This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft File: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft (raw, json) Hash identifier: irXJXNxX1iXhdNTxxA/tJJ3W2erK6qgF8EvPXWhRSIs= Subject key identifier: FA:1F:12:12:49:76:BD:43:58:5B:35:DB:13:67:58:6C:63:52:13:F2 Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 Certificate issuer: /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Certificate serial: 2C30550C0013B162D992DDB119BBB35C9C65B914 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft Manifest number: 39 Signing time: Wed 24 Dec 2025 02:45:52 +0000 Manifest this update: Wed 24 Dec 2025 02:40:52 +0000 Manifest next update: Thu 25 Dec 2025 05:45:52 +0000 Files and hashes: 1: 3138312e3139312e3133362e302f32322d3332203d3e20323731303739.roa (hash: N+VS1gEZX19mdKurLnVGGGidsfPq2fXzteV2UkYkHBM=) 2: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl (hash: OVECd3H1uigMjAf1VW++n+BgqRGgBfyi3DYljhUzSr8=) 3: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (hash: 0pHtEVmtptfCW1hlsfzp0qcUp3I9S9GwoWoaQ04Zss8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 05:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:30:55:0c:00:13:b1:62:d9:92:dd:b1:19:bb:b3:5c:9c:65:b9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9 Validity Not Before: Dec 24 02:40:52 2025 GMT Not After : Dec 25 05:45:52 2025 GMT Subject: CN=FA1F12124976BD43585B35DB1367586C635213F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:ee:9e:1e:60:25:1d:b6:b8:77:45:24:dc: 74:2c:8c:bc:fd:c3:d1:86:f9:d6:f1:e8:bd:a9:00: 95:fd:6a:5a:4c:ec:da:ec:08:19:2c:b7:f2:4e:ce: ac:d8:cb:0c:7b:ce:8a:0c:20:2f:bc:45:84:1d:f0: 91:b9:c6:7e:9c:a9:82:a5:90:0b:71:4b:9f:fa:1c: 73:95:fa:50:34:d8:16:ba:4e:56:2e:e9:92:2b:14: cd:5a:d9:b2:93:9d:af:4c:94:29:76:1d:22:14:c0: 2b:9a:9a:1e:e6:57:64:20:14:fa:2e:e5:40:fd:ba: 57:d8:3e:ff:e2:78:7d:bf:03:61:11:49:8d:4c:08: d3:35:f4:ad:3b:bf:4c:87:30:55:ab:4e:47:f9:95: 43:90:bd:9c:22:a9:dd:99:ab:a3:da:be:e1:8a:1a: dd:f7:28:3b:65:06:b3:85:2a:1b:7c:9d:00:5f:ac: 27:79:3b:f5:9f:db:bf:a7:17:08:ff:79:90:8f:a7: 10:cb:ca:c7:86:bb:d7:b2:f7:cd:73:9d:e7:92:3b: 0f:0b:56:ce:b7:4d:3c:5e:a1:b8:7c:4b:e3:41:1d: e3:d4:20:3b:e3:4a:f9:5d:84:6b:f7:8a:a2:ba:64: 71:00:da:8a:86:9b:a0:8e:04:88:b0:dc:53:1c:6e: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1F:12:12:49:76:BD:43:58:5B:35:DB:13:67:58:6C:63:52:13:F2 X509v3 Authority Key Identifier: keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:15:bf:02:03:85:13:a1:9e:ab:c7:b4:44:f3:b2:47:b6:22: 5f:fb:1b:70:d2:b4:ed:40:5f:05:37:01:85:5c:d9:59:97:d1: c0:77:d7:a6:c8:d4:1f:71:6e:98:66:d4:78:0d:58:96:fc:d2: 9e:b4:84:8e:d9:37:a7:77:1a:1f:62:12:c1:b1:b8:bc:16:42: 63:6d:4e:5c:2a:e9:53:1f:8b:30:10:3c:79:3f:54:35:a9:ab: 64:e5:e0:c9:63:1c:df:fc:82:86:1a:51:ca:8e:23:b9:90:7e: d9:85:70:ef:85:f1:57:bd:43:87:99:02:25:56:37:9b:0b:89: 8e:78:31:7e:f1:a2:97:30:04:e4:23:ce:6d:53:d0:5a:14:99: eb:27:c8:ed:3a:95:15:9a:ca:75:5e:03:6e:e0:cd:97:5d:66: c6:a1:64:51:8f:77:03:53:e8:db:c0:63:b7:1e:f9:d4:b7:d2: a3:dd:b0:c0:b7:37:6e:6b:69:1a:2e:33:15:8b:70:67:90:45: b4:ef:e6:f5:95:a6:52:ba:45:a4:dc:6f:ff:bb:01:24:89:df: 45:54:79:3c:fb:c6:68:88:b3:e2:79:51:d9:78:d7:1d:1d:93: 99:09:4d:5e:6a:ed:6d:04:2f:80:b8:bf:70:81:01:d1:61:b3: a8:a6:69:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULDBVDAATsWLZkt2xGbuzXJxluRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMxMjRCQ0U1QzMyMzZFREVDNzBCMzg5NzI1MUVFRTIz QjNGMUJFOTAeFw0yNTEyMjQwMjQwNTJaFw0yNTEyMjUwNTQ1NTJaMDMxMTAvBgNV BAMTKEZBMUYxMjEyNDk3NkJENDM1ODVCMzVEQjEzNjc1ODZDNjM1MjEzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFe6eHmAlHba4d0Uk3HQsjLz9 w9GG+dbx6L2pAJX9alpM7NrsCBkst/JOzqzYywx7zooMIC+8RYQd8JG5xn6cqYKl kAtxS5/6HHOV+lA02Ba6TlYu6ZIrFM1a2bKTna9MlCl2HSIUwCuamh7mV2QgFPou 5UD9ulfYPv/ieH2/A2ERSY1MCNM19K07v0yHMFWrTkf5lUOQvZwiqd2Zq6PavuGK Gt33KDtlBrOFKht8nQBfrCd5O/Wf27+nFwj/eZCPpxDLyseGu9ey981zneeSOw8L Vs63TTxeobh8S+NBHePUIDvjSvldhGv3iqK6ZHEA2oqGm6COBIiw3FMcbj5FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+h8SEkl2vUNYWzXbE2dYbGNSE/IwHwYDVR0j BBgwFoAUoxJLzlwyNu3scLOJclHu4js/G+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oy eEwvMC9BMzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzMTI0QkNFNUMzMjM2RURF QzcwQjM4OTcyNTFFRUUyM0IzRjFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUtxYkpWb2ZCZzFQN1VobW5LaGRZNXFHWlFHemduZ1pnUWF0akNjV0oyeEwvMC9B MzEyNEJDRTVDMzIzNkVERUM3MEIzODk3MjUxRUVFMjNCM0YxQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADBW/AgOFE6Geq8e0RPOyR7YiX/sbcNK07UBfBTcBhVzZWZfRwHfXpsjUH3Fu mGbUeA1YlvzSnrSEjtk3p3caH2ISwbG4vBZCY21OXCrpUx+LMBA8eT9UNamrZOXg yWMc3/yChhpRyo4juZB+2YVw74XxV71Dh5kCJVY3mwuJjngxfvGilzAE5CPObVPQ WhSZ6yfI7TqVFZrKdV4DbuDNl11mxqFkUY93A1Po28Bjtx751LfSo92wwLc3bmtp Gi4zFYtwZ5BFtO/m9ZWmUrpFpNxv/7sBJInfRVR5PPvGaIiz4nlR2XjXHR2TmQlN XmrtbQQvgLi/cIEB0WGzqKZpRA== -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:17 2025 by rpki-client