This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json) Hash identifier: 5ipjzzC2p+GclzO7tm62rVkHE+C9G4pfvGY5NwRWfPY= Subject key identifier: 90:0F:52:12:FA:C1:CD:ED:A5:75:98:D1:49:2A:A6:CA:04:7D:40:7F Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Certificate serial: 43DD941DEF8A722C79AB8C5C73E262D9BAD003B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft Manifest number: 0342 Signing time: Wed 24 Dec 2025 02:24:50 +0000 Manifest this update: Wed 24 Dec 2025 02:19:50 +0000 Manifest next update: Thu 25 Dec 2025 03:21:50 +0000 Files and hashes: 1: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: V7DnBsCJIuISkVSnruTXr9sSBfm6Q+BYBb5kdZYmrfc=) 2: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: TUnGMeVdGOnIlqatUvhX63/Z20AB+J4TvrrAdLZosNw=) 3: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: pmh4BRCTLaVheNeaFBQFQP/b/r3NgPTQ74DTv+RIp/c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 03:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:dd:94:1d:ef:8a:72:2c:79:ab:8c:5c:73:e2:62:d9:ba:d0:03:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Validity Not Before: Dec 24 02:19:50 2025 GMT Not After : Dec 25 03:21:50 2025 GMT Subject: CN=900F5212FAC1CDEDA57598D1492AA6CA047D407F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:ad:35:c6:13:10:dc:2f:7d:e1:8c:aa:5e: 3f:a2:6e:3d:95:78:fc:ce:80:96:b9:c6:f9:56:3d: 0f:0f:47:be:e6:c9:55:c4:50:bb:a3:1a:e4:ed:fd: 94:af:69:34:b7:ec:12:c8:88:af:38:10:ad:16:55: 2b:80:51:ee:fb:4a:14:29:70:c7:c1:81:f2:6e:c4: 9a:a2:94:da:db:23:7a:3a:9b:d8:1d:12:c4:27:fe: 3c:7b:c2:d1:3e:42:04:b9:64:cf:52:88:36:bf:1e: 6b:73:5a:6f:28:ed:db:11:9d:97:41:9b:5c:d9:33: 95:36:6e:dd:19:4f:59:65:40:67:45:4d:dc:27:bc: 09:c6:97:38:7a:58:8f:4f:40:6c:f8:d6:46:b4:9b: ad:e6:43:a6:15:fd:6e:09:de:5a:a8:16:c4:05:e9: e8:55:df:94:db:4d:77:2b:29:a1:fd:b0:bc:9d:cf: 15:76:aa:e4:ce:90:71:70:47:4a:46:82:87:6c:6c: 13:a2:47:c5:82:78:d0:98:2d:05:63:c2:68:ae:9a: c6:ae:43:7a:5d:1a:63:e6:b5:cd:40:69:8c:0c:66: 44:31:1a:bd:4c:e0:16:b0:59:27:78:3c:14:fe:4e: f6:9f:8f:1e:18:b6:ee:fd:22:b2:39:d5:fa:12:f4: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0F:52:12:FA:C1:CD:ED:A5:75:98:D1:49:2A:A6:CA:04:7D:40:7F X509v3 Authority Key Identifier: keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2f:50:5e:6b:04:9d:d0:e9:3c:0c:10:0b:5d:65:bf:51:49: 18:07:ba:cd:79:e9:c6:1c:83:48:7b:a2:91:ed:fc:a9:57:26: 6c:ac:30:e7:2e:88:b3:2e:1a:79:43:b6:c8:56:36:af:f7:85: dc:94:1d:9b:27:91:f5:20:a5:63:b3:b3:4a:6c:ad:cc:f4:31: ff:9d:31:1b:f3:56:69:15:b0:46:59:0a:fc:82:8c:1f:20:56: 75:e2:a0:80:2d:d9:03:69:ef:24:89:f4:3a:55:c3:88:b2:a5: 7c:8b:3f:47:bc:d2:c3:92:9c:8d:56:e8:8d:d8:37:77:8b:c7: ae:2d:9a:d3:c8:8c:95:ad:cf:e4:cc:2d:9c:75:1c:4f:3a:84: d4:a9:51:4c:97:df:57:86:0b:be:d6:57:6d:b5:6a:1e:2a:4e: 4e:8c:d8:38:03:79:cd:8d:d4:17:1f:17:cf:68:04:7a:ca:cf: de:43:52:14:66:8d:62:68:de:fa:f8:21:16:b2:87:22:44:c0: 1d:63:85:1b:46:d7:01:11:cf:ad:b8:97:17:40:71:f9:d9:11: 25:e0:c2:12:4c:d2:8b:ed:bc:ee:5d:fd:0d:a7:7d:86:5c:b3: 66:3a:4a:06:21:cb:70:fc:6f:57:db:6f:95:fb:b7:39:8d:68: 4a:5f:a1:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ92UHe+Kcix5q4xcc+Ji2brQA7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG N0YwQUQwNTAeFw0yNTEyMjQwMjE5NTBaFw0yNTEyMjUwMzIxNTBaMDMxMTAvBgNV BAMTKDkwMEY1MjEyRkFDMUNERURBNTc1OThEMTQ5MkFBNkNBMDQ3RDQwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhq01xhMQ3C994YyqXj+ibj2V ePzOgJa5xvlWPQ8PR77myVXEULujGuTt/ZSvaTS37BLIiK84EK0WVSuAUe77ShQp cMfBgfJuxJqilNrbI3o6m9gdEsQn/jx7wtE+QgS5ZM9SiDa/HmtzWm8o7dsRnZdB m1zZM5U2bt0ZT1llQGdFTdwnvAnGlzh6WI9PQGz41ka0m63mQ6YV/W4J3lqoFsQF 6ehV35TbTXcrKaH9sLydzxV2quTOkHFwR0pGgodsbBOiR8WCeNCYLQVjwmiumsau Q3pdGmPmtc1AaYwMZkQxGr1M4BawWSd4PBT+Tvafjx4Ytu79IrI51foS9EnDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkA9SEvrBze2ldZjRSSqmygR9QH8wHwYDVR0j BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpDMTQvMS9E OEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALC9QXmsEndDpPAwQC11lv1FJGAe6zXnpxhyDSHuike38qVcmbKww5y6Isy4a eUO2yFY2r/eF3JQdmyeR9SClY7OzSmytzPQx/50xG/NWaRWwRlkK/IKMHyBWdeKg gC3ZA2nvJIn0OlXDiLKlfIs/R7zSw5KcjVbojdg3d4vHri2a08iMla3P5MwtnHUc TzqE1KlRTJffV4YLvtZXbbVqHipOTozYOAN5zY3UFx8Xz2gEesrP3kNSFGaNYmje +vghFrKHIkTAHWOFG0bXARHPrbiXF0Bx+dkRJeDCEkzSi+287l39Dad9hlyzZjpK BiHLcPxvV9tvlfu3OY1oSl+h9g== -----END CERTIFICATE-----Generated at Wed Dec 24 13:57:46 2025 by rpki-client