This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft File: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json) Hash identifier: Hcgcj+98F2l8c384aA8oHvr8iQ1ZlNcPWLNlSaC5Jz4= Subject key identifier: 36:F4:BC:83:E3:59:6C:45:E7:EF:12:55:7E:B7:BE:73:A6:68:58:2A Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 Certificate issuer: /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Certificate serial: 0F5366C34017F0DFC914A4FCB323E937193CE633 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft Manifest number: 02FA Signing time: Sat 06 Dec 2025 04:52:03 +0000 Manifest this update: Sat 06 Dec 2025 04:47:03 +0000 Manifest next update: Sun 07 Dec 2025 05:45:03 +0000 Files and hashes: 1: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: KuYnovQmd52A+7zQ2oy6K9/8C3jMYi3Vo6CGVhiWDuc=) 2: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: eBr86NdP8UcNjjscNRKlKFP5HRNCnh3UcA1xh8UVip4=) 3: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:53:66:c3:40:17:f0:df:c9:14:a4:fc:b3:23:e9:37:19:3c:e6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Validity Not Before: Dec 6 04:47:03 2025 GMT Not After : Dec 7 05:45:03 2025 GMT Subject: CN=36F4BC83E3596C45E7EF12557EB7BE73A668582A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:1d:11:d8:d0:9e:53:54:af:5f:02:9d:79: 6e:a6:d7:79:86:8c:16:48:6f:19:68:99:f7:1e:b8: 7a:de:98:f7:25:b5:a5:53:26:33:73:ce:e5:33:b4: 9e:ff:ea:53:4f:0d:ac:e8:1f:2b:ad:4b:5b:88:fe: ce:68:7e:bc:f4:6b:25:39:8a:c8:69:50:2b:69:cf: 6f:6d:ca:70:b3:39:c1:e1:14:69:5f:16:01:49:55: 9f:73:b7:be:84:9e:2c:cf:62:16:c3:c7:96:55:bf: 02:3d:04:e0:a7:2e:d2:06:81:00:bb:a7:aa:71:56: 79:e2:18:93:b6:f0:d9:93:2b:8d:92:a5:8d:f9:10: 39:a6:18:13:6a:59:d9:0d:a1:aa:42:e7:83:73:1a: 99:57:42:1f:cb:0c:39:7d:35:6c:6f:4d:65:02:bd: 41:15:4c:ec:94:11:43:c8:47:98:d1:fa:08:ee:96: 38:44:94:f1:40:b1:e6:23:82:b1:3d:54:9f:36:2e: 7b:5d:e3:30:b3:6a:d5:da:8c:0f:a0:73:c1:c3:86: c1:b6:b9:0e:8f:6c:3a:c9:2d:9d:02:24:17:83:30: 22:48:b4:7f:32:9f:05:8e:6d:d7:5b:ce:1c:7d:21: 51:c0:c7:a8:81:7e:a8:0a:44:48:7e:da:ad:c0:0b: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F4:BC:83:E3:59:6C:45:E7:EF:12:55:7E:B7:BE:73:A6:68:58:2A X509v3 Authority Key Identifier: keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:3a:63:12:55:78:0a:e0:63:5c:d3:7b:15:bd:4a:79:d2:7f: 8b:5c:da:4e:11:f7:91:f1:c6:fa:31:dd:d8:e5:b3:6d:f8:ec: b2:88:5d:44:cc:ec:01:cf:01:cb:33:7b:e6:86:63:d0:be:07: 58:f6:36:3c:4c:40:e8:e1:e1:9a:a1:d6:b9:0d:36:ae:74:4d: 88:fa:2e:72:2e:52:ce:71:84:cc:8a:b7:7f:ea:10:00:17:c7: b4:e3:cc:7c:32:da:a0:30:1d:3a:e0:92:d0:ee:ec:a8:20:b1: 1d:cd:c3:9a:80:f5:19:40:8a:89:00:ae:5f:68:c4:00:fc:e8: f8:fe:05:52:f3:c2:47:25:35:ae:1d:67:f9:5e:e2:64:73:89: 38:c4:78:ad:4e:c3:24:85:53:26:2d:37:c2:fb:38:94:a5:00: f1:8a:65:ff:54:05:49:bc:b8:75:7e:c5:c5:14:af:c0:6d:ad: 57:14:0e:bc:b5:b3:6e:cd:28:25:6a:a8:d1:51:43:1f:c9:2f: 59:61:18:2c:0a:b0:63:64:48:30:fd:e1:45:1b:ea:7a:04:b4: 33:7c:6b:2c:21:7f:a2:f7:c3:69:dc:fb:6c:36:7c:20:1d:d9: aa:db:95:ce:74:3b:54:3e:f0:d0:54:1c:b7:6d:44:97:fb:46: d2:d6:7a:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD1Nmw0AX8N/JFKT8syPpNxk85jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2RjBCQkZFRkFCMjRDOTBEQ0M0NUQ3NDNDOTIzMzcy NTFCMkNBNzAeFw0yNTEyMDYwNDQ3MDNaFw0yNTEyMDcwNTQ1MDNaMDMxMTAvBgNV BAMTKDM2RjRCQzgzRTM1OTZDNDVFN0VGMTI1NTdFQjdCRTczQTY2ODU4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfh0R2NCeU1SvXwKdeW6m13mG jBZIbxlomfceuHremPcltaVTJjNzzuUztJ7/6lNPDazoHyutS1uI/s5ofrz0ayU5 ishpUCtpz29tynCzOcHhFGlfFgFJVZ9zt76EnizPYhbDx5ZVvwI9BOCnLtIGgQC7 p6pxVnniGJO28NmTK42SpY35EDmmGBNqWdkNoapC54NzGplXQh/LDDl9NWxvTWUC vUEVTOyUEUPIR5jR+gjuljhElPFAseYjgrE9VJ82Lntd4zCzatXajA+gc8HDhsG2 uQ6PbDrJLZ0CJBeDMCJItH8ynwWObddbzhx9IVHAx6iBfqgKREh+2q3AC+d/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNvS8g+NZbEXn7xJVfre+c6ZoWCowHwYDVR0j BBgwFoAUaG8Lv++rJMkNzEXXQ8kjNyUbLKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZv ZjIvMS82ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NkYwQkJGRUZBQjI0Qzkw RENDNDVENzQzQzkyMzM3MjUxQjJDQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZvZjIvMS82 ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuDpjElV4CuBjXNN7Fb1KedJ/i1zaThH3kfHG+jHd2OWzbfjssohdRMzsAc8B yzN75oZj0L4HWPY2PExA6OHhmqHWuQ02rnRNiPouci5SznGEzIq3f+oQABfHtOPM fDLaoDAdOuCS0O7sqCCxHc3DmoD1GUCKiQCuX2jEAPzo+P4FUvPCRyU1rh1n+V7i ZHOJOMR4rU7DJIVTJi03wvs4lKUA8Ypl/1QFSby4dX7FxRSvwG2tVxQOvLWzbs0o JWqo0VFDH8kvWWEYLAqwY2RIMP3hRRvqegS0M3xrLCF/ovfDadz7bDZ8IB3ZqtuV znQ7VD7w0FQct21El/tG0tZ6yA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:37 2025 by rpki-client