This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json) Hash identifier: 7IIr+iE94qvqHzVjS5qeTOdffQ7JXaPq+nQB6uPHo+o= Subject key identifier: 30:E6:BE:C3:F2:05:38:48:C5:72:5B:43:93:E6:DD:74:52:51:FB:60 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 2091A27110F46A7394F6A3C138DEC1A684087F92 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft Manifest number: 01B7 Signing time: Fri 26 Dec 2025 01:38:06 +0000 Manifest this update: Fri 26 Dec 2025 01:33:06 +0000 Manifest next update: Sat 27 Dec 2025 03:49:06 +0000 Files and hashes: 1: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=) 2: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: Z7LA7B946wwEbk5016BXft8vS6bS2p+WxFU0oLI+Od0=) 3: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 27 Dec 2025 03:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:91:a2:71:10:f4:6a:73:94:f6:a3:c1:38:de:c1:a6:84:08:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Dec 26 01:33:06 2025 GMT Not After : Dec 27 03:49:06 2025 GMT Subject: CN=30E6BEC3F2053848C5725B4393E6DD745251FB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:02:80:01:93:d7:d3:35:9d:f3:60:3b:f6: 1a:29:94:58:d1:9c:e2:11:bf:69:cc:ee:42:fd:a9: f4:e6:a2:30:eb:2c:ba:b2:0f:63:2a:de:e4:b7:47: 46:11:cc:86:34:ab:10:01:d1:4a:b4:5d:c4:96:6f: f9:c3:4f:fe:72:50:dd:59:09:9c:18:a9:2c:c0:bc: 8f:f0:6e:3c:65:42:61:dd:3a:c4:03:b4:6b:9a:42: b8:c2:79:89:a4:34:d7:c3:7e:96:a6:96:9e:17:a0: 70:59:d0:5c:be:72:3e:cd:fb:92:f7:3e:ac:61:79: b7:77:2f:01:a7:05:26:4e:ee:f1:a1:67:60:d4:11: 1e:92:d6:26:c7:94:1c:07:01:3d:1c:c0:47:c4:75: 65:82:db:01:66:a3:c2:bf:1e:0b:c8:ed:2d:24:58: 4c:42:95:3f:24:db:2a:87:e2:a0:d5:cf:f4:50:72: 43:5b:7e:5a:71:3d:0c:d9:58:a5:ce:af:78:1c:54: 44:ec:2f:3f:18:13:c5:f5:b5:dc:10:56:31:82:5f: 21:3e:12:10:b3:0f:80:a8:3d:e8:62:62:66:45:72: af:19:cc:cd:5b:e7:36:cc:0d:79:24:84:30:8e:52: 1a:69:a2:58:c2:e8:e4:ad:77:0f:61:6a:2d:71:d0: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:BE:C3:F2:05:38:48:C5:72:5B:43:93:E6:DD:74:52:51:FB:60 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f8:31:cd:d2:c5:d5:09:e2:d2:4a:8b:37:f2:a4:1b:2b:cb: 10:76:31:b5:24:18:71:e2:53:f0:4e:a7:c1:ec:43:30:88:e3: f3:60:92:af:ee:ab:65:73:65:61:92:3c:51:48:f4:ae:4a:5e: f0:7b:3b:fc:73:b3:e8:be:bb:88:95:19:f1:d2:21:63:71:80: 52:f1:8b:66:b9:c2:74:b7:08:21:d5:c7:70:45:f9:89:10:26: 82:b6:6b:2f:5f:fb:17:62:d7:a0:89:29:1d:fb:30:34:d3:3a: e0:64:95:2f:95:3e:85:53:6f:6d:77:11:fd:24:e0:39:35:ed: 06:d0:d4:96:d5:d6:c0:e6:27:62:9c:30:13:91:6c:b8:6c:83: 34:12:e8:c7:9e:35:54:08:1b:c5:9b:d3:bd:7c:ac:17:d7:41: c0:1d:ca:9c:3e:4d:00:49:b5:3c:00:4e:72:91:fc:16:00:3c: 84:93:77:87:a4:dc:9f:04:7a:db:bf:a0:ea:06:66:9b:01:fe: 7b:ab:43:b6:b2:70:b7:a2:e7:ea:9c:a7:e7:e0:c6:58:3d:f7: 1c:de:cb:3a:56:86:71:a3:a3:48:c3:17:56:62:92:56:46:e0: 07:31:75:93:1d:93:1c:86:3e:e3:5c:77:58:f5:95:79:41:9c: 2a:f5:68:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIJGicRD0anOU9qPBON7BpoQIf5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNTEyMjYwMTMzMDZaFw0yNTEyMjcwMzQ5MDZaMDMxMTAvBgNV BAMTKDMwRTZCRUMzRjIwNTM4NDhDNTcyNUI0MzkzRTZERDc0NTI1MUZCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4AKAAZPX0zWd82A79hoplFjR nOIRv2nM7kL9qfTmojDrLLqyD2Mq3uS3R0YRzIY0qxAB0Uq0XcSWb/nDT/5yUN1Z CZwYqSzAvI/wbjxlQmHdOsQDtGuaQrjCeYmkNNfDfpamlp4XoHBZ0Fy+cj7N+5L3 Pqxhebd3LwGnBSZO7vGhZ2DUER6S1ibHlBwHAT0cwEfEdWWC2wFmo8K/HgvI7S0k WExClT8k2yqH4qDVz/RQckNbflpxPQzZWKXOr3gcVETsLz8YE8X1tdwQVjGCXyE+ EhCzD4CoPehiYmZFcq8ZzM1b5zbMDXkkhDCOUhppoljC6OStdw9hai1x0Ga/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMOa+w/IFOEjFcltDk+bddFJR+2AwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPgxzdLF1Qni0kqLN/KkGyvLEHYxtSQYceJT8E6nwexDMIjj82CSr+6rZXNl YZI8UUj0rkpe8Hs7/HOz6L67iJUZ8dIhY3GAUvGLZrnCdLcIIdXHcEX5iRAmgrZr L1/7F2LXoIkpHfswNNM64GSVL5U+hVNvbXcR/STgOTXtBtDUltXWwOYnYpwwE5Fs uGyDNBLox541VAgbxZvTvXysF9dBwB3KnD5NAEm1PABOcpH8FgA8hJN3h6TcnwR6 27+g6gZmmwH+e6tDtrJwt6Ln6pyn5+DGWD33HN7LOlaGcaOjSMMXVmKSVkbgBzF1 kx2THIY+41x3WPWVeUGcKvVo5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 09:40:55 2025 by rpki-client