This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
File: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft (raw, json)
Hash identifier: ewfNBUAPVs3RSsM0PjGx8Z+q8on+ZT6njM970+Q1rdA=
Subject key identifier: 96:09:81:B8:79:2B:65:25:2A:06:11:E2:05:7B:83:69:CA:85:B8:76
Authority key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
Certificate issuer: /CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE
Certificate serial: 0FA48418CE2AE12E9221F1A4E192F0B413B8E280
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
Manifest number: 033F
Signing time: Fri 19 Dec 2025 16:31:40 +0000
Manifest this update: Fri 19 Dec 2025 16:26:40 +0000
Manifest next update: Sat 20 Dec 2025 16:43:40 +0000
Files and hashes: 1: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: qelJjM5d33Imc6UYcUNyfhiBYBiDTusid0cQJFtvHZ8=)
2: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl (hash: 6puuiLA43LHJwCNzbZOk/EPPqkUrhYOZiGY/zdo2o9I=)
3: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: RJ1WZFBfEzWGniIdzhAmmz9+gLm7fbEqwNn3B6soCOw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl
rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 16:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a4:84:18:ce:2a:e1:2e:92:21:f1:a4:e1:92:f0:b4:13:b8:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE
Validity
Not Before: Dec 19 16:26:40 2025 GMT
Not After : Dec 20 16:43:40 2025 GMT
Subject: CN=960981B8792B65252A0611E2057B8369CA85B876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:39:85:ff:ea:e5:31:f5:87:38:cd:c1:67:
db:bc:99:64:56:b2:4f:a0:a9:cc:b1:de:7f:81:b6:
c5:00:ff:93:18:96:82:f8:f6:90:3f:47:ca:95:1c:
f8:18:26:ea:cb:ff:db:6d:e4:c1:de:3a:c3:8b:f7:
ee:6c:d1:c0:b4:28:8b:e3:07:1e:39:36:c6:ca:0b:
fb:cb:1e:fd:8e:8c:63:b3:78:82:f0:c4:4a:75:0c:
ad:8e:a1:30:d9:06:22:3c:cf:ea:1a:38:f1:67:75:
f4:c0:03:1d:3e:a6:e9:63:33:82:da:a6:ca:2c:ff:
ca:f0:05:80:2e:f0:8a:d8:6d:d6:c4:b9:5c:1e:72:
1d:46:94:6d:17:97:76:f7:a6:29:5c:f2:e3:b3:99:
82:9a:4e:e2:23:2b:81:26:0a:44:a5:59:78:7f:76:
3e:75:cc:ac:1e:7d:38:d8:70:37:fc:fd:0f:3f:2c:
f1:4a:2b:ec:49:e1:eb:ab:08:68:f4:3c:c8:4d:d5:
42:65:2b:10:2c:a1:6d:da:86:24:a6:14:c3:79:8c:
d0:9e:a9:31:6b:f6:0f:31:9b:77:33:e5:ed:4e:c3:
b2:bb:c8:5a:49:e9:3c:14:10:fe:74:51:85:95:d3:
fd:f2:09:5a:76:17:a3:2a:68:fd:fe:2f:f9:8a:34:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:81:B8:79:2B:65:25:2A:06:11:E2:05:7B:83:69:CA:85:B8:76
X509v3 Authority Key Identifier:
keyid:21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:74:bb:65:a4:9c:86:8e:ff:57:4b:52:ec:85:d8:30:b5:18:
00:06:ad:6b:bd:e1:14:5a:f5:32:9d:62:27:2f:4f:0a:8a:33:
a2:c7:d4:c1:ed:3e:55:77:fb:31:2b:cd:21:14:81:a0:d9:61:
ba:cc:84:8e:1b:64:61:6c:88:a6:e1:19:6b:d4:e0:55:9a:ba:
04:f4:0f:8e:96:82:7c:64:64:6e:12:32:5f:e1:64:2b:42:4a:
8d:f3:0b:ba:bb:07:3b:4a:bd:68:5e:a7:fa:e8:0c:da:88:de:
21:26:0c:7f:fe:a0:7e:67:cb:5e:25:7f:7b:bc:be:b5:98:ad:
ba:fa:ef:73:e4:be:65:62:b9:bf:16:3b:f4:b8:75:d7:3c:6e:
a1:3f:6f:74:95:88:91:28:21:fa:ee:9d:8a:25:ad:b1:d9:87:
1a:c2:1e:b2:54:05:6e:ef:66:57:2a:41:9a:73:74:6b:68:bb:
85:24:9b:a8:44:54:99:a8:7b:6b:b9:be:df:ef:d9:b2:8e:73:
d2:c6:6e:0d:5f:9e:5c:6d:d4:4b:0b:09:ca:ea:20:f1:50:2c:
54:88:d0:9b:1f:7b:88:4c:c0:95:3e:a1:4d:48:83:4c:89:72:
84:08:34:0c:4c:47:95:67:e9:b1:81:db:ff:3a:80:0c:ff:2e:
d4:ff:7e:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD6SEGM4q4S6SIfGk4ZLwtBO44oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExRjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBE
M0I4NENCRTAeFw0yNTEyMTkxNjI2NDBaFw0yNTEyMjAxNjQzNDBaMDMxMTAvBgNV
BAMTKDk2MDk4MUI4NzkyQjY1MjUyQTA2MTFFMjA1N0I4MzY5Q0E4NUI4NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYjmF/+rlMfWHOM3BZ9u8mWRW
sk+gqcyx3n+BtsUA/5MYloL49pA/R8qVHPgYJurL/9tt5MHeOsOL9+5s0cC0KIvj
Bx45NsbKC/vLHv2OjGOzeILwxEp1DK2OoTDZBiI8z+oaOPFndfTAAx0+puljM4La
psos/8rwBYAu8IrYbdbEuVwech1GlG0Xl3b3pilc8uOzmYKaTuIjK4EmCkSlWXh/
dj51zKwefTjYcDf8/Q8/LPFKK+xJ4eurCGj0PMhN1UJlKxAsoW3ahiSmFMN5jNCe
qTFr9g8xm3cz5e1Ow7K7yFpJ6TwUEP50UYWV0/3yCVp2F6MqaP3+L/mKNPENAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlgmBuHkrZSUqBhHiBXuDacqFuHYwHwYDVR0j
BBgwFoAUIR89QgoTauc5WjZ8DcLHMNO4TL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4
UnIvMC8yMTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUYzRDQyMEExMzZBRTcz
OTVBMzY3QzBEQzJDNzMwRDNCODRDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8y
MTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH3S7ZaScho7/V0tS7IXYMLUYAAata73hFFr1Mp1iJy9PCoozosfUwe0+VXf7
MSvNIRSBoNlhusyEjhtkYWyIpuEZa9TgVZq6BPQPjpaCfGRkbhIyX+FkK0JKjfML
ursHO0q9aF6n+ugM2ojeISYMf/6gfmfLXiV/e7y+tZituvrvc+S+ZWK5vxY79Lh1
1zxuoT9vdJWIkSgh+u6diiWtsdmHGsIeslQFbu9mVypBmnN0a2i7hSSbqERUmah7
a7m+3+/Zso5z0sZuDV+eXG3USwsJyuog8VAsVIjQmx97iEzAlT6hTUiDTIlyhAg0
DExHlWfpsYHb/zqADP8u1P9+zQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:51:24 2025 by rpki-client