This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft File: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft (raw, json) Hash identifier: pywzmW4FSoN6bWA4bfeXE8fyMmiDY7aHN5S6HwW49RU= Subject key identifier: E3:07:0A:0F:35:B4:5D:A8:FF:86:37:F4:40:31:D4:25:07:D3:23:1F Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C Certificate issuer: /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C Certificate serial: 5AD16843430EE7165E9F75D27BC7AA18DC786E0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft Manifest number: 033B Signing time: Thu 18 Dec 2025 06:26:03 +0000 Manifest this update: Thu 18 Dec 2025 06:21:03 +0000 Manifest next update: Fri 19 Dec 2025 06:58:03 +0000 Files and hashes: 1: 3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (hash: /1UosB7p/H0IpPArGzy1kLCzKmsTI1n2rZyqgUtb7C8=) 2: 323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (hash: vEbluKO9WO7Wr/ZFti8PZzzfOsObTPM3B1b8gS1XEcE=) 3: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl (hash: jBq2paTBsF+hPBjD/zw2xuybquud3jZEUEJfNvNhQ+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 06:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d1:68:43:43:0e:e7:16:5e:9f:75:d2:7b:c7:aa:18:dc:78:6e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C Validity Not Before: Dec 18 06:21:03 2025 GMT Not After : Dec 19 06:58:03 2025 GMT Subject: CN=E3070A0F35B45DA8FF8637F44031D42507D3231F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:f9:4e:2d:d8:31:bc:3b:70:d2:fe:f7:ef: d2:f3:ce:22:fb:bd:c7:8e:2a:f9:97:f9:7d:b3:10: 8b:69:e6:2a:9c:6f:86:63:b8:0f:fc:18:13:d9:44: f0:cb:c6:59:51:c2:4d:3a:eb:08:2c:bc:6b:f6:13: d1:cf:a7:ca:f8:bf:31:cb:23:65:d3:5c:02:ad:9a: 4a:34:52:2c:63:77:48:10:a3:1e:bb:6c:98:fb:21: 5f:71:a2:77:46:ed:5c:99:17:fc:3c:45:fb:50:af: bd:20:28:42:fa:35:ff:38:9b:75:5b:d2:73:c6:c5: 92:18:23:9f:75:61:3d:d0:61:d7:5b:a2:53:53:3e: 89:40:4b:ef:6e:5e:c4:4f:bd:02:d9:4f:5b:0c:52: dd:b8:9b:a9:bb:58:7d:7d:04:26:b7:49:cf:cf:ba: 19:33:b7:fb:5c:06:76:b6:b9:cf:45:80:9e:13:9f: ed:36:2d:26:29:fd:6a:af:be:0f:b7:bb:f3:e4:ff: 6e:d4:03:ae:9e:c2:1a:c1:37:cf:06:ff:29:87:ad: e4:ed:c8:d9:09:ee:ed:1c:87:d0:45:8a:47:6a:f8: c0:5a:d5:c1:23:86:43:84:78:04:5b:22:21:f8:fe: a7:ca:8e:d4:b5:55:ee:c8:60:5f:e2:dd:24:08:a7: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:0A:0F:35:B4:5D:A8:FF:86:37:F4:40:31:D4:25:07:D3:23:1F X509v3 Authority Key Identifier: keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c9:39:db:48:20:fe:6c:7a:78:55:5a:f1:9b:0c:f8:2d:8a: 62:90:53:2c:02:ab:9d:18:74:3d:9d:14:a1:6f:8d:9b:8a:e5: a0:93:05:22:0c:cd:df:d0:80:8d:82:0d:8f:c0:9d:82:27:3d: 27:67:d1:a0:ec:45:88:8d:d3:68:9f:8e:4e:14:c9:07:7c:13: b4:45:0b:79:1c:c5:64:a5:81:d6:31:6d:d0:be:62:a3:5e:45: 70:8e:c4:50:33:7e:47:46:c4:45:ce:e5:4f:e7:92:d6:d1:09: bf:87:fa:7a:8e:62:22:48:b4:10:4a:7d:e5:5d:43:79:c2:e6: 64:79:ca:42:fa:cc:df:c0:f7:9a:51:6a:52:08:82:a6:a4:7b: a0:3a:2e:fc:fa:4e:be:6d:2f:8b:23:01:28:6a:6f:86:c2:14: 23:53:fb:48:42:4c:37:3c:d2:41:81:5a:68:70:04:14:e2:fc: 8b:98:36:67:5a:b0:3b:f8:d9:03:0f:44:29:da:93:24:73:54: 2b:b3:28:3d:4f:8f:b7:01:66:e3:7b:ee:89:79:4f:7b:bb:89: 8a:b3:c7:4f:bd:49:d8:b7:4d:d8:e8:3b:53:51:31:09:ca:63: c5:bf:c3:b8:f3:6f:71:1a:50:ce:bc:3f:ba:1f:2b:9c:de:6c: d2:c7:3a:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWtFoQ0MO5xZen3XSe8eqGNx4bgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OEJGREI0QkFEM0NCMzhBQ0RBOEZBQzkxOUExQTI0 REVERUI1QzAeFw0yNTEyMTgwNjIxMDNaFw0yNTEyMTkwNjU4MDNaMDMxMTAvBgNV BAMTKEUzMDcwQTBGMzVCNDVEQThGRjg2MzdGNDQwMzFENDI1MDdEMzIzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWflOLdgxvDtw0v7379LzziL7 vceOKvmX+X2zEItp5iqcb4ZjuA/8GBPZRPDLxllRwk066wgsvGv2E9HPp8r4vzHL I2XTXAKtmko0Uixjd0gQox67bJj7IV9xondG7VyZF/w8RftQr70gKEL6Nf84m3Vb 0nPGxZIYI591YT3QYddbolNTPolAS+9uXsRPvQLZT1sMUt24m6m7WH19BCa3Sc/P uhkzt/tcBna2uc9FgJ4Tn+02LSYp/Wqvvg+3u/Pk/27UA66ewhrBN88G/ymHreTt yNkJ7u0ch9BFikdq+MBa1cEjhkOEeARbIiH4/qfKjtS1Ve7IYF/i3SQIpz2ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4wcKDzW0Xaj/hjf0QDHUJQfTIx8wHwYDVR0j BBgwFoAU01i/20utPLOKzaj6yRmhok3t61wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo aTIvMS9EMzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNThCRkRCNEJBRDNDQjM4 QUNEQThGQUM5MTlBMUEyNERFREVCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURoaTIvMS9E MzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWMk520gg/mx6eFVa8ZsM+C2KYpBTLAKrnRh0PZ0UoW+Nm4rloJMFIgzN39CA jYINj8Cdgic9J2fRoOxFiI3TaJ+OThTJB3wTtEULeRzFZKWB1jFt0L5io15FcI7E UDN+R0bERc7lT+eS1tEJv4f6eo5iIki0EEp95V1DecLmZHnKQvrM38D3mlFqUgiC pqR7oDou/PpOvm0viyMBKGpvhsIUI1P7SEJMNzzSQYFaaHAEFOL8i5g2Z1qwO/jZ Aw9EKdqTJHNUK7MoPU+PtwFm43vuiXlPe7uJirPHT71J2LdN2Og7U1ExCcpjxb/D uPNvcRpQzrw/uh8rnN5s0sc6Kw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:22 2025 by rpki-client