This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft File: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json) Hash identifier: aU2gLyv30N3NP22ggKYhpPKQK7VTv0/ClvMjLdAz/XE= Subject key identifier: CE:53:2C:31:B2:16:0A:43:1F:26:D2:E5:BC:00:8E:B1:C8:2C:57:37 Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 24D90B03235C8A53A3AC82EE21036F027C82BBCD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft Manifest number: 0347 Signing time: Sun 21 Dec 2025 13:20:24 +0000 Manifest this update: Sun 21 Dec 2025 13:15:24 +0000 Manifest next update: Mon 22 Dec 2025 15:37:24 +0000 Files and hashes: 1: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=) 2: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=) 3: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=) 4: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=) 5: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=) 6: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=) 7: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: n9k5WZUkfi7Zbg4qLWhy2nLiopx/GbaPjhYtCxHSyGI=) 8: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 15:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d9:0b:03:23:5c:8a:53:a3:ac:82:ee:21:03:6f:02:7c:82:bb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Dec 21 13:15:24 2025 GMT Not After : Dec 22 15:37:24 2025 GMT Subject: CN=CE532C31B2160A431F26D2E5BC008EB1C82C5737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:75:af:58:28:54:70:3f:9f:72:9b:19:e5: bd:fa:5d:c2:a8:c5:84:32:b8:61:ff:ee:49:3f:18: f3:01:b8:ae:5e:ee:c2:4f:70:fc:8e:0f:67:7a:a4: 10:68:d9:fc:01:40:52:55:fd:3b:b5:09:49:b4:9e: 9f:b8:77:db:91:f4:f4:5a:dc:a5:96:a4:c9:3e:4c: 5a:31:c1:7a:5f:fa:34:43:a1:46:17:f1:13:91:be: 6a:a9:cd:3f:5c:18:f1:9c:7e:d2:0a:73:22:2d:a1: ee:2e:1a:10:21:be:47:95:5a:a4:bd:91:34:c6:9c: 5a:e4:34:3d:77:fe:5b:8c:da:4d:48:64:42:d8:51: 71:c3:e8:de:d6:28:e3:30:47:80:a3:bb:21:17:39: 7d:2a:a1:de:74:d5:e4:63:da:c8:6d:41:b5:9f:74: cc:6d:7f:5c:db:52:b6:74:23:4f:39:a6:2a:24:63: cc:5c:39:e7:2a:40:d3:f6:5d:a6:b4:0d:44:01:fc: a5:2f:6b:60:39:c4:39:31:7f:c5:a4:33:fd:d5:ba: a0:5e:16:5f:5b:a0:62:a8:3e:57:2e:96:21:8f:8a: 59:cf:b1:38:69:b3:3b:c0:be:f6:12:8c:cf:4b:10: a5:ac:0b:1d:38:39:35:f7:a2:16:91:fc:e6:09:bc: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:2C:31:B2:16:0A:43:1F:26:D2:E5:BC:00:8E:B1:C8:2C:57:37 X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:07:c9:ae:89:a5:ad:bf:f6:c0:d3:a0:c6:60:4f:4e:41:b2: 95:32:51:95:a3:89:84:ba:0b:7a:d6:3e:40:98:2c:97:9b:47: 25:94:f4:41:b4:3d:22:07:18:b9:2c:45:e1:15:b7:5d:ed:85: ac:53:ca:9d:02:de:76:02:41:1b:9f:fa:82:77:52:32:47:79: 94:67:6c:6b:52:22:77:a6:62:16:b0:54:d9:06:56:ca:42:73: 61:11:56:68:00:1f:4a:88:e2:0e:ca:51:b7:35:3d:1f:78:33: 35:58:0c:f0:bc:f5:f1:23:89:1f:a9:a7:da:af:f8:d7:c1:d3: 98:6b:e3:e4:e7:74:d0:cb:ee:ef:eb:d4:7f:26:3a:a0:30:f4: 8a:ae:b6:5a:59:c0:ee:7b:cf:3e:9a:0f:3c:9c:7a:b4:13:2e: 4d:0b:1c:c5:2a:16:95:37:88:5d:6c:a4:62:c4:a6:f8:04:fb: 32:00:d7:13:44:b6:aa:5e:8c:98:1e:7e:53:e8:d0:68:1b:29: 4a:d2:ef:48:f4:3a:0b:e5:e1:d8:19:5f:f5:18:64:6a:b7:ed: 5e:15:2d:44:52:6b:ca:ed:fa:dc:53:1d:8d:80:bf:54:45:34: e4:dc:3b:08:d3:6a:7a:cc:d4:46:df:7b:f4:4a:2e:35:9f:31: a9:9d:bd:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJNkLAyNcilOjrILuIQNvAnyCu80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNTEyMjExMzE1MjRaFw0yNTEyMjIxNTM3MjRaMDMxMTAvBgNV BAMTKENFNTMyQzMxQjIxNjBBNDMxRjI2RDJFNUJDMDA4RUIxQzgyQzU3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83XWvWChUcD+fcpsZ5b36XcKo xYQyuGH/7kk/GPMBuK5e7sJPcPyOD2d6pBBo2fwBQFJV/Tu1CUm0np+4d9uR9PRa 3KWWpMk+TFoxwXpf+jRDoUYX8RORvmqpzT9cGPGcftIKcyItoe4uGhAhvkeVWqS9 kTTGnFrkND13/luM2k1IZELYUXHD6N7WKOMwR4CjuyEXOX0qod501eRj2shtQbWf dMxtf1zbUrZ0I085piokY8xcOecqQNP2Xaa0DUQB/KUva2A5xDkxf8WkM/3VuqBe Fl9boGKoPlculiGPilnPsThpszvAvvYSjM9LEKWsCx04OTX3ohaR/OYJvKgLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzlMsMbIWCkMfJtLlvACOscgsVzcwHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQNmovMS8z OEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQfJromlrb/2wNOgxmBPTkGylTJRlaOJhLoLetY+QJgsl5tHJZT0QbQ9IgcY uSxF4RW3Xe2FrFPKnQLedgJBG5/6gndSMkd5lGdsa1Iid6ZiFrBU2QZWykJzYRFW aAAfSojiDspRtzU9H3gzNVgM8Lz18SOJH6mn2q/418HTmGvj5Od00Mvu7+vUfyY6 oDD0iq62WlnA7nvPPpoPPJx6tBMuTQscxSoWlTeIXWykYsSm+AT7MgDXE0S2ql6M mB5+U+jQaBspStLvSPQ6C+Xh2Blf9RhkarftXhUtRFJryu363FMdjYC/VEU05Nw7 CNNqeszURt979EouNZ8xqZ29kA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:00 2025 by rpki-client