This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft File: BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft (raw, json) Hash identifier: /Oj0EdECejwLmyXgTBYwoehF6AKJT/eU/aCl84Eo3Yk= Subject key identifier: A0:A9:C3:35:40:4D:51:DE:FF:EB:92:91:6D:15:A7:2D:73:DD:57:80 Authority key identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66 Certificate issuer: /CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66 Certificate serial: 686E98ECEAA40B9BFDAD44E9FFDD805BFAC09399 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer Subject info access: rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft Manifest number: 0338 Signing time: Fri 19 Dec 2025 21:25:13 +0000 Manifest this update: Fri 19 Dec 2025 21:20:13 +0000 Manifest next update: Sun 21 Dec 2025 00:11:13 +0000 Files and hashes: 1: 323830343a356537343a3a2f33322d3438203d3e20323639303334.roa (hash: g5D87ZyR5+oEnw5HGZM3RLvuHcE6x5XcYymV/DN7vo0=) 2: BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl (hash: HTMmXW1RRUXl8F4CacEAZPIm/4ejckDChkZ/1bzJ6Uw=) 3: 34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa (hash: EnAeuMQzpgwCR2kLJnXou1nYC+5EVKaOhA2hnQqK9us=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 00:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6e:98:ec:ea:a4:0b:9b:fd:ad:44:e9:ff:dd:80:5b:fa:c0:93:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66 Validity Not Before: Dec 19 21:20:13 2025 GMT Not After : Dec 21 00:11:13 2025 GMT Subject: CN=A0A9C335404D51DEFFEB92916D15A72D73DD5780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:90:c0:38:64:70:3b:f9:e3:2a:1e:0c:71:6c: 25:00:2b:08:cf:20:8d:f9:10:ff:78:2f:4d:fe:16: e6:c3:b3:ab:b4:51:b8:3f:43:c8:c6:d5:0b:00:65: 37:93:ed:9c:74:6d:64:3c:75:b6:e8:f5:9e:28:1b: fc:67:cc:25:0b:7e:73:02:ce:ff:c0:86:60:47:f6: 2e:32:2b:c0:7d:28:76:1e:02:40:c6:6b:30:22:21: f6:33:21:1f:a7:42:c4:aa:6c:2c:c6:e0:56:92:53: 24:34:31:f6:79:7e:74:0a:20:d0:cd:f6:46:51:c0: 8a:3b:42:b3:2c:ed:52:b0:c4:b1:af:3e:dd:77:79: 2b:5b:ca:18:62:92:e2:32:ad:67:45:51:83:58:c2: 16:6e:65:15:d9:65:aa:ed:e2:64:bd:75:46:28:5e: f5:e9:23:35:2e:43:8b:ad:c6:19:db:07:67:2a:09: b0:a0:19:7d:08:58:78:b9:a7:98:d1:7a:18:ab:a8: 30:2b:b7:a5:b7:9b:30:13:a4:93:77:50:86:17:89: 79:b9:40:11:b1:4b:6e:d6:03:13:9f:3c:6c:28:33: 3a:0c:27:e4:7d:7b:e5:9e:0e:5b:b8:8a:52:bc:f5: d3:96:2d:95:0d:bb:87:52:9e:32:54:00:fa:22:38: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:C3:35:40:4D:51:DE:FF:EB:92:91:6D:15:A7:2D:73:DD:57:80 X509v3 Authority Key Identifier: