This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json) Hash identifier: 3AcJ51yrG/F7BJVT5rgcFw/pL1o+asCYeuPK8e4Vt0s= Subject key identifier: BE:BD:B3:1D:A2:DB:7A:B3:3B:D3:B9:CA:5C:FB:54:D2:E5:85:A3:C5 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 5F784480D55516C3B4101F82AD971FF532406D50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft Manifest number: 01BC Signing time: Mon 29 Dec 2025 19:08:11 +0000 Manifest this update: Mon 29 Dec 2025 19:03:11 +0000 Manifest next update: Tue 30 Dec 2025 20:36:11 +0000 Files and hashes: 1: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=) 2: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: LXAGzZh5VITZhu0Td69t3YVgDvPBdq8ZeCXfKxCOdiA=) 3: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 30 Dec 2025 20:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:78:44:80:d5:55:16:c3:b4:10:1f:82:ad:97:1f:f5:32:40:6d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Dec 29 19:03:11 2025 GMT Not After : Dec 30 20:36:11 2025 GMT Subject: CN=BEBDB31DA2DB7AB33BD3B9CA5CFB54D2E585A3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:f2:7b:65:f7:c3:b6:7b:34:bc:bf:37:54: d6:ff:04:8b:a0:38:1c:5b:71:45:06:94:fb:bf:df: b7:b3:a7:83:5f:db:21:b2:d9:40:2d:04:06:40:36: 20:42:6a:bb:2f:23:de:d9:71:3e:93:2c:8d:01:a5: eb:f9:a5:e7:97:21:22:36:2c:2b:ea:38:d3:e3:c2: ca:19:58:38:0b:b1:19:4a:03:8f:4f:ba:c8:f9:9d: 53:41:4c:39:38:11:bc:ef:41:b2:79:f7:bc:66:c3: c3:82:9d:98:93:51:cb:06:4d:00:70:6d:58:04:a9: 39:22:40:c8:b7:52:2d:b4:b4:bd:ff:40:84:6e:eb: 80:88:ca:a9:07:51:80:3d:5c:70:35:ef:bc:61:59: 30:07:e9:1e:d3:ce:fe:41:22:5f:f6:65:cf:e3:64: 95:0e:a8:13:a7:18:e6:69:b9:6f:f6:20:3e:f5:a7: f2:23:4b:87:b3:38:13:5f:cd:90:d0:fd:f9:26:e7: c7:b7:e1:0e:3f:00:a1:e5:0e:67:11:e7:d6:e4:c2: b6:1e:cb:cd:32:40:cd:46:04:33:38:93:cc:ba:7c: e1:f6:20:fa:78:25:4b:91:0d:98:9b:6b:33:6b:ee: 04:82:e8:b3:f6:a5:5e:7d:34:e2:17:ad:31:68:84: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BD:B3:1D:A2:DB:7A:B3:3B:D3:B9:CA:5C:FB:54:D2:E5:85:A3:C5 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:97:1b:29:67:3a:32:83:af:74:21:f4:e4:a8:93:a3:a1: 97:43:85:a6:dc:20:41:6d:f4:b8:dc:c5:10:31:c5:8b:6c:cd: d1:9f:5b:45:42:b0:2e:92:2c:8d:c6:c4:1a:e6:f2:8a:36:9a: e6:fa:83:40:61:46:06:22:00:c6:c1:a4:5a:cd:f9:cf:e4:02: 20:85:65:4e:68:ac:6a:fa:39:b1:14:e4:37:a6:69:13:85:40: 9f:4b:12:31:7f:de:20:87:ec:e9:97:82:ce:b9:ba:46:02:c1: 2a:89:31:ea:cd:5d:10:b7:d3:d2:d8:a5:06:86:01:01:9c:38: 8b:75:4a:ae:7f:f8:21:4f:60:95:46:78:bd:d1:d2:a8:50:1b: e8:da:c2:84:3e:06:7b:14:3e:31:62:d5:72:ec:02:ea:2b:c3: ba:21:83:7d:ea:b4:3d:62:af:27:5b:fa:bf:74:e3:6d:25:dc: 49:8b:ef:20:e9:5c:11:cd:6f:84:57:80:63:32:c6:84:1d:10: b9:ea:be:8b:37:82:7d:40:ae:5f:b7:2f:68:03:6c:cf:02:ed: 18:b5:62:81:03:6a:05:b1:f6:0c:47:aa:47:73:11:80:d2:fa: 04:ca:2e:60:22:67:80:3a:b4:b2:ba:be:7d:d3:5f:e5:52:3c: ec:47:11:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX3hEgNVVFsO0EB+CrZcf9TJAbVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNTEyMjkxOTAzMTFaFw0yNTEyMzAyMDM2MTFaMDMxMTAvBgNV BAMTKEJFQkRCMzFEQTJEQjdBQjMzQkQzQjlDQTVDRkI1NEQyRTU4NUEzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfevJ7ZffDtns0vL83VNb/BIug OBxbcUUGlPu/37ezp4Nf2yGy2UAtBAZANiBCarsvI97ZcT6TLI0Bpev5peeXISI2 LCvqONPjwsoZWDgLsRlKA49Pusj5nVNBTDk4EbzvQbJ597xmw8OCnZiTUcsGTQBw bVgEqTkiQMi3Ui20tL3/QIRu64CIyqkHUYA9XHA177xhWTAH6R7Tzv5BIl/2Zc/j ZJUOqBOnGOZpuW/2ID71p/IjS4ezOBNfzZDQ/fkm58e34Q4/AKHlDmcR59bkwrYe y80yQM1GBDM4k8y6fOH2IPp4JUuRDZibazNr7gSC6LP2pV59NOIXrTFohO7hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvr2zHaLberM707nKXPtU0uWFo8UwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPhqXGylnOjKDr3Qh9OSok6Ohl0OFptwgQW30uNzFEDHFi2zN0Z9bRUKwLpIs jcbEGubyijaa5vqDQGFGBiIAxsGkWs35z+QCIIVlTmisavo5sRTkN6ZpE4VAn0sS MX/eIIfs6ZeCzrm6RgLBKokx6s1dELfT0tilBoYBAZw4i3VKrn/4IU9glUZ4vdHS qFAb6NrChD4GexQ+MWLVcuwC6ivDuiGDfeq0PWKvJ1v6v3TjbSXcSYvvIOlcEc1v hFeAYzLGhB0Queq+izeCfUCuX7cvaANszwLtGLVigQNqBbH2DEeqR3MRgNL6BMou YCJngDq0srq+fdNf5VI87EcRyQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:37:39 2025 by rpki-client