This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft File: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft (raw, json) Hash identifier: QZsY8ndaN3b0XDk4mVQqo4YvBftfRsuvP7xfxJmYHMA= Subject key identifier: 28:33:0A:DD:FA:3A:E7:A6:12:F2:E6:15:D6:DD:44:91:ED:13:A8:CB Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 Certificate issuer: /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Certificate serial: 49B2A92E0F8BFF897A8D76F3515F67279C4B4C38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft Manifest number: 21 Signing time: Fri 05 Dec 2025 16:23:40 +0000 Manifest this update: Fri 05 Dec 2025 16:18:40 +0000 Manifest next update: Sat 06 Dec 2025 19:57:40 +0000 Files and hashes: 1: 3138312e3139312e3133362e302f32322d3332203d3e20323731303739.roa (hash: N+VS1gEZX19mdKurLnVGGGidsfPq2fXzteV2UkYkHBM=) 2: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (hash: 0pHtEVmtptfCW1hlsfzp0qcUp3I9S9GwoWoaQ04Zss8=) 3: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl (hash: pUMpaN7eAhhATkEjdQMB49vGgvMCMEKm3plZn5ZnyFs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b2:a9:2e:0f:8b:ff:89:7a:8d:76:f3:51:5f:67:27:9c:4b:4c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Validity Not Before: Dec 5 16:18:40 2025 GMT Not After : Dec 6 19:57:40 2025 GMT Subject: CN=28330ADDFA3AE7A612F2E615D6DD4491ED13A8CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:bc:40:38:ed:60:4f:cc:a2:cd:0e:bc:de: 14:f8:c8:c9:8b:da:2c:5d:7c:3a:71:36:50:4d:c9: b2:9e:d9:60:c2:fd:b3:a1:e9:9a:f3:e0:4c:ff:93: 29:41:2e:c2:30:2a:50:97:9b:62:65:01:02:8b:7f: ef:14:3f:b9:53:d5:ec:bd:1e:63:f8:0c:ac:b4:4f: 1f:ef:e1:0a:3a:7f:ce:49:44:b6:0c:97:ab:be:0f: 4c:cd:3a:6b:cc:24:b3:69:35:ed:87:14:65:74:0b: f9:6f:de:c2:17:69:dc:af:37:39:ec:ea:79:c7:02: 8f:86:bc:8d:83:85:ee:32:1d:c3:6b:ee:e1:b6:be: a3:b2:41:37:b7:4f:1d:05:b5:aa:37:80:27:df:6b: e1:ff:36:52:ce:de:32:b3:b3:13:4c:57:b1:8d:d8: ea:a2:58:22:ea:bd:c6:93:43:b7:ee:4f:b7:cf:3e: 24:49:2a:34:77:3a:3c:22:07:2a:32:09:84:26:da: 85:ea:59:0e:96:51:87:41:c7:a6:5e:16:a3:85:d4: 53:90:b4:b7:88:ad:dc:20:fd:f7:2c:bd:3e:f0:95: 92:f0:a7:3a:a6:1c:87:c8:9c:1a:08:7d:90:57:5f: 24:73:0f:b5:a9:b4:30:d5:cf:a9:cc:d7:43:5e:1d: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:33:0A:DD:FA:3A:E7:A6:12:F2:E6:15:D6:DD:44:91:ED:13:A8:CB X509v3 Authority Key Identifier: keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:20:a1:51:ca:1a:f8:f1:04:f0:51:5c:60:f2:44:51:1e:f3: 4c:4b:08:e4:d2:e7:f3:47:25:ed:f4:d6:5c:ca:fb:80:d4:76: c2:ca:70:c1:12:a7:e2:ad:c1:11:4f:61:01:9e:1d:bd:56:8c: aa:c9:a7:18:4a:01:67:68:c8:23:72:75:b6:e3:ea:21:9b:a6: 0f:d7:28:d6:54:c7:f1:8c:ee:21:6d:55:35:66:e7:9c:88:b4: 77:79:f2:f7:4d:ba:3e:f7:cb:03:00:17:5f:cc:e3:12:3b:5f: 2a:73:1d:5c:b5:7f:7f:52:e9:86:32:a2:50:d2:ca:ad:41:fc: fe:34:9b:86:f4:90:8b:b5:30:3c:30:ba:eb:b2:c5:4f:fd:74: e0:3b:31:e1:d1:e5:58:d9:3a:08:66:6f:ee:b8:86:13:bb:49: b6:0c:3c:da:81:b4:3b:4e:84:62:21:da:46:54:6d:6f:97:19: c8:a6:35:e4:57:29:9a:8a:7f:e2:ab:70:ec:ab:15:d5:cc:34: a0:9d:b7:5f:66:1a:19:fd:e3:8d:1e:c0:54:78:d2:2e:3f:93: e7:90:e2:ac:5e:65:f8:3b:57:9e:9f:b8:29:32:dd:e6:4a:fd: a4:29:1d:2d:50:ae:f7:8b:93:bc:fe:79:0b:08:f4:5a:c7:a4: 1c:f6:41:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSbKpLg+L/4l6jXbzUV9nJ5xLTDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMxMjRCQ0U1QzMyMzZFREVDNzBCMzg5NzI1MUVFRTIz QjNGMUJFOTAeFw0yNTEyMDUxNjE4NDBaFw0yNTEyMDYxOTU3NDBaMDMxMTAvBgNV BAMTKDI4MzMwQURERkEzQUU3QTYxMkYyRTYxNUQ2REQ0NDkxRUQxM0E4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfU7xAOO1gT8yizQ683hT4yMmL 2ixdfDpxNlBNybKe2WDC/bOh6Zrz4Ez/kylBLsIwKlCXm2JlAQKLf+8UP7lT1ey9 HmP4DKy0Tx/v4Qo6f85JRLYMl6u+D0zNOmvMJLNpNe2HFGV0C/lv3sIXadyvNzns 6nnHAo+GvI2Dhe4yHcNr7uG2vqOyQTe3Tx0Ftao3gCffa+H/NlLO3jKzsxNMV7GN 2OqiWCLqvcaTQ7fuT7fPPiRJKjR3OjwiByoyCYQm2oXqWQ6WUYdBx6ZeFqOF1FOQ tLeIrdwg/fcsvT7wlZLwpzqmHIfInBoIfZBXXyRzD7WptDDVz6nM10NeHYe5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKDMK3fo656YS8uYV1t1Eke0TqMswHwYDVR0j BBgwFoAUoxJLzlwyNu3scLOJclHu4js/G+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oy eEwvMC9BMzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzMTI0QkNFNUMzMjM2RURF QzcwQjM4OTcyNTFFRUUyM0IzRjFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oyeEwvMC9B MzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSChUcoa+PEE8FFcYPJEUR7zTEsI5NLn80cl7fTWXMr7gNR2wspwwRKn4q3B EU9hAZ4dvVaMqsmnGEoBZ2jII3J1tuPqIZumD9co1lTH8YzuIW1VNWbnnIi0d3ny 9026PvfLAwAXX8zjEjtfKnMdXLV/f1LphjKiUNLKrUH8/jSbhvSQi7UwPDC667LF T/104Dsx4dHlWNk6CGZv7riGE7tJtgw82oG0O06EYiHaRlRtb5cZyKY15Fcpmop/ 4qtw7KsV1cw0oJ23X2YaGf3jjR7AVHjSLj+T55DirF5l+DtXnp+4KTLd5kr9pCkd LVCu94uTvP55Cwj0WsekHPZBwg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:07:59 2025 by rpki-client