keyid:BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:16:b4:59:52:b6:31:71:34:0c:03:cf:19:55:be:e5:b2:23: d2:81:79:39:07:57:b4:f8:c4:df:37:86:38:f6:80:2a:ea:f3: b2:2c:13:54:2d:72:39:da:36:7c:63:e2:d7:1a:43:55:0b:c4: 91:c0:d1:83:18:fd:ca:d3:b6:cf:6d:92:48:62:ee:32:fd:47: ed:9d:a2:c4:06:f9:6e:b4:02:0d:1b:e6:3d:bb:54:93:58:d2: 3e:d1:c2:be:a6:31:0b:e8:65:96:29:c6:d7:7c:e3:27:de:4a: 9e:ef:b2:30:86:3c:4e:07:0e:3b:30:64:09:13:12:19:e8:be: 0d:c3:e1:6f:98:47:c6:fb:8c:39:91:00:6e:48:c1:1b:e3:29: 91:bb:28:b2:94:a7:22:05:2d:28:fe:3c:ab:10:f8:9f:08:da: c4:32:69:31:c0:66:26:13:6f:52:31:6d:15:cf:b8:83:76:72: e2:1b:ca:98:be:7e:fe:7a:f0:4a:1c:1a:9a:70:31:6a:34:91: a0:88:65:fd:bd:69:a7:37:fa:a2:05:88:b3:7d:b9:7f:3e:90: 1b:08:de:e5:17:5a:2e:b3:bf:a7:3b:64:e7:59:4b:74:e5:d2: 0f:1c:cf:80:ff:10:09:ef:44:d3:df:c9:3d:38:1f:aa:9d:25: 5a:f2:00:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaG6Y7OqkC5v9rUTp/92AW/rAk5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDODJERjFCRTYwQ0VBRkVGNUU5ODcxMUFDQUE3MUU5 QTBCNkY2NjAeFw0yNTEyMTkyMTIwMTNaFw0yNTEyMjEwMDExMTNaMDMxMTAvBgNV BAMTKEEwQTlDMzM1NDA0RDUxREVGRkVCOTI5MTZEMTVBNzJENzNERDU3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4kMA4ZHA7+eMqHgxxbCUAKwjP II35EP94L03+FubDs6u0Ubg/Q8jG1QsAZTeT7Zx0bWQ8dbbo9Z4oG/xnzCULfnMC zv/AhmBH9i4yK8B9KHYeAkDGazAiIfYzIR+nQsSqbCzG4FaSUyQ0MfZ5fnQKINDN 9kZRwIo7QrMs7VKwxLGvPt13eStbyhhikuIyrWdFUYNYwhZuZRXZZart4mS9dUYo XvXpIzUuQ4utxhnbB2cqCbCgGX0IWHi5p5jRehirqDArt6W3mzATpJN3UIYXiXm5 QBGxS27WAxOfPGwoMzoMJ+R9e+WeDlu4ilK89dOWLZUNu4dSnjJUAPoiON8pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoKnDNUBNUd7/65KRbRWnLXPdV4AwHwYDVR0j BBgwFoAUvcgt8b5gzq/vXphxGsqnHpoLb2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHdnNnpueXEyS2tHdFFBa3VVcm5TVHZTc2tSR3NNZnJQclNicHdqSExH M3AvMS9CREM4MkRGMUJFNjBDRUFGRUY1RTk4NzExQUNBQTcxRTlBMEI2RjY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzgyREYxQkU2MENFQUZF RjVFOTg3MTFBQ0FBNzFFOUEwQjZGNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHdnNnpueXEyS2tHdFFBa3VVcm5TVHZTc2tSR3NNZnJQclNicHdqSExHM3AvMS9C REM4MkRGMUJFNjBDRUFGRUY1RTk4NzExQUNBQTcxRTlBMEI2RjY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZBa0WVK2MXE0DAPPGVW+5bIj0oF5OQdXtPjE3zeGOPaAKurzsiwTVC1yOdo2 fGPi1xpDVQvEkcDRgxj9ytO2z22SSGLuMv1H7Z2ixAb5brQCDRvmPbtUk1jSPtHC vqYxC+hllinG13zjJ95Knu+yMIY8TgcOOzBkCRMSGei+DcPhb5hHxvuMOZEAbkjB G+MpkbsospSnIgUtKP48qxD4nwjaxDJpMcBmJhNvUjFtFc+4g3Zy4hvKmL5+/nrw ShwamnAxajSRoIhl/b1ppzf6ogWIs325fz6QGwje5RdaLrO/pztk51lLdOXSDxzP gP8QCe9E09/JPTgfqp0lWvIA+g== -----END CERTIFICATE-----Generated at Sat Dec 20 12:45:12 2025 by rpki-client