This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft File: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft (raw, json) Hash identifier: 00DRIHvhdxrGX6rUvrlqbQklsaOWBuQ6HTBS2zyNJkE= Subject key identifier: 47:CB:A8:C1:37:6B:13:C6:24:51:64:7A:BA:4D:FD:7A:D6:D8:B2:5A Authority key identifier: 39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86 Certificate issuer: /CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86 Certificate serial: 55F48398FB549B0BD45C074AC3BFCB86830F8AF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer Subject info access: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft Manifest number: 3C Signing time: Fri 05 Dec 2025 16:27:54 +0000 Manifest this update: Fri 05 Dec 2025 16:22:54 +0000 Manifest next update: Sat 06 Dec 2025 19:52:54 +0000 Files and hashes: 1: 34352e3138372e39362e302f32322d3332203d3e20323639343632.roa (hash: NaiFTgXjlXyLcqdW+W3yI7vIOFQqkj4gTIl4hxoKefI=) 2: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl (hash: Z3GkKbC69mu+7XYVkpdG49gnLw6bFSHtO9ec6RU7dCw=) 3: 323830343a363530303a3a2f33322d313238203d3e20323639343632.roa (hash: dYFJ+TK53yUSuiBuIq6FGVmH+goh9YSou9bovn9JMV8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f4:83:98:fb:54:9b:0b:d4:5c:07:4a:c3:bf:cb:86:83:0f:8a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86 Validity Not Before: Dec 5 16:22:54 2025 GMT Not After : Dec 6 19:52:54 2025 GMT Subject: CN=47CBA8C1376B13C62451647ABA4DFD7AD6D8B25A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:1c:91:5b:07:c4:98:33:97:bc:68:bd:5a: 97:92:dd:c7:fd:74:f7:ae:e2:d7:5e:45:4e:82:cc: 5c:f0:11:e6:b9:e2:58:aa:91:56:5a:97:47:5f:77: 0f:a3:14:6b:46:a9:81:1c:a4:ea:ff:61:bc:b2:fc: e6:fe:88:99:be:2a:4f:72:e4:29:aa:a8:e4:68:ee: 01:d7:7d:33:e1:14:e9:84:55:70:7e:b5:d5:ea:17: 03:9d:6b:1b:c5:c6:21:10:97:e3:43:49:c5:a8:08: f4:f7:30:f7:3f:ce:9e:5e:ae:14:48:36:62:88:7a: 2d:d1:f0:ae:ac:9a:75:3c:8d:c2:82:5e:04:8a:f9: 9d:5b:31:86:02:85:73:95:d2:33:15:cd:07:78:ab: 2f:52:d5:1e:38:10:5d:9a:7d:3b:83:cb:89:24:fe: 19:c0:c9:e7:d8:2b:34:d2:e1:a4:a8:1a:90:e9:78: a2:8d:0e:c7:cd:d0:cc:56:03:69:19:6c:24:4e:c2: 7c:9d:8b:c3:34:6d:70:6c:6b:33:40:1c:9f:36:3d: 82:fd:cf:cf:6e:d8:98:fa:a8:e6:58:25:24:92:51: 71:05:70:53:96:8b:94:cd:66:fd:41:06:fd:13:6e: 64:5f:e3:46:0a:65:c6:19:b8:39:06:e4:ef:ea:86: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:A8:C1:37:6B:13:C6:24:51:64:7A:BA:4D:FD:7A:D6:D8:B2:5A X509v3 Authority Key Identifier: keyid:39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:0a:09:9d:44:3a:d6:9c:35:9b:f8:44:ca:b1:e4:55:b7: 