This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft File: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json) Hash identifier: pcGTqKhVBOecc4z1UStpx7rbJ5oCIaquE6Smg7/Dc1o= Subject key identifier: 08:53:1B:3A:7F:50:4D:0A:F1:78:67:41:42:08:1F:0D:65:1C:97:D2 Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F Certificate issuer: /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Certificate serial: 6C82998EA3BE05E979854FC9018F3AB7CBF44D68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft Manifest number: 11 Signing time: Fri 05 Dec 2025 21:51:42 +0000 Manifest this update: Fri 05 Dec 2025 21:46:42 +0000 Manifest next update: Sat 06 Dec 2025 22:43:42 +0000 Files and hashes: 1: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: QmjHoftZBohaGv8AF1LCI+R8ZUoELTz51r811O1fnQQ=) 2: 323830343a393663383a3a2f33322d313238203d3e20323734333539.roa (hash: Ytqo8wa3MR5Sf7KXr1wl+CjQS/odKyL/1MiNLCin5fk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:82:99:8e:a3:be:05:e9:79:85:4f:c9:01:8f:3a:b7:cb:f4:4d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F Validity Not Before: Dec 5 21:46:42 2025 GMT Not After : Dec 6 22:43:42 2025 GMT Subject: CN=08531B3A7F504D0AF178674142081F0D651C97D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:0c:34:37:20:b8:0c:da:a0:6b:76:1a:42: ed:9b:6e:cf:47:39:31:c5:eb:44:1b:0c:80:1b:b0: b3:f3:7a:a8:02:bf:63:9a:d6:f1:f2:19:26:c4:b3: 1b:b6:bf:31:42:de:fd:56:b5:1b:50:cd:84:62:20: 15:0b:5c:37:ff:61:4b:09:10:5a:f7:d1:6a:20:64: 16:e6:45:a1:40:e5:04:f2:93:21:46:f8:5d:68:1e: e4:85:e1:9b:d0:d6:37:db:71:c8:05:f3:29:ca:f4: e9:ee:9d:95:1d:e5:c6:49:45:a7:5b:94:60:ad:f2: 4d:5d:6b:f1:73:a7:b1:9b:13:2e:03:94:c5:60:e3: 35:a6:39:6f:ab:49:87:99:44:93:dc:9e:1e:0c:82: 11:5d:5d:f7:95:54:09:ea:a5:21:c3:dd:65:b3:36: 00:20:e4:a5:e6:0f:86:23:4a:99:cf:15:0c:cf:23: 52:67:e4:d0:14:b5:98:a4:fc:64:05:4b:da:1f:bd: 4c:63:fa:75:15:28:eb:aa:a9:95:aa:7b:b2:2a:96: 28:5d:98:48:ed:e5:c4:69:6d:02:06:39:be:17:77: 5c:ee:25:d8:b3:7e:71:b1:0b:8a:a8:8d:66:4c:3e: c2:e7:e2:28:b1:f4:00:8c:8f:54:6f:30:d0:ef:56: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:1B:3A:7F:50:4D:0A:F1:78:67:41:42:08:1F:0D:65:1C:97:D2 X509v3 Authority Key Identifier: keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:66:0b:30:40:bb:b6:75:5b:42:ef:ef:c5:29:72:f7:a9: 2b:79:da:b2:c3:2a:5a:7b:34:28:d3:1b:52:a9:b9:0e:39:59: 49:6b:2c:1a:8f:e8:c6:81:71:3a:87:71:83:2f:6a:92:2f:cb: 7a:88:df:15:6e:b3:b1:26:15:4f:1f:ee:50:7a:63:b0:12:f5: eb:d6:a0:b4:8b:7f:78:8c:5e:a1:77:9f:84:81:9f:b1:4c:21: 05:f3:9b:b6:10:81:32:ac:21:20:7c:ce:a4:58:84:a4:e8:c7: 36:f8:67:e5:f4:36:36:c3:5c:aa:09:56:e3:3c:64:6b:d6:db: 35:72:fe:8b:1e:56:56:74:74:d3:b8:2a:87:c9:9e:2f:a2:e5: 4b:8b:0a:27:4d:cf:86:99:bf:ff:d0:6f:7c:b7:e8:f8:1a:e6: a1:b2:49:73:86:fa:6b:44:4f:9d:79:34:32:cf:77:93:dd:69: 6f:c2:b2:2f:ca:64:82:61:4f:d5:95:3f:da:55:35:d1:8f:3b: 70:c3:42:cc:86:73:30:44:97:92:28:81:c1:42:6d:14:0d:a4: 42:9d:c4:43:32:7d:b1:57:60:e4:b0:4b:29:e9:2d:bc:07:0c: 8a:52:79:70:48:83:41:43:17:c3:3a:81:b1:08:3c:63:92:d3: 42:99:74:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbIKZjqO+Bel5hU/JAY86t8v0TWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3 OTEwRjgzRjAeFw0yNTEyMDUyMTQ2NDJaFw0yNTEyMDYyMjQzNDJaMDMxMTAvBgNV BAMTKDA4NTMxQjNBN0Y1MDREMEFGMTc4Njc0MTQyMDgxRjBENjUxQzk3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADQw0NyC4DNqga3YaQu2bbs9H OTHF60QbDIAbsLPzeqgCv2Oa1vHyGSbEsxu2vzFC3v1WtRtQzYRiIBULXDf/YUsJ EFr30WogZBbmRaFA5QTykyFG+F1oHuSF4ZvQ1jfbccgF8ynK9OnunZUd5cZJRadb lGCt8k1da/Fzp7GbEy4DlMVg4zWmOW+rSYeZRJPcnh4MghFdXfeVVAnqpSHD3WWz NgAg5KXmD4YjSpnPFQzPI1Jn5NAUtZik/GQFS9ofvUxj+nUVKOuqqZWqe7Iqlihd mEjt5cRpbQIGOb4Xd1zuJdizfnGxC4qojWZMPsLn4iix9ACMj1RvMNDvVr2pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCFMbOn9QTQrxeGdBQggfDWUcl9IwHwYDVR0j BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4 NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1JtWWEvMC8z QTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASAtmCzBAu7Z1W0Lv78UpcvepK3nassMqWns0KNMbUqm5DjlZSWssGo/oxoFx Oodxgy9qki/LeojfFW6zsSYVTx/uUHpjsBL169agtIt/eIxeoXefhIGfsUwhBfOb thCBMqwhIHzOpFiEpOjHNvhn5fQ2NsNcqglW4zxka9bbNXL+ix5WVnR007gqh8me L6LlS4sKJ03Phpm//9BvfLfo+BrmobJJc4b6a0RPnXk0Ms93k91pb8KyL8pkgmFP 1ZU/2lU10Y87cMNCzIZzMESXkiiBwUJtFA2kQp3EQzJ9sVdg5LBLKektvAcMilJ5 cEiDQUMXwzqBsQg8Y5LTQpl0OA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:38 2025 by rpki-client