This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: x5UQYp0dNgPOxOUjHCRL8G7LFxZEHQcSFPO21SuU6No= Subject key identifier: E8:57:E1:23:DB:E2:51:73:8E:63:F4:2B:FB:C8:2F:8E:F7:80:A4:F3 Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 15110A6C0BD6467B8D6C509ED02CC1585CE05A54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 0320 Signing time: Sat 27 Dec 2025 21:50:24 +0000 Manifest this update: Sat 27 Dec 2025 21:45:24 +0000 Manifest next update: Mon 29 Dec 2025 01:34:24 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 2: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: L512H/fiXFVMbxEeMstKHSfhfrQCmhttBDGgs6Pb6CI=) 3: 323830343a313165303a3a2f33322d3535203d3e20323633343435.roa (hash: JY9NjnQ88soBYNRVthMyseU4hIC042l72p6YiSE2yyU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 29 Dec 2025 01:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:11:0a:6c:0b:d6:46:7b:8d:6c:50:9e:d0:2c:c1:58:5c:e0:5a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Dec 27 21:45:24 2025 GMT Not After : Dec 29 01:34:24 2025 GMT Subject: CN=E857E123DBE251738E63F42BFBC82F8EF780A4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:f6:45:72:ce:03:b8:36:91:fa:88:dc:87: 83:de:04:b0:d8:b9:cb:e1:b3:d0:dc:18:fa:b5:3d: cc:18:ab:6a:2a:3f:f8:b9:c6:9c:42:6f:a8:b0:64: 91:e1:6f:88:c4:bd:b6:2e:8a:5a:f2:b5:63:19:ff: 6f:81:b5:5b:5a:dd:e5:87:a8:ff:14:c3:eb:07:e9: 80:d4:98:32:81:50:04:07:e7:39:7e:b4:30:91:3e: ec:47:14:31:2d:8d:ee:6f:bf:c5:83:ed:18:73:93: bc:e5:c7:15:d4:25:80:41:58:1a:dd:75:6b:0a:7d: 23:88:9e:08:14:2a:d3:69:71:44:4b:a7:c0:ce:8a: f5:ea:57:85:c5:6b:1b:33:04:a7:e7:02:c7:dc:e6: e4:52:e6:4a:98:e6:5f:72:8e:4c:80:b0:13:d0:67: d8:98:8f:3b:53:cc:e2:00:39:e1:15:c3:86:96:02: 2f:b3:07:0b:54:ee:a1:30:39:d4:12:99:10:04:24: 4a:e6:fa:69:4b:79:82:2b:69:98:8a:a6:ff:a4:a9: 08:fd:48:e1:c4:ce:08:65:b7:c8:19:93:90:09:47: 53:61:81:9b:1b:bd:8a:c0:9c:0e:c3:a8:6f:aa:c4: 0c:60:83:32:34:b5:27:65:61:30:e5:0e:64:c5:8d: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:57:E1:23:DB:E2:51:73:8E:63:F4:2B:FB:C8:2F:8E:F7:80:A4:F3 X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:46:31:a6:b6:0c:a0:f2:a7:81:bf:b9:ee:5e:e7:44:ca:d0: b3:a8:01:6b:59:c0:21:4f:18:12:01:dd:b0:de:dc:65:ad:79: 63:18:31:dc:92:a3:82:d3:f1:00:b2:93:1d:72:cc:42:be:6f: 69:31:02:24:de:70:d9:4a:92:b4:0a:a6:10:b8:d0:4e:a0:fe: e3:be:9d:92:b4:1e:eb:6a:dd:6a:2d:e5:7d:a9:ea:d7:c0:2c: 9e:85:c1:26:ba:b9:5c:65:4a:86:0a:b9:5e:06:3c:43:5a:8c: 8b:ff:98:1a:b3:c8:82:e0:86:88:2d:a7:19:4e:0e:2f:9c:13: f8:c9:1e:94:d9:28:9f:89:2b:89:33:04:de:f7:32:3c:3b:16: f4:14:7d:88:05:01:56:51:4e:51:15:8b:9c:cd:4a:99:a8:be: a3:b9:2d:05:db:9f:95:45:18:ae:fc:55:61:b3:47:d6:03:4d: af:74:05:05:30:fd:1a:26:de:34:bf:6d:dd:48:96:ff:df:79: bb:3e:d3:07:a9:c6:e2:57:68:8d:22:77:6a:65:5a:0c:66:58: c2:b1:cb:f7:9a:30:6f:c3:62:ed:d0:a7:a8:1e:88:95:74:91: 99:45:40:b0:bb:c1:01:af:3c:18:c6:8c:63:40:76:e5:12:a6: a3:13:92:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFREKbAvWRnuNbFCe0CzBWFzgWlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTEyMjcyMTQ1MjRaFw0yNTEyMjkwMTM0MjRaMDMxMTAvBgNV BAMTKEU4NTdFMTIzREJFMjUxNzM4RTYzRjQyQkZCQzgyRjhFRjc4MEE0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbfZFcs4DuDaR+ojch4PeBLDY ucvhs9DcGPq1PcwYq2oqP/i5xpxCb6iwZJHhb4jEvbYuilrytWMZ/2+BtVta3eWH qP8Uw+sH6YDUmDKBUAQH5zl+tDCRPuxHFDEtje5vv8WD7Rhzk7zlxxXUJYBBWBrd dWsKfSOInggUKtNpcURLp8DOivXqV4XFaxszBKfnAsfc5uRS5kqY5l9yjkyAsBPQ Z9iYjztTzOIAOeEVw4aWAi+zBwtU7qEwOdQSmRAEJErm+mlLeYIraZiKpv+kqQj9 SOHEzghlt8gZk5AJR1NhgZsbvYrAnA7DqG+qxAxggzI0tSdlYTDlDmTFjUi1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6FfhI9viUXOOY/Qr+8gvjveApPMwHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvkYxprYMoPKngb+57l7nRMrQs6gBa1nAIU8YEgHdsN7cZa15Yxgx3JKjgtPx ALKTHXLMQr5vaTECJN5w2UqStAqmELjQTqD+476dkrQe62rdai3lfanq18AsnoXB Jrq5XGVKhgq5XgY8Q1qMi/+YGrPIguCGiC2nGU4OL5wT+MkelNkon4kriTME3vcy PDsW9BR9iAUBVlFOURWLnM1Kmai+o7ktBduflUUYrvxVYbNH1gNNr3QFBTD9Gibe NL9t3UiW/995uz7TB6nG4ldojSJ3amVaDGZYwrHL95owb8Ni7dCnqB6IlXSRmUVA sLvBAa88GMaMY0B25RKmoxOS7w== -----END CERTIFICATE-----Generated at Sun Dec 28 11:08:59 2025 by rpki-client