This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft File: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json) Hash identifier: 4/cEqElGl7r4ercDQ2VLhT9+3Bfw9q3sYyMusjjPHYA= Subject key identifier: BA:20:66:C7:F7:49:F6:32:D3:1B:77:54:0B:C3:C3:38:87:B3:A9:97 Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Certificate serial: 4060EBA173F695C8DEF9ABC527D259AC265D33CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft Manifest number: 04 Signing time: Tue 23 Dec 2025 13:21:19 +0000 Manifest this update: Tue 23 Dec 2025 13:16:19 +0000 Manifest next update: Wed 24 Dec 2025 15:51:19 +0000 Files and hashes: 1: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: CWc0oSvH4dJsr6zVOqiNY14yfinxLP+obcxKyMDM7+U=) 2: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=) 3: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 15:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:60:eb:a1:73:f6:95:c8:de:f9:ab:c5:27:d2:59:ac:26:5d:33:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Validity Not Before: Dec 23 13:16:19 2025 GMT Not After : Dec 24 15:51:19 2025 GMT Subject: CN=BA2066C7F749F632D31B77540BC3C33887B3A997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:cb:3c:a0:4e:6b:9f:85:72:62:89:f3:f5: a3:42:52:6f:40:2f:d1:33:83:ef:02:33:1d:6b:02: 61:b6:36:2f:64:c3:ea:b1:10:f9:4d:45:96:3d:94: 2e:56:90:6b:51:ff:a5:c1:1c:e3:61:ce:e0:ea:24: f2:93:15:29:78:dc:03:10:cd:6d:29:0d:a8:e0:b2: b9:54:13:d7:8d:f9:38:c6:fd:f7:03:07:ad:71:32: 81:f7:66:e1:a1:eb:28:ea:c3:47:c1:68:c8:ff:a0: 23:a1:6f:b7:13:65:51:c2:e3:3a:77:e8:2b:4a:e6: f8:d5:67:b2:2b:e8:ee:0e:af:55:06:33:2a:e3:58: 10:8f:1c:97:e4:02:79:33:51:da:6f:1d:8a:0c:ac: b5:42:81:14:fd:7c:b6:d6:bb:be:6b:05:d0:ff:cc: 68:bd:09:60:a2:a3:98:b3:67:a4:1b:f8:61:fc:bb: d4:25:e9:b1:c1:33:4f:8e:4c:c9:d3:3a:7c:10:ac: f6:1b:79:c1:2d:f6:e7:0f:1f:43:0c:72:6e:b0:8b: 4c:f2:c1:cb:77:89:83:c9:e7:64:bb:6e:ea:ea:27: a8:19:9e:e3:64:2e:9d:76:3b:bb:1c:e9:9b:45:f8: b8:ad:91:23:c0:38:4a:e9:07:07:42:51:f2:ed:da: 43:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:20:66:C7:F7:49:F6:32:D3:1B:77:54:0B:C3:C3:38:87:B3:A9:97 X509v3 Authority Key Identifier: keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:d1:c2:4b:dc:c4:44:51:eb:c8:c9:7d:c2:fa:6f:43:f3: 9a:71:03:c8:81:a3:f4:41:6a:60:1b:a4:9f:b2:c8:72:66:18: 64:0d:eb:99:62:21:7e:1f:06:49:32:43:88:cd:14:d7:eb:b4: bc:0d:c0:de:5e:93:9d:10:12:20:2b:40:5a:11:78:cc:ee:9e: fe:fd:2e:86:ee:b9:3c:40:55:c1:88:aa:3b:5f:e1:41:75:76: 87:b7:80:6f:bd:5f:61:bd:d4:a9:72:7c:d3:d6:03:0a:92:ef: 30:75:12:36:31:d6:ce:fc:0a:4b:22:6d:57:2d:62:0e:4f:a0: c0:f8:9c:40:03:61:68:be:4a:72:d2:e0:be:95:cb:90:41:e7: 1e:d2:1c:5f:a8:57:04:37:29:8f:c9:0f:85:3f:49:af:91:60: 79:55:ad:64:c8:73:57:17:97:cd:99:87:1d:98:cc:32:ba:99: 7e:54:02:23:77:2d:51:d2:a7:5c:62:55:2b:d8:86:05:06:c6: d4:3f:7a:1b:62:d1:02:fa:b0:63:66:61:81:bd:1c:79:d7:87: 9e:ce:74:91:65:e7:bf:bf:3c:f6:60:a9:2e:43:a9:ea:1e:27: 68:e6:18:63:69:71:87:12:23:8c:d1:c0:65:d0:83:14:f1:de: ac:47:e8:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQGDroXP2lcje+avFJ9JZrCZdM88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF QjkxQTA3QTAeFw0yNTEyMjMxMzE2MTlaFw0yNTEyMjQxNTUxMTlaMDMxMTAvBgNV BAMTKEJBMjA2NkM3Rjc0OUY2MzJEMzFCNzc1NDBCQzNDMzM4ODdCM0E5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn08s8oE5rn4VyYonz9aNCUm9A L9Ezg+8CMx1rAmG2Ni9kw+qxEPlNRZY9lC5WkGtR/6XBHONhzuDqJPKTFSl43AMQ zW0pDajgsrlUE9eN+TjG/fcDB61xMoH3ZuGh6yjqw0fBaMj/oCOhb7cTZVHC4zp3 6CtK5vjVZ7Ir6O4Or1UGMyrjWBCPHJfkAnkzUdpvHYoMrLVCgRT9fLbWu75rBdD/ zGi9CWCio5izZ6Qb+GH8u9Ql6bHBM0+OTMnTOnwQrPYbecEt9ucPH0MMcm6wi0zy wct3iYPJ52S7burqJ6gZnuNkLp12O7sc6ZtF+LitkSPAOErpBwdCUfLt2kMxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuiBmx/dJ9jLTG3dUC8PDOIezqZcwHwYDVR0j BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMC9B RkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHw3RwkvcxERR68jJfcL6b0PzmnEDyIGj9EFqYBukn7LIcmYYZA3rmWIhfh8G STJDiM0U1+u0vA3A3l6TnRASICtAWhF4zO6e/v0uhu65PEBVwYiqO1/hQXV2h7eA b71fYb3UqXJ809YDCpLvMHUSNjHWzvwKSyJtVy1iDk+gwPicQANhaL5KctLgvpXL kEHnHtIcX6hXBDcpj8kPhT9Jr5FgeVWtZMhzVxeXzZmHHZjMMrqZflQCI3ctUdKn XGJVK9iGBQbG1D96G2LRAvqwY2Zhgb0cedeHns50kWXnv7889mCpLkOp6h4naOYY Y2lxhxIjjNHAZdCDFPHerEfolA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:49:13 2025 by rpki-client