This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json)
Hash identifier: si3d6yF361KLEZiexuXqXQ3Lxq57E+oNPlq0o36/7f4=
Subject key identifier: 96:74:71:0D:66:CE:B2:4E:5E:7A:8B:B7:6E:93:74:E8:C7:2B:48:77
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial: 2D1B47F9286E606E03C90A791194E50D06F052F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
Manifest number: 033D
Signing time: Tue 16 Dec 2025 21:21:03 +0000
Manifest this update: Tue 16 Dec 2025 21:16:03 +0000
Manifest next update: Thu 18 Dec 2025 00:46:03 +0000
Files and hashes: 1: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: u24znmZk60RuxQSrM/uWZH39dFpFMaHetSvCWlgaUmY=)
2: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: tgx0Vy+5T1TRke2lMS4iT0Zn+4rmirQHSXevJR078lc=)
3: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: 7mTGxBcJmB0cXKah+UHKsduoO+SpzBlH0SwtKtwt3pY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 00:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1b:47:f9:28:6e:60:6e:03:c9:0a:79:11:94:e5:0d:06:f0:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Validity
Not Before: Dec 16 21:16:03 2025 GMT
Not After : Dec 18 00:46:03 2025 GMT
Subject: CN=9674710D66CEB24E5E7A8BB76E9374E8C72B4877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:57:be:e5:b0:56:e2:c8:08:d0:0c:eb:1b:
9a:f3:ce:63:43:97:f5:7c:69:2b:f1:40:38:8f:84:
1f:ee:66:9d:d4:7c:f3:64:4f:d4:33:2f:a5:c1:89:
27:8b:03:7e:6c:c2:3f:81:63:a1:05:44:a9:df:e7:
03:0f:fb:82:b9:b8:fc:63:8a:f4:bf:4b:52:ff:47:
13:9c:f5:06:f5:90:59:cc:5a:0d:66:e1:9c:de:94:
0d:a8:02:1f:33:28:bd:35:23:ba:ee:87:81:66:bd:
94:8e:bc:cb:51:8c:4e:4e:1a:b3:9f:68:8e:a7:aa:
9f:4d:fd:6e:6e:0b:4e:7d:f8:dc:5f:3e:42:80:29:
41:46:b4:05:18:5d:83:bf:4e:d5:58:aa:52:73:de:
ff:94:85:c4:28:c5:d5:ca:93:04:3c:d6:38:43:40:
b3:83:79:72:d1:11:6b:5f:ed:78:eb:62:d7:21:42:
51:0a:42:c9:c3:a6:81:8a:6b:7e:64:3a:af:1b:f4:
3b:24:2c:9a:85:bf:73:41:62:88:ab:f2:4a:6f:07:
17:5b:0d:ae:99:5d:ee:f5:3e:51:47:b1:1e:2f:f7:
01:5e:ec:20:6b:56:c9:4a:f5:30:03:26:ce:dd:c1:
3b:7f:4b:26:0b:2d:7d:d7:a8:06:85:fd:99:6f:4d:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:71:0D:66:CE:B2:4E:5E:7A:8B:B7:6E:93:74:E8:C7:2B:48:77
X509v3 Authority Key Identifier:
keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:15:9f:72:39:9d:f5:98:a5:34:8b:9d:98:08:56:18:3f:38:
1f:b9:55:03:cd:dd:43:de:2e:f3:a3:a1:ac:69:6f:f4:82:76:
ab:cf:75:c3:b2:2e:d9:00:53:35:4a:a7:2c:e9:88:ad:79:17:
56:21:9b:e1:f1:88:dd:1f:73:b9:11:be:0c:b6:2d:15:8f:ac:
29:10:f9:00:a9:66:80:76:7e:96:a0:1a:d3:7f:a8:1f:aa:c7:
43:45:b3:ed:01:04:ad:b3:bc:e9:6d:a3:ff:96:8d:48:bc:9d:
d2:56:4e:32:4d:ca:46:1d:17:17:b9:a5:e9:76:4e:c3:7f:33:
17:79:a6:83:7d:87:dd:d6:d0:4e:7e:ae:5b:8c:82:46:0c:fd:
33:18:25:12:73:72:5f:f5:91:1b:0c:aa:96:65:a2:c7:91:c1:
b6:c3:c5:2d:4c:60:cd:af:0b:a9:14:5d:e0:0b:14:54:0d:d5:
eb:a7:4f:cf:9c:da:fd:08:77:df:d0:47:66:9e:24:55:47:d9:
7c:23:53:6f:b0:b9:c2:79:b1:c9:d1:ba:b7:3f:52:ef:03:3d:
1b:5d:64:80:3a:af:f9:f3:3e:fb:5c:60:3b:2e:e5:46:f0:9b:
cc:f3:25:04:cf:0f:f9:06:3f:65:99:a1:f2:39:93:9d:10:d0:
cf:86:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 08:50:11 2025 by rpki-client