This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json)
Hash identifier: b++l0/LlOlSLA5ycWS8s9VOxNK1394YAvc+n6GBMF3k=
Subject key identifier: 8E:56:D1:58:D1:6B:C8:35:1B:C0:C4:58:91:F3:D8:23:17:92:90:D5
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial: 3AB4BDB0CED0DC9C158D50354DBA1C59601D95B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
Manifest number: 034B
Signing time: Wed 17 Dec 2025 18:50:07 +0000
Manifest this update: Wed 17 Dec 2025 18:45:07 +0000
Manifest next update: Thu 18 Dec 2025 21:55:07 +0000
Files and hashes: 1: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=)
2: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: RVjxxAt5Y5aVMreiTcAKlixmb+iRMxR2jdel+SXVCOA=)
3: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=)
4: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 21:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b4:bd:b0:ce:d0:dc:9c:15:8d:50:35:4d:ba:1c:59:60:1d:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Validity
Not Before: Dec 17 18:45:07 2025 GMT
Not After : Dec 18 21:55:07 2025 GMT
Subject: CN=8E56D158D16BC8351BC0C45891F3D823179290D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:7f:f5:ae:82:17:fd:17:fd:6f:16:c5:b8:
0f:07:61:73:44:de:d9:89:17:9c:b4:41:44:71:64:
a1:44:37:ee:6e:c7:91:20:a2:3e:11:0a:55:9f:c8:
de:3c:59:15:bc:d4:91:3b:d5:f1:17:a9:26:e7:e5:
a4:0d:4c:30:b5:70:2f:ac:13:23:31:36:f1:4c:ca:
7c:23:35:cb:6a:4f:c7:97:0d:11:51:3f:3d:5f:4d:
84:ba:26:1e:f8:58:5e:aa:d0:ce:44:11:80:52:51:
0f:66:cf:21:bb:fc:d3:e9:97:55:4f:91:7d:93:56:
5b:c8:59:8c:b0:ec:08:1a:1a:2e:a5:27:59:78:fe:
8b:64:f5:ca:46:4f:f6:80:92:16:d7:5f:40:9a:09:
84:03:18:0d:4b:52:d4:b5:7d:52:d6:35:40:2a:4a:
91:01:d9:11:fc:76:6e:04:41:be:a7:43:a0:cc:b4:
6e:02:81:8b:91:17:4c:6f:42:f4:cf:30:01:ef:9d:
eb:44:0d:57:a2:e0:ed:5d:9b:d0:43:28:32:86:16:
d6:b6:c9:aa:0f:55:53:eb:0e:b8:5d:6c:aa:5b:f1:
29:d0:98:27:2b:6d:56:f2:a1:fd:0d:28:20:f1:d7:
56:88:cf:1f:d5:3a:f3:7e:21:08:06:18:9b:c2:4e:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:D1:58:D1:6B:C8:35:1B:C0:C4:58:91:F3:D8:23:17:92:90:D5
X509v3 Authority Key Identifier:
keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4e:7a:43:d3:b2:5e:25:b3:39:89:eb:85:5f:4b:d0:1d:ed:
d5:57:4f:5e:ad:d7:67:31:74:03:8a:66:55:90:56:a3:ab:da:
6e:b0:a1:68:3c:72:45:7a:57:37:65:b6:b3:b1:7e:22:b3:2f:
02:7e:11:22:c9:99:ee:22:61:8a:48:2e:39:4a:7f:de:e1:4f:
62:28:9b:eb:9c:62:25:58:2e:fd:53:99:20:1a:81:8b:1f:78:
1d:9a:5e:db:c7:34:98:2c:8e:c0:5c:7c:1f:b0:8a:f5:ba:f8:
f4:a6:3a:45:85:aa:96:92:e6:54:c4:41:44:f7:5f:d4:13:80:
e4:12:7f:b3:77:40:59:60:a4:8c:e9:d1:2f:9d:7e:ae:44:76:
49:31:46:c9:f9:6b:f5:a0:dd:2b:7f:2d:fd:a0:7a:c6:4f:23:
f9:1e:ef:8d:4b:e9:bf:5f:a2:f4:53:85:b9:43:fe:f4:32:ee:
2d:8c:67:33:1b:7f:4c:bd:0a:53:28:89:96:1f:50:fb:bf:be:
5d:77:6d:87:09:f3:4a:0d:58:04:51:61:f4:bd:eb:7a:b2:4a:
e1:19:07:7e:65:cf:04:52:2e:9f:6e:22:b2:90:ec:21:ed:4a:
c0:6d:27:6f:61:93:6d:31:a5:8a:47:73:54:52:46:ce:3a:11:
72:7d:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:32:08 2025 by rpki-client