This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json)
Hash identifier: DvF5TbqrLB2nqtFetK27OIffXlDgpv+EYbTYIXrToJI=
Subject key identifier: 5C:EF:66:76:CB:32:40:6A:5B:07:C1:F6:17:27:EC:1E:F4:5A:FC:1F
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial: 40D3ABB6653D0C31FA9AC14AC68DE61704308511
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
Manifest number: 034D
Signing time: Wed 31 Dec 2025 16:11:09 +0000
Manifest this update: Wed 31 Dec 2025 16:06:09 +0000
Manifest next update: Thu 01 Jan 2026 19:33:09 +0000
Files and hashes: 1: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=)
2: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: s8aRxM72amIReWVnDiaUe5cpd+h0QLsTTrkUjhQf7KU=)
3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=)
4: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 01 Jan 2026 19:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d3:ab:b6:65:3d:0c:31:fa:9a:c1:4a:c6:8d:e6:17:04:30:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
Validity
Not Before: Dec 31 16:06:09 2025 GMT
Not After : Jan 1 19:33:09 2026 GMT
Subject: CN=5CEF6676CB32406A5B07C1F61727EC1EF45AFC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:be:0e:7a:1a:d5:53:1f:30:20:8b:30:43:
a8:60:f6:b3:13:46:44:4f:1d:e1:52:4a:b6:de:de:
72:b6:7d:11:64:8c:86:4d:ed:88:ee:bb:ef:e1:cd:
00:df:5c:f9:96:33:fe:42:77:2f:b0:f2:b1:68:62:
bb:58:36:e5:3a:a4:38:bf:9c:47:00:aa:26:38:16:
03:4e:44:f1:8a:d7:6e:a5:bc:24:5b:1c:81:bb:75:
a6:bb:b8:1f:75:8f:81:cb:ce:46:28:47:05:d4:5a:
7d:de:a9:ad:40:86:ad:43:30:d1:fc:99:50:cd:fb:
a8:ad:80:d9:c9:6a:41:6f:31:3d:b6:68:8b:fb:2e:
4a:4b:8b:df:2c:98:65:b1:81:04:c8:20:0b:a9:dc:
3a:ca:7d:3d:fc:3d:d5:2d:ea:7a:54:46:76:0b:55:
75:10:5b:af:6f:54:58:88:53:d8:0c:e7:5d:4a:73:
0c:71:f5:ea:7a:f9:b7:9f:97:c6:9c:2b:17:9e:70:
d9:2a:8e:a2:b1:ea:ba:b8:58:fc:15:cc:93:64:5a:
88:10:fb:b8:00:6f:d4:3b:e5:8a:ad:e6:5c:25:c5:
c9:ac:52:d7:d0:71:3d:0b:d8:f3:8e:5c:f4:5e:52:
9d:b2:39:5c:3f:f8:26:b0:8d:b1:b6:b4:1e:ce:6e:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EF:66:76:CB:32:40:6A:5B:07:C1:F6:17:27:EC:1E:F4:5A:FC:1F
X509v3 Authority Key Identifier:
keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:d3:39:a5:ff:31:cd:76:63:ab:ec:2f:d0:e2:2e:72:a8:
7e:56:ea:5a:e8:45:10:20:63:b4:76:57:37:0e:0c:99:b5:e6:
d0:76:52:80:ca:8f:6c:d0:2b:61:6d:09:c6:60:4e:4c:48:0a:
43:c1:4c:41:41:40:e1:13:fe:f3:6a:9d:a8:aa:dd:cb:30:45:
13:46:34:d8:23:0b:82:86:45:55:9b:04:68:5d:ed:84:4d:71:
3c:62:a3:fe:7b:5a:46:16:2b:9f:57:9a:a6:8c:8e:dc:c2:5e:
e6:ba:1d:f3:94:3e:68:5c:21:62:bc:84:21:3f:a4:4e:04:2a:
e6:4b:d6:70:8e:f6:3f:a6:b9:99:21:61:24:e6:5c:ed:4c:6a:
05:86:b6:cf:90:6d:16:b5:2b:d7:ea:a0:0a:eb:be:69:b7:c2:
22:33:83:1f:52:69:2a:fa:88:5d:a9:b7:09:52:e6:ac:24:d0:
55:ba:60:a8:55:4e:1d:2e:9a:1b:c9:ff:24:a9:4b:16:30:b4:
93:ab:54:8b:9f:4a:3b:92:fe:49:7d:9a:9e:97:ff:5e:3e:6a:
33:d8:58:22:84:4a:a1:76:3f:5f:65:6c:f5:0b:b9:3e:7e:c6:
31:0e:66:0a:ae:c3:9a:0d:74:6e:c2:24:a5:4b:d2:12:e0:20:
56:4a:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 09:09:54 2026 by rpki-client