:ef:7b:d0:7d:96:85:97:f7:71:e6:79:37:b6:
da:2a:c6:92:da:4b:94:6a:c8:e8:0d:3d:15:f2:8b:
92:34:e5:a5:3d:ca:ab:f8:c4:46:81:1d:f4:61:f3:
cb:fc:ca:3b:41:28:10:c8:7d:66:38:6c:37:e2:64:
a0:03:9d:87:61:3a:82:c0:63:47:6f:8b:89:f7:38:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:9F:56:EA:85:0C:7A:4A:D3:9C:20:6B:CA:40:D2:CB:EA:23:5A
X509v3 Authority Key Identifier:
keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:5f:12:81:f8:2c:c5:b2:d8:f4:6b:2c:42:71:b4:17:f5:
ba:6d:06:c2:46:cd:14:ef:7a:2d:76:6a:cb:df:76:2d:63:c8:
23:20:c9:b9:6a:16:7f:c8:93:cf:03:84:f8:d0:ad:c6:b0:03:
e8:4f:9c:91:45:ff:a5:b4:e4:7b:81:ea:ec:9a:cf:2d:94:20:
f2:df:72:70:cf:cd:d4:9e:1c:95:74:0d:f0:07:17:cd:48:de:
57:de:a4:b5:dc:88:3b:2e:da:47:41:2f:48:8f:a5:c2:cd:2c:
e3:a0:d9:ee:e5:67:f2:10:6f:f0:a2:1a:7b:de:6f:19:0d:22:
9c:6a:81:14:10:4a:e6:60:81:c7:9a:84:98:a3:99:99:96:51:
18:01:1a:0d:c5:25:e7:ea:38:00:c4:01:61:b1:e9:a4:d0:76:
63:a8:fb:d7:76:ab:0b:6f:62:3f:80:31:c4:ed:c2:a7:0c:27:
e4:09:c6:59:7d:4f:07:89:75:e7:a9:d7:65:e4:8c:a4:ca:23:
ee:3a:e8:29:74:a6:54:82:08:07:43:a4:8c:22:3a:f4:ff:72:
7b:99:d7:46:bd:71:ac:b1:1c:24:92:77:89:a2:3a:3e:bc:02:
08:db:ac:82:57:e0:42:44:a6:a4:af:02:7f:8c:45:00:70:37:
0b:44:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:04:29 2025 by rpki-client