This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
File: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json)
Hash identifier: NXTCtuU7/dfOFluR45cybQQD1+EalAwVrcwjoyxd0Tk=
Subject key identifier: A9:22:1D:FF:CC:0F:A0:53:9A:DE:E9:00:E2:B6:E9:5C:AF:06:DA:C0
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial: 42BFAE998DC5D6328E1228DC37687033BEF61CC3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
Manifest number: 0324
Signing time: Fri 05 Dec 2025 16:53:55 +0000
Manifest this update: Fri 05 Dec 2025 16:48:55 +0000
Manifest next update: Sat 06 Dec 2025 17:15:55 +0000
Files and hashes: 1: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: pCyml3s7o1E+8WNzjX7ZLq0Ue44S0HsNVKUwNqSM9AI=)
2: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=)
3: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 17:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bf:ae:99:8d:c5:d6:32:8e:12:28:dc:37:68:70:33:be:f6:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Validity
Not Before: Dec 5 16:48:55 2025 GMT
Not After : Dec 6 17:15:55 2025 GMT
Subject: CN=A9221DFFCC0FA0539ADEE900E2B6E95CAF06DAC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:73:9b:cd:9b:85:34:61:62:56:c0:90:dc:
66:ff:8a:1f:be:a3:17:75:51:92:ca:1e:32:a6:54:
fb:f9:ec:f2:c8:80:c6:9e:6f:69:91:3e:c6:de:c3:
93:35:f2:8b:cc:a6:07:8f:68:c6:05:c2:86:f7:c5:
58:a5:91:57:52:30:ab:60:7b:5d:de:54:6c:d4:e1:
ad:fe:23:45:ea:9d:4f:97:97:b3:32:eb:a6:e8:1b:
77:e1:b8:3f:a3:f4:92:4f:61:4d:90:f7:ca:86:cf:
64:7e:46:a8:7d:97:e8:31:95:55:65:34:b1:40:c9:
f1:c9:38:df:75:f1:7c:47:58:7f:d6:f4:42:12:91:
c7:2a:59:aa:10:b8:ae:20:d6:3f:00:2a:3f:dc:7b:
af:4e:3f:e9:06:f2:8a:a8:7e:23:3f:e9:7e:a2:33:
13:61:7a:41:be:f2:e1:61:1e:8a:b4:90:11:dd:69:
bb:90:88:fa:ee:59:9f:97:3c:17:18:36:ee:3e:24:
e7:bc:85:2b:e4:cc:2e:26:b4:f2:0c:21:ca:c5:f1:
0c:08:7e:d3:ae:2a:c8:48:a1:93:f5:1d:df:ed:b9:
9d:d4:b3:78:5a:78:0f:77:85:4f:6e:49:0e:69:fe:
34:44:42:94:cb:91:8d:cc:9d:a4:92:81:eb:d3:5e:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:1D:FF:CC:0F:A0:53:9A:DE:E9:00:E2:B6:E9:5C:AF:06:DA:C0
X509v3 Authority Key Identifier:
keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:03:c2:62:01:8e:e7:7c:70:67:99:c7:eb:5d:86:be:1d:
a7:3b:10:a4:2c:67:82:3d:4a:fc:f9:8a:ec:f4:8c:bc:dc:1c:
b2:6a:94:d5:b2:04:36:87:c1:07:1a:17:c4:98:ca:20:7b:9f:
ff:23:ee:bc:67:1e:92:c3:d6:df:57:b8:b3:ba:b4:38:49:d4:
1e:3f:df:5b:18:e8:f5:6f:19:29:c6:9a:ee:d5:65:b0:73:50:
47:fd:a0:43:d1:76:94:54:c1:bc:df:c5:d8:43:a6:92:00:6b:
a6:e5:04:38:cf:42:ce:6f:c5:53:a4:74:9d:1f:97:2d:79:3d:
38:9d:fc:d4:af:dc:5f:13:a3:56:f7:e4:53:b9:e0:9c:e6:19:
8d:1a:de:12:72:cf:1c:02:0d:ed:e0:7e:34:d3:ad:9e:59:d6:
e0:7e:c7:b8:27:fa:f3:44:65:15:06:22:cd:d7:3d:f6:2d:44:
3a:7e:3b:6f:99:4e:08:c9:c5:12:13:db:32:4e:0c:d8:50:c6:
2b:18:08:26:51:e6:35:37:4b:a7:74:84:77:e4:55:ae:e2:d8:
1d:57:dd:13:f5:dd:c2:35:78:9d:48:10:5b:6d:1e:db:74:5b:
82:97:6f:df:3b:80:26:cd:e3:63:65:e9:7f:43:b9:05:71:4d:
1f:38:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:13:38 2025 by rpki-client