This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft File: F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft (raw, json) Hash identifier: /2mWAVHGcpqINj36p9O78T7UpAqxfOrbygQJYanqvzs= Subject key identifier: A6:A9:3E:4A:3F:98:0F:21:F0:55:3B:A4:D6:F4:7A:93:09:0F:1C:5D Authority key identifier: F0:CA:3C:25:5B:5A:CE:E9:E6:EA:0C:AF:48:5A:F0:91:EB:07:12:E4 Certificate issuer: /CN=F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4 Certificate serial: 63360D40B0627CF8B40F418E26DFCB0503CBD814 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft Manifest number: 0E Signing time: Fri 19 Dec 2025 13:38:36 +0000 Manifest this update: Fri 19 Dec 2025 13:33:36 +0000 Manifest next update: Sat 20 Dec 2025 17:28:36 +0000 Files and hashes: 1: F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl (hash: kTZv/YYbGRd8UpkPAVAwwagcu/NdqgJXmDE8X8J7+GI=) 2: 34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa (hash: 7OXFDR5pk4pLhj+Mzft27QfzniupFG53ONBjZ52rcJg=) 3: 323830343a346163633a3a2f33322d313237203d3e20323637323634.roa (hash: pIkUxugDZm7duBijR+p3SImAotHWsxgRdsO4xRE/1F4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:36:0d:40:b0:62:7c:f8:b4:0f:41:8e:26:df:cb:05:03:cb:d8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4 Validity Not Before: Dec 19 13:33:36 2025 GMT Not After : Dec 20 17:28:36 2025 GMT Subject: CN=A6A93E4A3F980F21F0553BA4D6F47A93090F1C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fe:b3:68:cc:88:a2:35:72:62:3b:ef:c5:ab: 7e:fe:de:f9:19:4b:6c:6d:f0:b7:e6:28:87:f0:5e: 00:28:3a:73:e7:56:77:97:8e:ba:ac:f9:e4:6d:78: c6:10:c7:f4:b5:38:7a:7c:17:cf:1f:5f:26:7b:df: 31:1c:fe:a7:8f:09:3f:00:07:9f:b7:91:ff:0e:1e: 36:ea:c7:b1:58:be:56:32:19:0e:37:cd:d0:aa:92: 85:cd:f5:d1:eb:6c:a5:d2:8b:29:9e:41:94:85:80: af:ff:7a:30:bc:24:e4:8d:2c:9f:c7:9e:3c:1e:ba: d2:9f:57:bf:7d:28:db:57:8e:79:a8:e9:29:c6:b9: 53:bf:04:ec:9a:b7:f4:20:24:75:3b:e8:0d:22:f7: 66:9f:28:2d:7d:bb:53:41:af:72:3e:16:58:70:d0: e8:8b:77:3d:7b:a7:14:64:6c:5f:3a:e8:aa:1a:49: a0:5f:f4:ef:00:dc:5d:48:16:38:4c:0b:01:58:f1: f9:f3:9b:35:c6:6f:5a:7b:99:b0:e7:5e:2b:d5:ae: 06:a6:9e:2a:c8:62:5c:fb:14:30:9d:83:11:f1:ce: 44:69:7e:73:92:41:46:a5:3f:21:8d:ab:f5:1c:65: 6d:8a:c6:6e:3b:85:25:ab:87:b7:58:86:e0:c7:16: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A9:3E:4A:3F:98:0F:21:F0:55:3B:A4:D6:F4:7A:93:09:0F:1C:5D X509v3 Authority Key Identifier: keyid:F0:CA:3C:25:5B:5A:CE:E9:E6:EA:0C:AF:48:5A:F0:91:EB:07:12:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3e:cd:39:59:c6:c7:25:90:1f:9c:a6:6b:a4:8c:7e:95:4d: cf:f9:f6:3d:13:cf:af:4f:27:f4:e1:c2:1c:bf:38:4e:ea:f1: 5d:92:77:7a:88:15:4d:56:8b:da:3d:a6:52:0a:18:39:9c:95: 97:54:07:58:05:2f:28:2f:a6:e8:63:71:4e:9d:c7:a3:23:25: 6f:90:9d:6c:01:2a:4a:54:90:94:69:30:76:a4:c4:3e:3c:40: 69:fa:99:1b:54:26:2d:4e:ad:2e:3c:6a:59:7a:3f:f3:73:e7: 1c:2d:08:7e:ae:42:5e:6c:1a:4f:ca:23:08:a7:01:49:bc:cb: 5a:5e:82:3d:9e:f4:67:75:00:e0:ee:94:db:b7:e9:03:20:2d: 08:f2:4d:89:c4:ac:45:6d:f8:8a:fa:97:d4:2d:31:36:f2:73: e5:5a:99:4e:1a:31:14:39:8b:69:5f:7d:38:38:ff:d1:32:e9: ac:11:4a:73:29:02:f5:36:c1:f6:9a:50:e2:0d:6f:44:03:7a: 64:18:97:46:6a:76:f8:fa:6e:5e:41:6f:64:76:4b:49:27:27: ed:1d:9c:d4:3d:b6:0d:62:6d:1f:e6:41:89:b7:41:38:ae:91: 46:bc:f9:f5:22:49:71:8d:7f:c3:26:e0:2f:f0:69:98:be:18: 6b:b6:bc:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYzYNQLBifPi0D0GOJt/LBQPL2BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBDQTNDMjU1QjVBQ0VFOUU2RUEwQ0FGNDg1QUYwOTFF QjA3MTJFNDAeFw0yNTEyMTkxMzMzMzZaFw0yNTEyMjAxNzI4MzZaMDMxMTAvBgNV BAMTKEE2QTkzRTRBM0Y5ODBGMjFGMDU1M0JBNEQ2RjQ3QTkzMDkwRjFDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR/rNozIiiNXJiO+/Fq37+3vkZ S2xt8LfmKIfwXgAoOnPnVneXjrqs+eRteMYQx/S1OHp8F88fXyZ73zEc/qePCT8A B5+3kf8OHjbqx7FYvlYyGQ43zdCqkoXN9dHrbKXSiymeQZSFgK//ejC8JOSNLJ/H njweutKfV799KNtXjnmo6SnGuVO/BOyat/QgJHU76A0i92afKC19u1NBr3I+Flhw 0OiLdz17pxRkbF866KoaSaBf9O8A3F1IFjhMCwFY8fnzmzXGb1p7mbDnXivVrgam nirIYlz7FDCdgxHxzkRpfnOSQUalPyGNq/UcZW2Kxm47hSWrh7dYhuDHFiixAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpqk+Sj+YDyHwVTuk1vR6kwkPHF0wHwYDVR0j BBgwFoAU8Mo8JVtazunm6gyvSFrwkesHEuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3Vh RW4vMC9GMENBM0MyNTVCNUFDRUU5RTZFQTBDQUY0ODVBRjA5MUVCMDcxMkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQ0EzQzI1NUI1QUNFRTlF NkVBMENBRjQ4NUFGMDkxRUIwNzEyRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3VhRW4vMC9G MENBM0MyNTVCNUFDRUU5RTZFQTBDQUY0ODVBRjA5MUVCMDcxMkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoT7NOVnGxyWQH5yma6SMfpVNz/n2PRPPr08n9OHCHL84TurxXZJ3eogVTVaL 2j2mUgoYOZyVl1QHWAUvKC+m6GNxTp3HoyMlb5CdbAEqSlSQlGkwdqTEPjxAafqZ G1QmLU6tLjxqWXo/83PnHC0Ifq5CXmwaT8ojCKcBSbzLWl6CPZ70Z3UA4O6U27fp AyAtCPJNicSsRW34ivqX1C0xNvJz5VqZThoxFDmLaV99ODj/0TLprBFKcykC9TbB 9ppQ4g1vRAN6ZBiXRmp2+PpuXkFvZHZLSScn7R2c1D22DWJtH+ZBibdBOK6RRrz5 9SJJcY1/wybgL/BpmL4Ya7a8Tw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:57 2025 by rpki-client