This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: dIEWUxiA3kUM6P3OaTtmkFvJ5KN8SOtXgGnfUPm9tp4= Subject key identifier: 6A:74:02:50:6A:E4:EB:D0:40:A4:E0:EB:6B:C7:B2:AD:15:4F:30:46 Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 4A9D2D22DD898E97BE52868624372321F0C63C23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 01E7 Signing time: Sun 21 Dec 2025 14:39:51 +0000 Manifest this update: Sun 21 Dec 2025 14:34:51 +0000 Manifest next update: Mon 22 Dec 2025 17:32:51 +0000 Files and hashes: 1: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: xBytMEzpiSvQ+v9FQrBqvGnXtaTap/EuNrdWMvKGSnk=) 2: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9d:2d:22:dd:89:8e:97:be:52:86:86:24:37:23:21:f0:c6:3c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Dec 21 14:34:51 2025 GMT Not After : Dec 22 17:32:51 2025 GMT Subject: CN=6A7402506AE4EBD040A4E0EB6BC7B2AD154F3046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d1:d8:b7:82:ee:30:b4:61:bc:23:33:59:f3: 88:46:09:0b:d4:6e:22:51:88:7e:1c:67:a7:be:80: b6:ba:2e:81:17:54:4f:cc:1e:fb:94:d5:98:51:f9: b0:60:00:8a:55:eb:fc:fe:75:3e:6d:e6:c6:85:ab: 70:94:cd:7d:28:82:fd:a2:b4:0b:a8:2b:1c:97:8e: 85:cc:20:04:c6:9d:25:f2:ce:01:2e:e2:f7:75:72: 1b:55:04:e7:9e:c5:29:1d:a1:4b:23:5c:2d:21:1c: 98:ad:cc:5c:bc:18:90:a0:93:54:2f:69:cb:09:a8: 0c:6f:60:9e:66:91:a3:9e:1f:8a:f3:cd:22:43:e2: 09:86:11:0d:28:c7:68:26:84:de:6c:da:10:69:7b: f9:b1:af:83:18:37:74:4d:ed:fd:1a:5a:4a:c5:05: 92:bd:4f:e1:83:e7:d2:ba:3a:5d:3f:39:2b:bc:59: 57:64:0b:42:37:83:45:a2:44:54:ec:f7:a3:1e:38: 30:0d:6d:49:9d:92:54:a4:67:63:3f:05:f6:d8:b0: 40:c3:4e:ea:98:17:2a:ce:45:14:19:4c:bf:ef:a8: 63:01:4d:a5:3c:85:6d:72:3c:f1:dd:fa:0f:c2:7f: 05:6c:78:d4:8e:48:9c:77:55:fe:e7:a6:d8:be:d5: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:74:02:50:6A:E4:EB:D0:40:A4:E0:EB:6B:C7:B2:AD:15:4F:30:46 X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8d:bc:ae:0d:1c:ae:11:b6:39:18:54:22:7d:7b:f3:06:5d: bf:18:bd:d6:de:54:0c:12:ba:f9:31:eb:67:5d:11:b5:27:29: 86:63:a6:2b:69:ca:dd:5a:95:fd:73:09:36:33:5a:36:6c:e7: eb:81:ea:b4:27:21:23:81:da:60:c0:af:63:da:11:eb:4e:3f: 50:ee:c5:7e:01:1a:57:6e:57:1b:3f:b2:60:61:66:94:82:14: c4:44:03:11:ab:06:9c:6a:22:14:e0:55:4b:8f:89:00:0c:7b: 83:c3:9c:d9:ec:c0:55:78:44:7b:b5:c8:e4:92:d4:ac:66:0e: d3:77:dc:2e:00:4a:14:af:88:3b:3f:9e:e4:23:12:ec:e6:c6: 33:8b:eb:61:d0:c0:7e:6e:bb:84:41:ec:f6:fb:81:3a:70:f3: cf:0c:7c:b0:ff:4d:14:7b:04:6b:45:24:27:f0:0f:99:5d:c9: fa:87:d9:2d:28:10:bc:a6:6c:de:7b:96:0a:36:54:5c:1a:b8: ba:ca:fa:09:f2:a2:43:f7:ed:5d:3c:ec:f6:ab:47:6b:56:9b: 38:07:f0:ff:4d:b3:cd:5a:0d:07:96:7c:ed:09:2e:d2:8c:a0: 34:6f:fd:70:0a:59:58:e9:bb:59:10:36:34:19:20:94:4d:0d: e4:ce:90:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSp0tIt2Jjpe+UoaGJDcjIfDGPCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTEyMjExNDM0NTFaFw0yNTEyMjIxNzMyNTFaMDMxMTAvBgNV BAMTKDZBNzQwMjUwNkFFNEVCRDA0MEE0RTBFQjZCQzdCMkFEMTU0RjMwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00di3gu4wtGG8IzNZ84hGCQvU biJRiH4cZ6e+gLa6LoEXVE/MHvuU1ZhR+bBgAIpV6/z+dT5t5saFq3CUzX0ogv2i tAuoKxyXjoXMIATGnSXyzgEu4vd1chtVBOeexSkdoUsjXC0hHJitzFy8GJCgk1Qv acsJqAxvYJ5mkaOeH4rzzSJD4gmGEQ0ox2gmhN5s2hBpe/mxr4MYN3RN7f0aWkrF BZK9T+GD59K6Ol0/OSu8WVdkC0I3g0WiRFTs96MeODANbUmdklSkZ2M/BfbYsEDD TuqYFyrORRQZTL/vqGMBTaU8hW1yPPHd+g/CfwVseNSOSJx3Vf7npti+1WaLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUanQCUGrk69BApODra8eyrRVPMEYwHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF428rg0crhG2ORhUIn178wZdvxi91t5UDBK6+THrZ10RtScphmOmK2nK3VqV /XMJNjNaNmzn64HqtCchI4HaYMCvY9oR604/UO7FfgEaV25XGz+yYGFmlIIUxEQD EasGnGoiFOBVS4+JAAx7g8Oc2ezAVXhEe7XI5JLUrGYO03fcLgBKFK+IOz+e5CMS 7ObGM4vrYdDAfm67hEHs9vuBOnDzzwx8sP9NFHsEa0UkJ/APmV3J+ofZLSgQvKZs 3nuWCjZUXBq4usr6CfKiQ/ftXTzs9qtHa1abOAfw/02zzVoNB5Z87Qku0oygNG/9 cApZWOm7WRA2NBkglE0N5M6QIg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:08:11 2025 by rpki-client