This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
File: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft (raw, json)
Hash identifier: jvWbs4626vm0QgVLaFPRVS+fWxA+1W7jthWtA9shD10=
Subject key identifier: 34:87:06:18:33:35:89:37:0A:74:50:19:EC:7E:A3:65:EE:57:35:A0
Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
Certificate issuer: /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
Certificate serial: 192F410F1B3A697F3A0E33E88DB78F4A374B6B3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
Manifest number: D3
Signing time: Sat 06 Dec 2025 07:45:31 +0000
Manifest this update: Sat 06 Dec 2025 07:40:27 +0000
Manifest next update: Sun 07 Dec 2025 11:27:27 +0000
Files and hashes: 1: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: mjK/zjt4yzwTGIANGxBfkRBdXiLh2Sa/ZJrRKHITJgU=)
2: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: JcmfPmpVMYSjiABXB2wmedmpymwinDaIZJseON+XBkg=)
3: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl (hash: gejOf65d02yZg3j4ZE+peyeqjoiMzXzNSEPCCqlUIyc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl
rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 11:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2f:41:0f:1b:3a:69:7f:3a:0e:33:e8:8d:b7:8f:4a:37:4b:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3
Validity
Not Before: Dec 6 07:40:27 2025 GMT
Not After : Dec 7 11:27:27 2025 GMT
Subject: CN=34870618333589370A745019EC7EA365EE5735A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:fd:36:bc:19:56:39:00:33:1a:d8:1d:61:
60:96:94:ae:92:9f:dc:3f:22:9f:99:15:36:cd:ef:
26:7e:eb:cc:69:b0:25:e5:da:3a:f2:7d:a7:b0:52:
2d:a3:8f:35:8c:2e:12:30:01:f8:75:86:4e:38:28:
71:20:97:98:16:64:1c:86:d2:08:23:a0:44:ab:66:
d6:41:a7:b5:1a:85:0c:f8:a0:eb:32:19:19:7c:19:
e0:1f:cd:c6:88:e4:5f:c7:1c:15:8b:5a:ab:92:f0:
a9:8a:29:88:5b:86:5b:5f:77:f4:7a:f0:a1:08:23:
02:00:10:e8:fd:0a:f7:6c:5c:6d:7d:66:69:20:74:
c6:43:98:f7:15:47:54:a5:ab:e5:e1:43:d5:38:fc:
44:35:5f:d2:72:40:1e:d2:b6:16:6e:97:76:51:b5:
a2:d8:8b:2a:15:7f:a7:fa:d9:7d:49:58:71:6d:31:
40:ab:0a:47:f6:bb:5a:72:c7:62:92:6d:57:a2:6e:
94:32:ba:11:7d:64:c2:93:9c:23:ad:f2:34:df:0b:
df:d8:95:19:50:4b:41:5e:d8:51:fa:ed:c5:57:b8:
1b:a1:85:8e:d4:79:4f:b1:ae:1c:b8:11:31:20:ef:
c4:75:6b:82:5d:92:a5:06:f9:c5:2c:63:03:ff:52:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:06:18:33:35:89:37:0A:74:50:19:EC:7E:A3:65:EE:57:35:A0
X509v3 Authority Key Identifier:
keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:ed:62:c7:bf:05:fb:13:92:cc:ab:8b:12:6f:06:6e:19:
8e:f5:aa:f2:04:c9:f9:6a:d9:10:80:78:e6:1a:f3:f1:f5:cb:
b1:ff:c9:0a:60:1a:93:ab:f6:7c:6a:59:a2:c7:d0:62:e3:92:
f6:67:81:d8:b8:31:63:34:08:51:c2:46:49:19:4b:01:a3:55:
57:ac:9c:ed:40:0d:b6:63:c8:fd:00:31:5c:2a:c5:f2:b7:b1:
ad:16:ed:6d:27:93:88:b0:f9:70:c6:ed:9a:8a:5c:ee:fe:b7:
25:3a:7e:35:87:3d:92:9b:f0:09:f4:af:76:4d:15:ba:dc:f3:
78:08:4d:9c:87:1a:6e:43:4c:d6:f4:86:31:eb:19:13:4a:91:
65:14:cf:90:e1:7f:af:90:e4:76:1a:33:9d:2c:60:c4:05:ce:
02:23:c4:86:6e:0c:bb:73:84:1a:b7:54:32:eb:8a:54:de:79:
60:27:56:87:e5:97:2f:70:1c:33:66:29:39:b0:b0:4f:6c:28:
67:c9:92:ea:f4:61:76:95:69:13:38:fa:06:e2:18:cb:74:68:
58:20:c9:3c:07:95:b5:d4:b4:eb:fd:55:f8:e2:f9:00:28:3e:
9c:79:ac:62:c4:14:65:25:0f:36:c8:bf:5a:ca:70:c8:60:c9:
de:35:2b:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGS9BDxs6aX86DjPojbePSjdLaz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdCQkEzNkFDRUY1NUZBMzQwNzdGOTMzNTA4NENCOTdF
QjUxRkVFMzAeFw0yNTEyMDYwNzQwMjdaFw0yNTEyMDcxMTI3MjdaMDMxMTAvBgNV
BAMTKDM0ODcwNjE4MzMzNTg5MzcwQTc0NTAxOUVDN0VBMzY1RUU1NzM1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkav02vBlWOQAzGtgdYWCWlK6S
n9w/Ip+ZFTbN7yZ+68xpsCXl2jryfaewUi2jjzWMLhIwAfh1hk44KHEgl5gWZByG
0ggjoESrZtZBp7UahQz4oOsyGRl8GeAfzcaI5F/HHBWLWquS8KmKKYhbhltfd/R6
8KEIIwIAEOj9CvdsXG19ZmkgdMZDmPcVR1Slq+XhQ9U4/EQ1X9JyQB7SthZul3ZR
taLYiyoVf6f62X1JWHFtMUCrCkf2u1pyx2KSbVeibpQyuhF9ZMKTnCOt8jTfC9/Y
lRlQS0Fe2FH67cVXuBuhhY7UeU+xrhy4ETEg78R1a4JdkqUG+cUsYwP/Ul/tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNIcGGDM1iTcKdFAZ7H6jZe5XNaAwHwYDVR0j
BBgwFoAUZ7ujas71X6NAd/kzUITLl+tR/uMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5Z
ckEvMC82N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QkJBMzZBQ0VGNTVGQTM0
MDc3RjkzMzUwODRDQjk3RUI1MUZFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5ZckEvMC82
N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFVLtYse/BfsTksyrixJvBm4ZjvWq8gTJ+WrZEIB45hrz8fXLsf/JCmAak6v2
fGpZosfQYuOS9meB2LgxYzQIUcJGSRlLAaNVV6yc7UANtmPI/QAxXCrF8rexrRbt
bSeTiLD5cMbtmopc7v63JTp+NYc9kpvwCfSvdk0VutzzeAhNnIcabkNM1vSGMesZ
E0qRZRTPkOF/r5DkdhoznSxgxAXOAiPEhm4Mu3OEGrdUMuuKVN55YCdWh+WXL3Ac
M2YpObCwT2woZ8mS6vRhdpVpEzj6BuIYy3RoWCDJPAeVtdS06/1V+OL5ACg+nHms
YsQUZSUPNsi/WspwyGDJ3jUr3Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:17:34 2025 by rpki-client