This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json)
Hash identifier: hN6IH8msmmTU8FidGA+ml6TSTYk/E1Kndu4VvnvPMZU=
Subject key identifier: 6C:06:C1:D9:62:69:44:8A:2F:19:AA:03:AA:C2:A1:E4:D7:6B:0B:94
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial: 244BCAE1CF36FA7EACE0641108754B2616904FE4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
Manifest number: 033F
Signing time: Sun 21 Dec 2025 18:05:48 +0000
Manifest this update: Sun 21 Dec 2025 18:00:48 +0000
Manifest next update: Mon 22 Dec 2025 20:53:48 +0000
Files and hashes: 1: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=)
2: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=)
3: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: ME7J1BPWJcpbnJO9ooA5tQX/EInR1RZsYXH6SqCtkkQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 20:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4b:ca:e1:cf:36:fa:7e:ac:e0:64:11:08:75:4b:26:16:90:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
Validity
Not Before: Dec 21 18:00:48 2025 GMT
Not After : Dec 22 20:53:48 2025 GMT
Subject: CN=6C06C1D96269448A2F19AA03AAC2A1E4D76B0B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:e5:9d:76:5c:da:6c:26:ec:39:2a:62:3d:
96:d3:19:5f:96:8d:5c:b8:17:78:50:0b:dc:51:1f:
fb:c7:1f:1b:38:ed:c9:37:d1:d9:cb:d5:c3:9f:d7:
ff:13:cc:8d:11:fb:bb:4b:25:4c:e7:c2:0a:ef:aa:
0c:56:8f:d1:83:af:4a:92:2b:c6:90:b9:2e:b0:15:
e2:01:d3:fd:87:7c:b2:ed:e2:94:15:8b:0a:19:b7:
9c:c0:95:f6:60:24:11:8c:ce:6d:45:c1:78:13:cd:
dd:51:b8:c6:14:17:d5:fe:a7:c1:79:a2:83:ea:36:
09:43:9e:f5:c4:da:e0:ae:f2:63:82:17:5c:bd:47:
20:01:f5:20:89:94:f6:f0:f7:86:1d:be:c6:88:3a:
1f:aa:32:ea:98:24:89:06:c9:bf:f7:85:90:46:76:
f2:80:70:2f:96:2b:cc:00:00:f1:4d:59:9d:9b:30:
40:3d:b1:94:1e:70:7b:91:6e:dc:f0:97:d9:7d:f7:
22:6e:6b:88:97:82:49:e8:3c:85:1d:7d:46:9f:2d:
6a:8e:7f:67:ce:6d:0f:80:fc:80:1f:a3:d6:b2:29:
71:10:d2:97:85:b5:15:04:84:4e:fc:2c:a4:ce:b1:
9f:e4:fb:52:43:9b:fe:4f:64:b8:4b:cb:73:47:5d:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:06:C1:D9:62:69:44:8A:2F:19:AA:03:AA:C2:A1:E4:D7:6B:0B:94
X509v3 Authority Key Identifier:
keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:03:1e:69:9c:72:ad:b7:36:e3:f8:25:5b:3e:1f:e5:a2:0d:
e7:df:34:0e:a0:5e:24:58:21:9d:eb:a5:4c:da:aa:2c:8b:ce:
ed:b8:05:34:6d:22:dd:2e:f8:da:4c:4f:10:50:c8:27:db:eb:
21:18:6e:33:d5:89:00:35:5d:42:6d:25:d1:f4:62:c0:28:83:
cc:78:9a:e7:24:d3:8e:69:84:0d:37:4c:71:2a:b6:6e:06:49:
ea:de:2f:89:e7:64:ed:c8:85:95:75:4e:3d:24:ab:71:ef:26:
47:a3:ff:70:8b:da:38:62:f4:b0:cf:bd:a0:5d:ab:cb:d5:be:
c2:34:83:26:d1:b7:f7:12:cd:04:3a:5d:8c:0c:14:52:f6:0f:
76:5b:8e:ad:66:d7:3c:0c:02:02:8b:39:e5:e5:15:83:b3:c5:
89:9f:b0:6d:76:9b:d1:dd:e1:c5:5d:16:8c:f3:14:29:d5:be:
e2:12:a1:ba:87:ab:f2:e4:d8:f0:2f:94:70:d9:0b:c2:1f:38:
9e:c3:05:bb:cb:04:63:42:46:04:e1:86:e6:ad:62:de:c7:e1:
4d:ef:21:0d:e6:ef:c3:75:e5:3d:9a:96:fa:8e:97:93:7f:86:
4d:74:19:37:dd:3f:e8:28:08:77:30:a1:96:a2:2e:d2:33:27:
f1:2f:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:08:49 2025 by rpki-client