77:25:49:92:44:61:42:78:fa:72:4e:11:f5:de:38:04:cd:57: a6:0c:b2:33:9f:b8:2e:66:20:25:4c:e1:2b:a4:cf:56:03:23: ca:04:3c:d8:c6:89:e1:14:8f:af:74:0c:d2:33:7b:e2:3e:ef: c7:6a:f3:4d:b7:24:3c:0c:dc:17:71:94:8f:ae:51:89:62:61: 5a:19:53:7f:01:88:92:8c:92:31:84:98:67:a9:b3:6c:7a:87: 1e:8e:ba:a6:fd:da:e3:9a:4f:75:99:84:93:2b:43:59:41:b2: 9a:ae:55:cb:00:4f:e9:93:06:54:ac:1c:e2:02:45:6c:f4:21: 8e:ca:6c:cf:49:95:41:41:c7:28:fe:40:8a:37:41:ec:52:2a: 46:99:3a:e6:6b:27:97:21:4c:85:01:46:4d:eb:e8:6b:fc:e1: da:72:81:b3:7c:08:94:af:75:2f:c7:00:c5:b6:73:1b:6a:6e: 5a:cb:3f:d2:f4:56:31:59:93:cc:5e:95:5b:0f:ab:93:2d:b0: 6d:30:83:90:9e:75:04:fa:70:e6:4b:6c:a3:df:ba:b2:f1:36: 52:6e:68:a2:1d:e3:99:df:bd:c0:26:0e:f5:2a:e6:d0:20:01: 66:5a:75:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVfSDmPtUmwvUXAdKw7/LhoMPivIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkzNUE1Q0I5MENEQzVFNDE2MkNBOUU2MzJDRTQzQ0U2 OTE3RUQ4NjAeFw0yNTEyMDUxNjIyNTRaFw0yNTEyMDYxOTUyNTRaMDMxMTAvBgNV BAMTKDQ3Q0JBOEMxMzc2QjEzQzYyNDUxNjQ3QUJBNERGRDdBRDZEOEIyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZsxyRWwfEmDOXvGi9WpeS3cf9 dPeu4tdeRU6CzFzwEea54liqkVZal0dfdw+jFGtGqYEcpOr/Ybyy/Ob+iJm+Kk9y 5CmqqORo7gHXfTPhFOmEVXB+tdXqFwOdaxvFxiEQl+NDScWoCPT3MPc/zp5erhRI NmKIei3R8K6smnU8jcKCXgSK+Z1bMYYChXOV0jMVzQd4qy9S1R44EF2afTuDy4kk /hnAyefYKzTS4aSoGpDpeKKNDsfN0MxWA2kZbCROwnydi8M0bXBsazNAHJ82PYL9 z89u2Jj6qOZYJSSSUXEFcFOWi5TNZv1BBv0TbmRf40YKZcYZuDkG5O/qhjcJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUR8uowTdrE8YkUWR6uk39etbYslowHwYDVR0j BBgwFoAUOTWly5DNxeQWLKnmMs5DzmkX7YYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlTRFZnakI0WVFoUmFKenZ5WnYxSmpiQmhQQkNuZ1BmVjFtNHV2M1c1 bTYvMC8zOTM1QTVDQjkwQ0RDNUU0MTYyQ0E5RTYzMkNFNDNDRTY5MTdFRDg2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MzVBNUNCOTBDREM1RTQx NjJDQTlFNjMyQ0U0M0NFNjkxN0VEODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlTRFZnakI0WVFoUmFKenZ5WnYxSmpiQmhQQkNuZ1BmVjFtNHV2M1c1bTYvMC8z OTM1QTVDQjkwQ0RDNUU0MTYyQ0E5RTYzMkNFNDNDRTY5MTdFRDg2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVo8KCZ1EOtacNZv4RMqx5FW3dyVJkkRhQnj6ck4R9d44BM1XpgyyM5+4LmYg JUzhK6TPVgMjygQ82MaJ4RSPr3QM0jN74j7vx2rzTbckPAzcF3GUj65RiWJhWhlT fwGIkoySMYSYZ6mzbHqHHo66pv3a45pPdZmEkytDWUGymq5VywBP6ZMGVKwc4gJF bPQhjspsz0mVQUHHKP5AijdB7FIqRpk65msnlyFMhQFGTevoa/zh2nKBs3wIlK91 L8cAxbZzG2puWss/0vRWMVmTzF6VWw+rky2wbTCDkJ51BPpw5ktso9+6svE2Um5o oh3jmd+9wCYO9Srm0CABZlp1yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:29 2025 by rpki-client