This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft File: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json) Hash identifier: cCc0heTlmD0m68JsFfwX3khhkjyMaeJEhoOeYzrayqU= Subject key identifier: BD:13:4E:C7:F8:61:F5:E8:DE:E7:9A:E5:F9:B6:F1:98:72:92:D2:C5 Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 4D49B58C5F6F1818FFF65D1FE0B4E9D83F37E929 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft Manifest number: 01F4 Signing time: Fri 19 Dec 2025 20:04:26 +0000 Manifest this update: Fri 19 Dec 2025 19:59:26 +0000 Manifest next update: Sat 20 Dec 2025 23:30:26 +0000 Files and hashes: 1: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=) 2: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=) 3: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=) 4: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=) 5: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=) 6: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=) 7: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: kP9yFv8cLQK4Mz48X8LIqejq72ERMkgKsiVEFity7U8=) 8: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 23:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:49:b5:8c:5f:6f:18:18:ff:f6:5d:1f:e0:b4:e9:d8:3f:37:e9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Dec 19 19:59:26 2025 GMT Not After : Dec 20 23:30:26 2025 GMT Subject: CN=BD134EC7F861F5E8DEE79AE5F9B6F1987292D2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:7c:22:ed:76:80:04:13:8f:94:c0:02:9d: f0:35:d2:d6:36:f3:85:20:b9:09:21:3c:3e:0e:ef: e9:d0:21:d3:ad:7b:78:b2:10:69:b6:c4:40:a6:33: 2c:c4:99:30:3e:ae:ac:97:6b:c2:da:1b:f2:96:d0: 9b:bc:cd:6d:cc:17:7d:4d:e2:60:58:66:71:5c:cc: 42:b2:67:bb:d2:5f:98:d5:b7:3e:4f:9e:62:e1:e4: 42:a7:3b:04:c9:5b:2b:72:88:65:28:46:b2:f7:dd: c2:77:fd:6d:0d:fb:89:59:e2:59:d7:e3:d5:44:b2: f4:2c:5d:06:7e:19:02:e4:9d:65:d1:04:46:cc:25: 9d:88:e7:00:fd:89:e4:3d:2a:a4:0f:37:42:a4:41: 50:f3:9a:f8:24:81:36:c3:d1:1e:56:18:25:54:83: 12:a4:63:5b:4a:ea:61:68:13:c8:d8:d4:c9:e0:37: 48:bc:5b:94:39:a8:ff:70:8d:a8:16:83:60:11:13: 47:c4:8b:94:3e:d3:57:ab:1e:bf:27:f3:a4:e9:79: 03:3e:7e:b8:a9:30:49:f8:91:db:10:5d:19:81:5a: f7:41:82:54:52:c1:99:ab:b2:6a:cc:86:37:c3:bc: ae:01:ea:a2:d9:07:b3:bf:d2:ce:bd:c7:bc:01:f1: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:13:4E:C7:F8:61:F5:E8:DE:E7:9A:E5:F9:B6:F1:98:72:92:D2:C5 X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a6:d7:c6:13:7b:a3:87:17:dc:3d:60:c2:c8:25:a7:f8:48: 61:e6:a4:5a:d2:44:4f:47:75:0a:d2:e0:4c:20:68:72:ab:37: 55:ee:d7:ee:29:90:da:bc:f3:2c:0c:b2:08:b4:2a:32:86:64: d3:3f:94:54:20:0f:0a:9d:c8:9e:80:4e:d6:0d:dc:24:c8:83: 84:dd:1e:be:3e:4e:2f:39:53:8a:bd:31:0a:a4:bf:72:39:96: c2:4f:83:bc:4f:ec:ec:17:08:87:ac:d8:b8:66:a0:2a:43:7a: f5:28:8b:f1:81:a9:d4:af:68:3d:65:84:6f:7a:45:5d:39:31: ed:5f:40:97:36:9e:ee:b0:68:90:ff:90:84:f1:e9:52:4c:a3: cd:e9:68:be:40:89:f4:1b:be:f7:f3:6e:14:19:d8:d0:27:74: 41:78:89:7d:e2:bf:6a:b6:e3:41:88:35:e4:81:d4:0d:11:b6: 8e:d9:c8:5a:62:b9:e3:ca:33:55:c8:c7:72:ef:46:f9:1c:5f: e5:bb:65:4d:8c:3c:86:10:5d:1c:c3:cc:e6:f5:81:ed:84:1d: 9d:6d:3f:cc:01:d1:fa:ef:1f:90:74:30:2a:78:7e:3a:12:a3: f5:9b:18:f5:5d:09:c7:5a:67:79:aa:d5:82:12:1f:10:e5:6c: 96:01:bf:f1 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTUm1jF9vGBj/9l0f4LTp2D836SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNTEyMTkxOTU5MjZaFw0yNTEyMjAyMzMwMjZaMDMxMTAvBgNV BAMTKEJEMTM0RUM3Rjg2MUY1RThERUU3OUFFNUY5QjZGMTk4NzI5MkQyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFE3wi7XaABBOPlMACnfA10tY2 84UguQkhPD4O7+nQIdOte3iyEGm2xECmMyzEmTA+rqyXa8LaG/KW0Ju8zW3MF31N 4mBYZnFczEKyZ7vSX5jVtz5PnmLh5EKnOwTJWytyiGUoRrL33cJ3/W0N+4lZ4lnX 49VEsvQsXQZ+GQLknWXRBEbMJZ2I5wD9ieQ9KqQPN0KkQVDzmvgkgTbD0R5WGCVU gxKkY1tK6mFoE8jY1MngN0i8W5Q5qP9wjagWg2ARE0fEi5Q+01erHr8n86TpeQM+ fripMEn4kdsQXRmBWvdBglRSwZmrsmrMhjfDvK4B6qLZB7O/0s69x7wB8TUBAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUvRNOx/hh9eje55rl+bbxmHKS0sUwHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2dF V1Q4YTRHZWNzMmZZNTZxUWQ5aTFVcktUbmVkeXFMWnNSZVlqdVh3NGUvMC8zQjYw QzAzQzA4MzQ5ODQ1NzBFNThEQjlCREU1RDNERDk3NkIwNzE3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ZabXxhN7o4cX3D1gwsglp/hIYeakWtJET0d1CtLgTCBocqs3Ve7X7imQ2rzzLAyy CLQqMoZk0z+UVCAPCp3InoBO1g3cJMiDhN0evj5OLzlTir0xCqS/cjmWwk+DvE/s 7BcIh6zYuGagKkN69SiL8YGp1K9oPWWEb3pFXTkx7V9Alzae7rBokP+QhPHpUkyj zelovkCJ9Bu+9/NuFBnY0Cd0QXiJfeK/arbjQYg15IHUDRG2jtnIWmK548ozVcjH cu9G+Rxf5btlTYw8hhBdHMPM5vWB7YQdnW0/zAHR+u8fkHQwKnh+OhKj9ZsY9V0J x1pnearVghIfEOVslgG/8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:24 2025 by rpki-client