This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft File: D01D2EC076BDA62D438B972886851503EED04B2F.mft (raw, json) Hash identifier: PwHLsAQLhR9nolQjDxbrWRsv5XUr+eCzYsujS+F/Qqg= Subject key identifier: 90:1D:0C:B3:F7:7F:A1:2B:00:6C:3D:16:8A:3A:79:92:7B:4A:F5:32 Authority key identifier: D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F Certificate issuer: /CN=D01D2EC076BDA62D438B972886851503EED04B2F Certificate serial: 4B4729756EEB4E8823B4C4049B7D067F8366B811 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft Manifest number: 77 Signing time: Sat 20 Dec 2025 12:30:24 +0000 Manifest this update: Sat 20 Dec 2025 12:25:24 +0000 Manifest next update: Sun 21 Dec 2025 12:55:24 +0000 Files and hashes: 1: D01D2EC076BDA62D438B972886851503EED04B2F.crl (hash: pC8zjiQIdnVEx+n1tI36D+MowfQal/z5S8mKzLRhKHw=) 2: 34352e3233372e3230342e302f32322d3234203d3e2030.roa (hash: kUcj68eyBC5ukf19L72YnNZ7Sd6sAZ16sWy9SBGoI10=) 3: 323830343a346565383a3a2f33322d3438203d3e2030.roa (hash: 2sP6uFKh/qzEQUnmI2XBkO1+/mEh+lqAHdRmfXyf1Vc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 12:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:47:29:75:6e:eb:4e:88:23:b4:c4:04:9b:7d:06:7f:83:66:b8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D01D2EC076BDA62D438B972886851503EED04B2F Validity Not Before: Dec 20 12:25:24 2025 GMT Not After : Dec 21 12:55:24 2025 GMT Subject: CN=901D0CB3F77FA12B006C3D168A3A79927B4AF532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:95:63:4c:f5:77:d8:5c:d0:95:d3:93:15: 10:a4:38:30:ea:8a:6c:c9:03:79:54:71:0f:7f:39: 55:bc:aa:f7:ae:2c:eb:71:d5:22:ab:29:67:c9:66: 69:55:45:d8:48:5f:05:8d:9a:a7:e8:3b:34:38:49: b0:34:1e:b0:42:8b:4b:7e:00:19:7a:d2:fd:7c:5f: 18:50:ec:bf:d2:07:da:cb:bf:f7:f4:47:0b:8b:dc: fc:ce:08:e6:62:fb:38:7d:82:cb:af:44:18:95:1a: 25:b4:03:79:0b:c3:04:c4:f7:5e:78:46:e2:ea:91: d1:c8:48:18:d6:d4:c0:46:83:33:62:ea:3c:e6:b7: 6b:22:2e:73:0c:4a:84:71:55:f8:49:63:0d:c3:ee: c7:7f:41:08:63:be:ae:37:94:be:4d:f1:5a:31:37: 30:68:db:ef:95:cf:f3:3d:aa:5d:8c:a0:6e:4e:86: ef:a4:e3:4a:9d:63:61:09:1a:d0:be:fd:ed:4c:01: 3f:7b:a0:2a:ee:0e:fd:e0:0f:0c:45:17:e6:b7:ae: 59:88:d4:32:2c:e9:19:1d:61:e1:41:da:e7:f0:00: 48:50:99:bb:f7:ab:6e:44:66:70:21:f9:a4:0a:32: f2:b9:ff:4f:bf:05:4c:5c:97:cf:a2:38:25:08:28: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:0C:B3:F7:7F:A1:2B:00:6C:3D:16:8A:3A:79:92:7B:4A:F5:32 X509v3 Authority Key Identifier: keyid:D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:84:89:f0:b2:da:a5:80:13:f2:b0:f0:23:a6:0d:aa:bd:99: 