This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
File: 3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json)
Hash identifier: FKjqnOhzlrTUGZR3FzFu4iNLqchofnDcGMljT3m3UMs=
Subject key identifier: 40:EB:57:E0:C7:7A:25:AF:F7:21:4C:B2:9B:84:CC:59:ED:C8:36:2F
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Certificate issuer: /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial: 6F3E32077BEEFE5D2D1FF7D39A7158963339DDC4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
Manifest number: 03BC
Signing time: Tue 30 Dec 2025 03:00:00 +0000
Manifest this update: Tue 30 Dec 2025 02:55:00 +0000
Manifest next update: Wed 31 Dec 2025 03:00:00 +0000
Files and hashes: 1: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: oltG1noOnbrRoM0sS15kDu8e6YFzCzXI+kuYiuRIpNo=)
2: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: ioQjGfieQHF3yV2fgI8Chw4pCzVaqcleon3vtaTviRw=)
3: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: Jp/YzHyLgGSFu9Ubknk+Jr9qPl5kZBnW/EeFE+esTQE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 31 Dec 2025 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3e:32:07:7b:ee:fe:5d:2d:1f:f7:d3:9a:71:58:96:33:39:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Validity
Not Before: Dec 30 02:55:00 2025 GMT
Not After : Dec 31 03:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:a7:0a:9d:f3:0b:7b:0f:85:34:ea:e0:8f:
8e:91:9e:95:6c:bb:16:5e:58:96:af:bd:c3:4f:6a:
0d:25:e4:4c:08:03:72:b5:15:88:cf:22:91:57:3e:
90:38:67:e8:61:4d:a0:54:2e:ed:9d:23:04:c5:29:
72:9b:c7:e8:51:2d:ee:0e:5f:55:4e:ca:aa:0d:97:
7e:7d:bb:ac:47:28:7f:97:16:19:d8:25:38:57:57:
05:b9:c3:32:43:fa:e4:a0:11:ba:39:6b:46:ef:36:
25:61:09:b1:1b:c0:3b:5b:a4:81:4e:d6:56:83:e8:
a5:80:a3:1c:ad:2f:09:a7:0e:fd:2a:16:9c:c3:28:
23:6b:5b:77:86:8b:e5:d8:3d:66:df:62:e1:37:d7:
bc:a1:04:0b:58:67:ce:36:01:67:e3:c1:1c:fa:2c:
24:2b:bc:d4:39:c5:f3:d9:98:7f:bc:a4:16:10:a3:
b1:e3:4c:03:1c:88:ec:df:98:4a:c0:69:53:19:72:
80:34:11:43:b7:41:d9:89:5d:58:01:e7:2f:fa:05:
f9:96:69:75:fe:6c:48:6e:3c:fc:89:06:9e:37:ca:
25:d6:fd:1b:7d:c5:de:90:48:40:2c:00:b3:23:41:
27:3c:58:76:b3:f3:44:27:6f:85:33:f1:9f:7e:50:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:57:E0:C7:7A:25:AF:F7:21:4C:B2:9B:84:CC:59:ED:C8:36:2F
X509v3 Authority Key Identifier:
keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:e1:41:0a:05:fc:f4:2d:2d:15:2b:b9:2a:e3:23:07:c1:
c2:55:26:81:82:fe:18:94:5a:f5:99:6b:90:9b:05:e2:cf:13:
6d:cb:bc:29:78:9c:d7:9e:92:fb:90:d3:12:f9:42:f9:b4:67:
bd:41:88:8f:59:93:07:59:99:5e:98:d3:4f:c9:9f:3a:21:e5:
72:cf:06:ae:1b:7a:42:e8:51:2b:b1:80:eb:c7:05:fc:f1:6d:
49:42:cf:49:46:52:a3:cc:56:af:bf:90:1f:86:cc:33:ac:c4:
16:53:80:63:27:97:c9:3a:a1:a2:76:8d:51:20:3b:5f:d0:3c:
c6:f2:6c:dc:2d:6d:fe:7a:ec:18:12:c5:be:b3:ad:ca:80:c7:
0c:ef:6f:b7:25:93:d7:45:ba:79:6f:35:29:24:c3:fc:bd:51:
d5:88:0a:78:a4:45:0f:8d:0f:eb:a4:ca:b2:4a:1c:5c:ab:8a:
5c:26:59:47:a0:f1:dc:5b:cb:ab:86:c4:8f:dd:85:bb:3d:4b:
de:1c:4c:4e:82:64:94:87:e9:98:69:fe:86:a3:dc:79:88:32:
02:33:23:7b:5a:96:a8:c2:ff:39:cb:75:83:f3:2d:4f:6b:13:
0c:fe:6a:22:bc:3f:93:95:e0:a5:07:8e:e0:01:78:a3:bc:e9:
ea:f9:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:53:19 2025 by rpki-client