This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: DBTCi9cDVgl5v1vNwZw+BtUNW9ygAcu5NiDNHBB6eYM= Subject key identifier: 3A:8F:BA:BF:A0:CA:9C:19:96:5A:D5:04:72:3D:D8:F1:80:51:21:DE Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 31699B8B40C0862D6FC464F31E4EDB2AF8DE4B3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 01A2 Signing time: Sun 21 Dec 2025 14:34:30 +0000 Manifest this update: Sun 21 Dec 2025 14:29:30 +0000 Manifest next update: Mon 22 Dec 2025 16:23:30 +0000 Files and hashes: 1: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=) 2: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=) 3: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=) 4: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: zFIcqaeeBqVV04Wx3O7ztlIO7rqOE8jaXk6MptEAOGU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 16:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:69:9b:8b:40:c0:86:2d:6f:c4:64:f3:1e:4e:db:2a:f8:de:4b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Dec 21 14:29:30 2025 GMT Not After : Dec 22 16:23:30 2025 GMT Subject: CN=3A8FBABFA0CA9C19965AD504723DD8F1805121DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:ac:d6:56:34:74:30:30:c9:a5:f2:9b:77: df:bd:9b:f7:94:19:a2:ee:89:a8:82:72:95:59:6c: 5a:35:76:e3:9e:68:ae:51:0d:29:a1:90:e6:e4:16: ff:ac:ac:95:f1:dd:16:38:f8:a2:82:55:de:99:49: 55:98:51:9e:fa:bb:38:d7:36:05:fd:9f:4f:f3:69: ef:df:fa:ba:3f:87:9d:7a:74:45:56:84:3c:21:39: 5a:de:54:db:b9:4e:54:6b:f1:cd:0c:3d:5b:a1:5c: 59:26:74:63:6f:bc:65:2b:2c:6d:ca:77:ad:98:83: 56:cc:8f:93:d9:48:a3:82:7e:22:c4:26:b6:5e:dc: b6:d5:cc:40:d7:0c:50:f0:4a:41:0e:91:02:17:f7: 2e:01:23:8c:53:c5:19:f7:06:87:82:15:49:27:55: ad:d3:ad:23:4a:b4:b9:9a:bb:08:87:79:ec:4e:e2: 88:a5:84:0e:a7:d7:6c:47:2b:32:84:97:ca:f1:8d: 63:aa:0d:a2:4a:9b:a9:c2:21:ee:05:15:86:51:ae: 2b:12:34:9c:96:dd:7e:fd:f4:a6:df:2e:1d:c2:f3: 46:49:34:a9:70:13:61:71:fb:23:c3:2d:bd:01:ea: 64:aa:82:ab:bf:66:66:69:1b:62:12:c2:91:aa:60: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8F:BA:BF:A0:CA:9C:19:96:5A:D5:04:72:3D:D8:F1:80:51:21:DE X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:16:cc:07:e3:3a:04:dc:07:5b:cf:eb:52:ed:75:03:da:29: 5f:3a:7e:6c:9b:2c:c2:a4:9f:54:20:49:8d:98:7d:40:a2:84: a1:5a:2b:90:c6:5b:bf:d2:3c:c9:e6:62:6c:a2:27:b5:67:30: ed:7a:08:7b:34:2b:0b:c2:74:b1:27:28:60:5a:f8:c6:bc:22: 6c:62:8e:25:94:59:1b:d9:a3:04:b8:bc:fa:37:d8:e6:a3:bb: e1:6e:3a:03:76:aa:95:0f:17:ae:5a:52:78:4b:8e:16:f9:fc: 97:cf:45:0d:15:78:86:c0:0a:79:be:15:e2:3d:a2:52:ed:16: 53:ac:02:6e:bb:5d:dd:6f:26:7d:22:7b:fd:c8:55:96:da:e1: 55:52:9a:3d:9f:80:ad:83:49:bf:78:48:47:ce:4d:b9:73:3e: be:a8:05:0f:fa:9e:61:a0:f5:79:2e:cb:87:83:7d:a5:29:6d: c2:6f:14:3e:d3:ff:64:26:12:3a:61:8e:d5:66:80:15:be:46: d5:ea:28:ad:4e:3b:19:47:2a:41:78:2c:23:6b:ea:25:18:88: 2f:77:39:7c:75:76:66:cd:0b:22:1c:69:9f:56:dc:32:82:99: 31:19:25:92:89:32:98:b2:67:29:51:d2:01:cc:29:b4:dd:ed: 2f:eb:51:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMWmbi0DAhi1vxGTzHk7bKvjeSzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNTEyMjExNDI5MzBaFw0yNTEyMjIxNjIzMzBaMDMxMTAvBgNV BAMTKDNBOEZCQUJGQTBDQTlDMTk5NjVBRDUwNDcyM0REOEYxODA1MTIxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwqzWVjR0MDDJpfKbd9+9m/eU GaLuiaiCcpVZbFo1duOeaK5RDSmhkObkFv+srJXx3RY4+KKCVd6ZSVWYUZ76uzjX NgX9n0/zae/f+ro/h516dEVWhDwhOVreVNu5TlRr8c0MPVuhXFkmdGNvvGUrLG3K d62Yg1bMj5PZSKOCfiLEJrZe3LbVzEDXDFDwSkEOkQIX9y4BI4xTxRn3BoeCFUkn Va3TrSNKtLmauwiHeexO4oilhA6n12xHKzKEl8rxjWOqDaJKm6nCIe4FFYZRrisS NJyW3X799KbfLh3C80ZJNKlwE2Fx+yPDLb0B6mSqgqu/ZmZpG2ISwpGqYIKjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOo+6v6DKnBmWWtUEcj3Y8YBRId4wHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANBbMB+M6BNwHW8/rUu11A9opXzp+bJsswqSfVCBJjZh9QKKEoVorkMZbv9I8 yeZibKIntWcw7XoIezQrC8J0sScoYFr4xrwibGKOJZRZG9mjBLi8+jfY5qO74W46 A3aqlQ8XrlpSeEuOFvn8l89FDRV4hsAKeb4V4j2iUu0WU6wCbrtd3W8mfSJ7/chV ltrhVVKaPZ+ArYNJv3hIR85NuXM+vqgFD/qeYaD1eS7Lh4N9pSltwm8UPtP/ZCYS OmGO1WaAFb5G1eoorU47GUcqQXgsI2vqJRiIL3c5fHV2Zs0LIhxpn1bcMoKZMRkl kokymLJnKVHSAcwptN3tL+tRmg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:38:50 2025 by rpki-client