This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft File: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft (raw, json) Hash identifier: e4CDpPCgGi9cnz6APn54b+2urmaP0s1l9/cwudjytzM= Subject key identifier: 36:24:6F:FA:93:A2:FD:7B:70:09:43:91:AB:A0:8A:89:4E:BC:C7:95 Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 Certificate issuer: /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Certificate serial: 3578BEF69CCDA2EA674C56F528848F0BDE2FC336 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft Manifest number: 34 Signing time: Sat 20 Dec 2025 06:35:22 +0000 Manifest this update: Sat 20 Dec 2025 06:30:22 +0000 Manifest next update: Sun 21 Dec 2025 07:51:22 +0000 Files and hashes: 1: 3138312e3139312e3133362e302f32322d3332203d3e20323731303739.roa (hash: N+VS1gEZX19mdKurLnVGGGidsfPq2fXzteV2UkYkHBM=) 2: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl (hash: RU+QcakyocRPkQez4WUvdNlAG0Yx7PkrhumFzo9inFU=) 3: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (hash: 0pHtEVmtptfCW1hlsfzp0qcUp3I9S9GwoWoaQ04Zss8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 07:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:78:be:f6:9c:cd:a2:ea:67:4c:56:f5:28:84:8f:0b:de:2f:c3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Validity Not Before: Dec 20 06:30:22 2025 GMT Not After : Dec 21 07:51:22 2025 GMT Subject: CN=36246FFA93A2FD7B70094391ABA08A894EBCC795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:bd:11:41:73:6c:fc:6a:61:5e:16:43:de: af:7a:ed:93:93:9a:54:6c:e8:05:c2:8e:9d:80:63: a2:0a:28:59:63:23:11:be:6f:75:23:88:07:9b:93: 04:1e:8d:f8:ad:72:ca:1c:14:63:47:5b:16:20:ba: f0:ab:32:d2:1b:44:a5:d7:eb:90:92:15:4b:40:36: 80:a8:51:4e:1f:03:7b:3b:76:59:e6:8b:3d:7f:f2: a4:9b:8f:e4:f1:01:7b:60:bb:0d:69:31:79:b0:7e: 92:8b:5f:4a:91:dd:57:27:b1:2c:36:9c:36:67:ae: 73:86:95:15:d4:77:e7:87:30:a6:1c:4b:a1:f9:78: 35:79:a8:83:43:11:6f:0a:48:32:cb:bc:bc:ba:e2: 42:15:6b:7d:80:b7:c3:10:ec:85:4b:77:85:d8:c2: 71:df:92:70:29:e9:ff:99:64:4c:e8:9e:49:16:68: 9f:e9:ed:0f:d3:cd:ed:70:9d:74:b6:ce:a9:8a:fd: 24:fd:d2:16:09:ca:89:a3:5b:5e:a8:52:5a:4f:28: 89:77:1e:84:53:d4:2e:37:1f:d0:00:ee:01:54:5b: 1c:18:fb:21:c7:94:7b:11:ef:16:ea:a2:56:11:7c: 73:7b:50:0c:3e:fb:7b:b0:39:b2:d7:f1:42:37:6d: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:24:6F:FA:93:A2:FD:7B:70:09:43:91:AB:A0:8A:89:4E:BC:C7:95 X509v3 Authority Key Identifier: keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ee:fb:e1:ee:66:17:91:da:8b:21:3b:e3:52:cc:c5:20:97: 41:e4:6b:73:06:00:c3:38:1d:b7:68:ae:87:9b:4d:6a:ab:80: a3:b4:4d:51:5e:cd:35:68:6b:03:51:fa:75:1b:88:ad:05:8d: 30:15:6f:f0:07:af:f3:df:20:95:a8:70:22:7c:5f:70:22:5a: 26:59:41:d1:c7:79:5a:1e:fd:a3:a3:e0:48:d5:f4:b9:93:29: 7b:a9:df:9f:c1:53:d2:f0:55:f5:d9:0f:6b:75:0d:6e:31:dd: 6c:b6:d6:ba:94:a1:bf:4c:9c:1d:18:c4:c7:31:0a:bf:1b:de: e0:b8:17:9f:b5:fb:d1:49:a4:3e:66:1f:ae:92:ac:05:4f:34: 6e:58:02:db:72:32:ac:13:2b:1a:a5:bc:fe:ee:e8:d0:71:42: 4d:bc:22:85:91:e5:f2:f1:dc:ad:f5:3f:de:ec:0d:82:5f:10: 89:15:b8:8a:2a:56:d8:05:37:23:97:4d:ab:d5:20:1a:e5:d4: 08:50:19:09:fe:46:39:83:13:4b:fa:3e:13:a5:c2:f4:7c:7c: df:54:b6:31:a7:68:7b:22:bc:9e:61:62:85:1b:0a:39:b6:06: d5:03:2a:c4:af:60:3e:51:6a:1f:9d:4a:0a:bf:80:ee:ee:73: e2:41:19:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNXi+9pzNoupnTFb1KISPC94vwzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMxMjRCQ0U1QzMyMzZFREVDNzBCMzg5NzI1MUVFRTIz QjNGMUJFOTAeFw0yNTEyMjAwNjMwMjJaFw0yNTEyMjEwNzUxMjJaMDMxMTAvBgNV BAMTKDM2MjQ2RkZBOTNBMkZEN0I3MDA5NDM5MUFCQTA4QTg5NEVCQ0M3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQb0RQXNs/GphXhZD3q967ZOT mlRs6AXCjp2AY6IKKFljIxG+b3UjiAebkwQejfitcsocFGNHWxYguvCrMtIbRKXX 65CSFUtANoCoUU4fA3s7dlnmiz1/8qSbj+TxAXtguw1pMXmwfpKLX0qR3VcnsSw2 nDZnrnOGlRXUd+eHMKYcS6H5eDV5qINDEW8KSDLLvLy64kIVa32At8MQ7IVLd4XY wnHfknAp6f+ZZEzonkkWaJ/p7Q/Tze1wnXS2zqmK/ST90hYJyomjW16oUlpPKIl3 HoRT1C43H9AA7gFUWxwY+yHHlHsR7xbqolYRfHN7UAw++3uwObLX8UI3bUpZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNiRv+pOi/XtwCUORq6CKiU68x5UwHwYDVR0j BBgwFoAUoxJLzlwyNu3scLOJclHu4js/G+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oy eEwvMC9BMzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzMTI0QkNFNUMzMjM2RURF QzcwQjM4OTcyNTFFRUUyM0IzRjFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oyeEwvMC9B MzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANO774e5mF5HaiyE741LMxSCXQeRrcwYAwzgdt2iuh5tNaquAo7RNUV7NNWhr A1H6dRuIrQWNMBVv8Aev898glahwInxfcCJaJllB0cd5Wh79o6PgSNX0uZMpe6nf n8FT0vBV9dkPa3UNbjHdbLbWupShv0ycHRjExzEKvxve4LgXn7X70UmkPmYfrpKs BU80blgC23IyrBMrGqW8/u7o0HFCTbwihZHl8vHcrfU/3uwNgl8QiRW4iipW2AU3 I5dNq9UgGuXUCFAZCf5GOYMTS/o+E6XC9Hx831S2MadoeyK8nmFihRsKObYG1QMq xK9gPlFqH51KCr+A7u5z4kEZjw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:35:15 2025 by rpki-client