4f:08:15:4a:4b:ba:5c:c8:3b:df:37:f7:c8:1f:c3:8b:bf:93: 8c:b3:c2:71:e9:6f:c0:24:00:47:2a:72:38:14:48:dc:4b:d7: 97:eb:bc:16:32:94:a6:6e:fa:69:4d:a9:33:f3:ee:b8:83:93: fc:37:69:4d:ad:d6:ec:d5:d2:23:10:ef:be:c1:f6:44:4d:fa: 90:5c:e6:39:f9:ea:2b:aa:dd:d8:18:b4:42:76:8d:86:09:62: 25:c0:c7:72:38:7e:2d:a0:9d:16:2c:67:f0:ce:33:0b:70:74: 05:c3:8c:14:ba:0a:af:db:3a:b4:17:60:ec:1e:aa:5a:d9:14: 1f:21:2e:f5:4f:5a:1c:99:ea:2f:ae:86:b2:a7:93:76:73:df: 2d:ae:c0:c7:59:fe:b7:f2:58:3a:f1:50:57:bf:b5:52:e9:7e: 55:a2:83:e5:ca:67:17:05:44:d2:9d:ae:41:57:bf:c2:ab:d5: b6:27:d2:30:83:5b:30:3a:f9:ba:b8:1b:f1:d5:38:55:5d:b9: f6:5c:00:a1:ea:85:20:a0:b1:21:b5:cd:9a:8b:86:fa:15:76: 81:25:95:c3:41:9f:d3:16:ad:ed:8c:e6:3f:fc:e2:3b:e8:62: 6a:9a:22:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS0cpdW7rTogjtMQEm30Gf4NmuBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxRDJFQzA3NkJEQTYyRDQzOEI5NzI4ODY4NTE1MDNF RUQwNEIyRjAeFw0yNTEyMjAxMjI1MjRaFw0yNTEyMjExMjU1MjRaMDMxMTAvBgNV BAMTKDkwMUQwQ0IzRjc3RkExMkIwMDZDM0QxNjhBM0E3OTkyN0I0QUY1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9ZVjTPV32FzQldOTFRCkODDq imzJA3lUcQ9/OVW8qveuLOtx1SKrKWfJZmlVRdhIXwWNmqfoOzQ4SbA0HrBCi0t+ ABl60v18XxhQ7L/SB9rLv/f0RwuL3PzOCOZi+zh9gsuvRBiVGiW0A3kLwwTE9154 RuLqkdHISBjW1MBGgzNi6jzmt2siLnMMSoRxVfhJYw3D7sd/QQhjvq43lL5N8Vox NzBo2++Vz/M9ql2MoG5Ohu+k40qdY2EJGtC+/e1MAT97oCruDv3gDwxFF+a3rlmI 1DIs6RkdYeFB2ufwAEhQmbv3q25EZnAh+aQKMvK5/0+/BUxcl8+iOCUIKO29AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkB0Ms/d/oSsAbD0Wijp5kntK9TIwHwYDVR0j BBgwFoAU0B0uwHa9pi1Di5cohoUVA+7QSy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEFQTFdoaWhrblBVdktpY3JGbzJ5UUxiZ1o0Y3hMSFhZd2tQVUI2ZW5i M2IvMC9EMDFEMkVDMDc2QkRBNjJENDM4Qjk3Mjg4Njg1MTUwM0VFRDA0QjJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMUQyRUMwNzZCREE2MkQ0 MzhCOTcyODg2ODUxNTAzRUVEMDRCMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEFQTFdoaWhrblBVdktpY3JGbzJ5UUxiZ1o0Y3hMSFhZd2tQVUI2ZW5iM2IvMC9E MDFEMkVDMDc2QkRBNjJENDM4Qjk3Mjg4Njg1MTUwM0VFRDA0QjJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS4SJ8LLapYAT8rDwI6YNqr2ZTwgVSku6XMg73zf3yB/Di7+TjLPCcelvwCQA RypyOBRI3EvXl+u8FjKUpm76aU2pM/PuuIOT/DdpTa3W7NXSIxDvvsH2RE36kFzm OfnqK6rd2Bi0QnaNhgliJcDHcjh+LaCdFixn8M4zC3B0BcOMFLoKr9s6tBdg7B6q WtkUHyEu9U9aHJnqL66GsqeTdnPfLa7Ax1n+t/JYOvFQV7+1Uul+VaKD5cpnFwVE 0p2uQVe/wqvVtifSMINbMDr5urgb8dU4VV259lwAoeqFIKCxIbXNmouG+hV2gSWV w0Gf0xat7YzmP/ziO+hiapoi5A== -----END CERTIFICATE-----Generated at Sat Dec 20 15:14:40 2025 by rpki-client