This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json)
Hash identifier: BbYw/Zri2kKKBqXVsGxkhF5gVHiuydv94pkRa5N1E54=
Subject key identifier: FE:17:E8:DA:D7:B0:9F:0F:B4:93:FE:63:F2:A6:37:FF:5D:1A:15:24
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial: 32653E6CF8CA23DE28594FE76072FB93481CCBE5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
Manifest number: 013D
Signing time: Thu 01 Jan 2026 02:56:45 +0000
Manifest this update: Thu 01 Jan 2026 02:51:45 +0000
Manifest next update: Fri 02 Jan 2026 03:44:45 +0000
Files and hashes: 1: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=)
2: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: BETSOkECtsOUuQF41uXULycDMA9+vMeEJXBgxsFkPdA=)
3: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=)
4: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 02 Jan 2026 03:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:65:3e:6c:f8:ca:23:de:28:59:4f:e7:60:72:fb:93:48:1c:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Validity
Not Before: Jan 1 02:51:45 2026 GMT
Not After : Jan 2 03:44:45 2026 GMT
Subject: CN=FE17E8DAD7B09F0FB493FE63F2A637FF5D1A1524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:cf:18:5b:84:e1:7e:83:46:16:3b:a4:97:
dc:c2:98:ee:1b:a8:78:d2:64:2f:87:4d:31:6a:a8:
99:7c:0b:71:b3:0a:c9:60:1c:96:46:be:00:3f:e3:
b8:a6:8c:34:b1:84:af:41:58:8b:33:31:c4:1f:ee:
4a:c8:b7:8d:54:be:18:a6:d3:92:11:98:45:9f:5f:
3e:c6:e8:f3:0c:7f:88:ed:2b:19:ee:e9:12:f9:84:
cd:0c:9b:0b:63:f0:69:5a:f3:c1:ed:19:14:35:96:
c3:3a:65:fc:e6:47:82:2f:f5:e7:f5:2f:c1:49:f2:
d0:5e:74:4d:8a:9c:e8:60:6b:fa:8c:cc:ac:f6:e5:
ec:e4:71:d7:36:0d:34:fe:44:7d:b6:34:94:f4:c5:
85:2a:32:77:1b:71:21:29:af:8d:07:78:72:c7:1a:
a2:7a:c3:ac:00:5d:82:76:31:93:e3:b8:98:30:25:
b2:4f:d3:c7:e4:3a:d5:8f:56:a1:fa:2c:40:ab:bc:
6e:0b:3d:a0:00:02:df:44:39:8f:4a:9e:f6:4b:03:
ba:ea:c0:6e:a5:d7:7e:5c:f2:05:ae:ac:a5:d3:7f:
87:25:8a:4b:f3:6d:52:7b:10:91:61:b2:8d:66:48:
43:04:bd:2c:37:07:be:07:a0:4e:84:ed:b6:7f:29:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:E8:DA:D7:B0:9F:0F:B4:93:FE:63:F2:A6:37:FF:5D:1A:15:24
X509v3 Authority Key Identifier:
keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fe:64:f6:0f:bb:8e:28:ef:44:98:69:10:70:d1:e6:98:4a:
19:55:eb:59:de:18:6d:91:4b:77:57:fc:b8:25:df:17:36:90:
50:bc:9c:8f:cb:77:d6:e8:32:2b:c2:12:6a:11:83:81:6c:e9:
e5:b5:7a:43:46:a1:97:85:e4:01:c2:c0:7d:34:13:51:35:88:
4d:19:d2:d0:aa:4e:2c:4f:6e:4a:2c:7a:b0:e6:3f:2c:1c:b9:
45:cc:19:90:97:a6:5d:19:76:7b:f1:20:e7:4b:d9:78:cf:be:
96:c4:44:f5:9d:be:a4:4a:3b:25:78:ef:bc:cb:e9:73:5d:fd:
49:e9:4d:94:5f:09:58:f7:4b:11:c1:36:36:1e:66:b9:0a:e4:
93:98:05:c7:79:ed:58:67:15:1c:94:e5:6e:81:72:99:38:af:
33:39:05:8e:51:0e:64:5f:07:80:d5:65:01:2c:07:9f:13:93:
c3:ad:fc:09:cf:93:47:94:a5:29:a9:59:0e:50:07:92:06:3f:
69:cc:0b:e4:ec:5f:35:32:41:4c:27:c9:12:59:de:e3:89:15:
7f:6a:73:77:1b:c9:a7:0e:f4:ae:d4:a3:2b:e9:8f:6c:d1:e9:
02:d4:a0:55:12:a6:33:70:b7:ae:56:7d:cf:be:42:a6:86:6b:
03:2b:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 05:48:01 2026 by rpki-client