This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft File: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json) Hash identifier: Ya2iBJdC5ggc+J82DQLh0cRRPGMAtOcbSgeC9y4tTN8= Subject key identifier: 3B:D7:DC:81:23:B5:52:CB:FF:EB:2F:07:A4:CF:66:1A:55:48:FB:B3 Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 Certificate issuer: /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Certificate serial: 1A896048520F1B413B19E36FA78CE49B9D20602F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject info access: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft Manifest number: FD Signing time: Sat 06 Dec 2025 03:45:13 +0000 Manifest this update: Sat 06 Dec 2025 03:40:13 +0000 Manifest next update: Sun 07 Dec 2025 07:13:13 +0000 Files and hashes: 1: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=) 2: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=) 3: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: CeOblWHI2RGUo4FLrC1l4mTrMRryIe8v+eRbjFX+sOQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:89:60:48:52:0f:1b:41:3b:19:e3:6f:a7:8c:e4:9b:9d:20:60:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Validity Not Before: Dec 6 03:40:13 2025 GMT Not After : Dec 7 07:13:13 2025 GMT Subject: CN=3BD7DC8123B552CBFFEB2F07A4CF661A5548FBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:6c:fc:fd:00:df:1a:49:f0:96:c9:4e:17: 71:11:89:b2:2c:2b:f2:60:e0:eb:a6:67:7a:e6:43: 98:35:9a:7a:2f:22:25:b4:3f:c7:a1:e2:7e:01:f6: 3e:ad:e6:fa:ec:2b:5f:d6:4a:fa:49:3e:23:70:f7: 34:23:e2:0e:7c:92:90:3f:d9:74:78:52:9e:06:12: e7:1b:79:e9:9b:23:e3:b0:7e:97:d9:4f:64:8d:ad: d1:c3:3a:6d:97:43:ec:35:0d:87:b4:4e:07:9b:75: 2c:72:91:31:a8:45:a9:39:b7:ba:82:10:db:56:7f: 0c:30:85:59:cd:62:56:dd:24:f6:bc:af:27:90:5d: 94:2f:4a:68:4a:e4:32:3c:62:8d:74:21:4b:8a:11: 59:c6:6b:4f:fb:71:47:16:da:5b:2b:ee:32:2a:11: 98:9f:21:89:40:4c:2a:2a:e6:f2:76:ae:ca:c0:2b: 07:35:72:91:f0:cc:12:05:c4:98:0a:b4:43:8d:30: 00:3b:d5:d6:29:da:4c:23:3e:49:9f:b1:24:47:79: b9:8a:5d:09:3a:09:f8:78:6e:16:7b:80:3f:bf:fd: 59:45:51:1e:4b:96:e0:2c:11:96:5d:67:3f:59:2d: 1e:5a:c6:4c:4c:d6:d3:d6:71:c8:23:c7:f1:59:ed: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:DC:81:23:B5:52:CB:FF:EB:2F:07:A4:CF:66:1A:55:48:FB:B3 X509v3 Authority Key Identifier: keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5c:0a:5d:d6:3e:da:11:6e:8d:5c:57:4a:d2:35:ec:da:57: 99:c5:6d:d5:84:9a:91:db:b3:8b:e2:eb:e3:60:de:24:5d:68: 9e:42:80:66:06:b0:91:39:c5:38:12:c9:17:ac:96:45:0e:b9: 48:7c:3d:88:00:bf:27:66:f5:32:9b:74:e9:f1:f0:e1:89:38: d9:1d:f5:50:20:b2:ba:24:96:59:4d:02:82:cf:ec:14:21:0b: 78:c5:e3:21:25:e7:bc:02:92:29:ce:4b:77:1a:37:9c:98:a0: 39:17:53:91:70:be:fc:ad:41:86:7d:41:88:a5:2a:07:d5:1b: ea:14:52:d5:6d:39:6d:af:c0:18:18:97:cc:10:10:15:8f:4f: 41:0d:71:9d:5c:cc:10:aa:14:01:69:3d:70:8b:73:7d:0d:b0: 83:b8:73:e0:9b:77:08:39:fe:ad:14:dd:9c:a2:7c:bf:da:51: 5f:2c:56:a1:aa:8c:53:a0:8e:03:3f:34:b2:e9:76:86:ba:b3: 06:dd:5e:42:74:ee:85:fb:4e:3b:0e:fc:40:af:85:a8:e6:b3: 74:51:bd:54:20:48:70:76:9c:3b:6f:69:bc:1c:13:5b:47:34: 0f:95:b4:1a:d8:43:89:38:5c:0a:07:fc:72:64:65:9c:bf:28: 6b:31:08:6d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUGolgSFIPG0E7GeNvp4zkm50gYC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1 QjVBQTQwNzAeFw0yNTEyMDYwMzQwMTNaFw0yNTEyMDcwNzEzMTNaMDMxMTAvBgNV BAMTKDNCRDdEQzgxMjNCNTUyQ0JGRkVCMkYwN0E0Q0Y2NjFBNTU0OEZCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkGz8/QDfGknwlslOF3ERibIs K/Jg4OumZ3rmQ5g1mnovIiW0P8eh4n4B9j6t5vrsK1/WSvpJPiNw9zQj4g58kpA/ 2XR4Up4GEucbeembI+OwfpfZT2SNrdHDOm2XQ+w1DYe0TgebdSxykTGoRak5t7qC ENtWfwwwhVnNYlbdJPa8ryeQXZQvSmhK5DI8Yo10IUuKEVnGa0/7cUcW2lsr7jIq EZifIYlATCoq5vJ2rsrAKwc1cpHwzBIFxJgKtEONMAA71dYp2kwjPkmfsSRHebmK XQk6Cfh4bhZ7gD+//VlFUR5LluAsEZZdZz9ZLR5axkxM1tPWccgjx/FZ7TFFAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUO9fcgSO1Usv/6y8HpM9mGlVI+7MwHwYDVR0j BBgwFoAUMySh1yxcAZHaG0e4v9G8hFtapAcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ldFNMVm54eDUyWG0xdkdLdVhOazRiclBFblJHRTNWUVFFN3FVYjZFcFFK LzAvMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1QjVBQTQwNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzI0QTFENzJDNUMwMTkxREEx QjQ3QjhCRkQxQkM4NDVCNUFBNDA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2V0 U0xWbnh4NTJYbTF2R0t1WE5rNGJyUEVuUkdFM1ZRUUU3cVViNkVwUUovMC8zMzI0 QTFENzJDNUMwMTkxREExQjQ3QjhCRkQxQkM4NDVCNUFBNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA j1wKXdY+2hFujVxXStI17NpXmcVt1YSakduzi+Lr42DeJF1onkKAZgawkTnFOBLJ F6yWRQ65SHw9iAC/J2b1Mpt06fHw4Yk42R31UCCyuiSWWU0Cgs/sFCELeMXjISXn vAKSKc5Ldxo3nJigORdTkXC+/K1Bhn1BiKUqB9Ub6hRS1W05ba/AGBiXzBAQFY9P QQ1xnVzMEKoUAWk9cItzfQ2wg7hz4Jt3CDn+rRTdnKJ8v9pRXyxWoaqMU6COAz80 sul2hrqzBt1eQnTuhftOOw78QK+FqOazdFG9VCBIcHacO29pvBwTW0c0D5W0GthD iThcCgf8cmRlnL8oazEIbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:28 2025 by rpki-client