This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft File: 3A546F3625A8CE1F69122E8BD80769CC991FC593.mft (raw, json) Hash identifier: yDwRRxkiSsBd1W23/EPtu56YAqlMLVr/LR+HQJZsMqk= Subject key identifier: CA:91:60:11:EA:DE:B0:E7:AB:53:69:F4:EF:6B:FA:81:3F:45:A5:01 Authority key identifier: 3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93 Certificate issuer: /CN=3A546F3625A8CE1F69122E8BD80769CC991FC593 Certificate serial: 211CA6AF922A7CCBF523069F9E829A8A884601E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer Subject info access: rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft Manifest number: 031D Signing time: Mon 22 Dec 2025 16:30:37 +0000 Manifest this update: Mon 22 Dec 2025 16:25:37 +0000 Manifest next update: Tue 23 Dec 2025 17:06:37 +0000 Files and hashes: 1: 323830343a323464343a3a2f33322d3334203d3e203532373831.roa (hash: BrQu+teATlcXUUvtBftKQPiXlc9Ng5jgkpjP7s8cieM=) 2: 3137372e3230302e34382e302f32302d3234203d3e203532373831.roa (hash: FBQ/5T6eAP7P2pyDV6IcSDAewNdRCf0cOWfvAowUNtw=) 3: 3A546F3625A8CE1F69122E8BD80769CC991FC593.crl (hash: w/EGmZjUazG9xxMMXiJacRsLkwHiu98GC6HPSKyH3WI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 17:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1c:a6:af:92:2a:7c:cb:f5:23:06:9f:9e:82:9a:8a:88:46:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A546F3625A8CE1F69122E8BD80769CC991FC593 Validity Not Before: Dec 22 16:25:37 2025 GMT Not After : Dec 23 17:06:37 2025 GMT Subject: CN=CA916011EADEB0E7AB5369F4EF6BFA813F45A501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:27:5b:fc:f6:d1:07:a3:3d:99:d0:18:24: c0:d4:5a:21:38:34:31:64:b6:32:96:88:12:1a:a6: 31:5b:98:31:ba:62:2c:81:c0:9a:e7:72:41:d5:71: d5:45:84:a8:5d:88:b7:da:bd:5a:2e:50:8b:83:d3: d4:5c:d5:31:2b:c8:15:af:f4:21:3b:e0:3b:d2:23: fa:2f:f6:b0:30:42:71:e3:76:67:a6:d6:80:f9:4a: 69:5c:95:bd:15:69:98:26:7f:88:a7:fc:ae:c7:04: 11:5c:c1:83:3d:82:23:97:d9:35:18:cd:c3:2b:e1: 35:fe:94:4c:d8:e9:1b:69:a5:b4:e4:1e:af:59:c2: 23:ad:84:ac:43:2f:a5:cd:f7:83:02:47:f6:32:52: b5:0c:e2:4d:37:59:0a:6b:52:b7:1e:25:fb:b3:6a: a3:ed:8b:dc:4f:47:e3:19:77:9d:4b:4c:7b:2d:d7: ca:e2:ae:41:a1:37:5c:14:d7:0d:84:be:8f:9f:4d: 97:9b:91:fe:98:65:76:3d:73:4f:9c:93:57:bd:cc: a5:2d:ca:dc:16:3f:cb:67:86:d0:84:d1:f3:30:b5: 3e:b9:68:82:f1:18:1a:9e:04:1f:e7:e6:4a:56:1e: 01:41:4c:a8:9a:01:83:7b:ea:41:e5:2f:b1:30:40: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:91:60:11:EA:DE:B0:E7:AB:53:69:F4:EF:6B:FA:81:3F:45:A5:01 X509v3 Authority Key Identifier: keyid:3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cf:66:a5:12:17:99:20:51:49:18:3c:d6:04:66:e6:a8:d6: a1:0c:22:3e:c3:d9:cd:63:0b:30:b1:b1:f3:da:5c:48:75:2c: 12:0f:53:34:13:63:dc:5e:98:43:de:de:11:3b:6a:03:2c:4e: 86:8b:a3:af:6b:9d:0e:03:af:86:9b:92:c4:e9:ee:ad:f9:c8: 6b:3b:0b:6c:69:62:af:41:60:35:09:e1:f7:a4:ad:b4:0b:26: ff:69:be:7f:56:22:e9:95:87:28:58:7e:59:8e:5e:62:37:60: b7:1e:03:5b:00:d9:5b:47:fd:98:34:1e:2b:51:f9:1c:ac:33: 57:6b:1c:06:06:45:55:ac:53:71:4e:e4:09:38:21:18:2a:cb: 7e:3d:39:2d:e6:70:bd:a8:3b:6c:ae:fd:1b:95:1a:ee:d5:ae: 79:49:76:e2:a1:df:0b:11:91:b4:0d:af:43:19:3f:2f:77:ae: cf:99:d5:5e:ec:50:25:48:85:9e:ad:f9:96:cd:0d:7f:5a:60: f3:d1:4f:c9:b3:47:98:f9:9b:f7:90:d9:d9:90:6f:a8:2f:67: 2b:7b:a5:77:9b:6a:ea:ec:36:94:8a:97:57:97:30:25:60:88: d5:bd:15:7d:17:28:db:06:5b:e1:a5:ee:33:d7:4a:74:b2:39: 5b:34:ec:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIRymr5IqfMv1IwafnoKaiohGAeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1NDZGMzYyNUE4Q0UxRjY5MTIyRThCRDgwNzY5Q0M5 OTFGQzU5MzAeFw0yNTEyMjIxNjI1MzdaFw0yNTEyMjMxNzA2MzdaMDMxMTAvBgNV BAMTKENBOTE2MDExRUFERUIwRTdBQjUzNjlGNEVGNkJGQTgxM0Y0NUE1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFydb/PbRB6M9mdAYJMDUWiE4 NDFktjKWiBIapjFbmDG6YiyBwJrnckHVcdVFhKhdiLfavVouUIuD09Rc1TEryBWv 9CE74DvSI/ov9rAwQnHjdmem1oD5Smlclb0VaZgmf4in/K7HBBFcwYM9giOX2TUY zcMr4TX+lEzY6RtppbTkHq9ZwiOthKxDL6XN94MCR/YyUrUM4k03WQprUrceJfuz aqPti9xPR+MZd51LTHst18rirkGhN1wU1w2Evo+fTZebkf6YZXY9c0+ck1e9zKUt ytwWP8tnhtCE0fMwtT65aILxGBqeBB/n5kpWHgFBTKiaAYN76kHlL7EwQJCfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUypFgEeresOerU2n072v6gT9FpQEwHwYDVR0j BBgwFoAUOlRvNiWozh9pEi6L2AdpzJkfxZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUVUNDJGQnRDYTJmd2NaUHUxWVI5OEtkUEhpMW9YaVRTaXZ0b2ZuVThE bnkvMC8zQTU0NkYzNjI1QThDRTFGNjkxMjJFOEJEODA3NjlDQzk5MUZDNTkzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNTQ2RjM2MjVBOENFMUY2 OTEyMkU4QkQ4MDc2OUNDOTkxRkM1OTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUVUNDJGQnRDYTJmd2NaUHUxWVI5OEtkUEhpMW9YaVRTaXZ0b2ZuVThEbnkvMC8z QTU0NkYzNjI1QThDRTFGNjkxMjJFOEJEODA3NjlDQzk5MUZDNTkzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa89mpRIXmSBRSRg81gRm5qjWoQwiPsPZzWMLMLGx89pcSHUsEg9TNBNj3F6Y Q97eETtqAyxOhoujr2udDgOvhpuSxOnurfnIazsLbGlir0FgNQnh96SttAsm/2m+ f1Yi6ZWHKFh+WY5eYjdgtx4DWwDZW0f9mDQeK1H5HKwzV2scBgZFVaxTcU7kCTgh GCrLfj05LeZwvag7bK79G5Ua7tWueUl24qHfCxGRtA2vQxk/L3euz5nVXuxQJUiF nq35ls0Nf1pg89FPybNHmPmb95DZ2ZBvqC9nK3uld5tq6uw2lIqXV5cwJWCI1b0V fRco2wZb4aXuM9dKdLI5WzTs8A== -----END CERTIFICATE-----Generated at Tue Dec 23 02:10:18 2025 by rpki-client