This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft File: BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json) Hash identifier: oK3ZAVaC1O9fOIMqSBDEgWKLzMvtL/G6zn6dAww8ldA= Subject key identifier: AC:1A:B1:0C:A2:AA:E5:B6:30:3D:FD:EC:B5:48:A2:BE:A2:25:9C:A0 Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 0C7ACF50320FA7C7A24B8600F2D99AAE6B07CCFF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft Manifest number: 01DA Signing time: Sat 20 Dec 2025 23:57:03 +0000 Manifest this update: Sat 20 Dec 2025 23:52:03 +0000 Manifest next update: Mon 22 Dec 2025 00:42:03 +0000 Files and hashes: 1: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: N0IcTOYFU5ZMMu+cgyyvQqnzYkGJv2HWossKq/fnmK8=) 2: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: mPcgWOQP3Yfaj4II6jjlLcd9TZ991tq6OUlMO7aXDKs=) 3: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: r+Ce4bAI52p7w4milCYkcttrWEjX2kGjkA82VJ3Espc=) 4: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: LpZUFdp5QtcnhG/XEq0FRx2E8yWn4lVSq4AvIB5A+RQ=) 5: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: keXIpMElmj/p1Ii/+at+te+ilCZkFZnEutXTtt+hJ0U=) 6: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: 17+u0HNFwo8Q2gdhCBAuIkj02jj+cd6wojbAGTJYvRE=) 7: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: TsYJ7R2uYdoqDkyJYgjBm2JjT7NSw7n+W3TzfcsXB9I=) 8: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: 2ZOwE2PR0CMiaImusRVey0Ti2u141VZv3wxhLAy74xo=) 9: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: 84h5WIrRdNIuOAKxo5jqkxy4MZCfgun5O5sJhst6mPo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 00:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7a:cf:50:32:0f:a7:c7:a2:4b:86:00:f2:d9:9a:ae:6b:07:cc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Dec 20 23:52:03 2025 GMT Not After : Dec 22 00:42:03 2025 GMT Subject: CN=AC1AB10CA2AAE5B6303DFDECB548A2BEA2259CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:48:cd:97:5c:4f:4e:55:89:f0:59:c9:b3: 7e:22:89:38:f5:8f:2e:12:9f:2a:90:54:b2:1e:1a: d5:03:77:1f:c7:b8:27:a9:4e:a4:de:d2:85:e1:24: 29:dd:51:dc:8b:3e:59:a2:16:c2:46:74:3b:5a:a9: 70:d7:c1:f1:7c:d4:3c:26:1d:da:06:5a:af:bb:1f: 3b:d6:9a:f6:09:47:47:64:c1:61:27:b9:62:40:0e: 34:92:91:9f:68:d7:91:e5:62:30:13:09:c9:29:10: aa:48:c4:1d:04:9a:98:28:2e:b4:61:c5:81:18:f2: ad:43:10:b4:27:a1:d8:e7:0b:a6:74:04:2b:27:f2: 30:64:c7:61:56:35:f0:eb:cd:aa:96:2f:3a:50:29: b8:a6:31:5f:2d:85:f7:60:5a:b4:51:6e:b2:bc:33: c0:d7:d7:06:2d:b9:90:de:b6:fc:d3:78:53:26:02: d9:f6:c9:3f:ae:b8:15:b0:f5:e2:95:cb:58:2c:ce: 12:54:b1:db:aa:83:02:9b:53:37:da:9a:62:1b:22: 9d:26:ae:2a:c9:fe:5a:f4:20:61:13:95:4f:5c:90: cb:89:8c:04:25:72:34:8a:12:51:65:86:b1:1f:08: 7c:95:cd:c4:85:e5:be:c7:e5:6c:97:db:3e:69:b8: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:B1:0C:A2:AA:E5:B6:30:3D:FD:EC:B5:48:A2:BE:A2:25:9C:A0 X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:40:72:89:33:88:81:eb:dc:bc:e5:e1:5f:fd:ec:a6:a5: d9:5a:6e:c3:6f:78:f3:33:a6:f2:8d:07:6f:86:92:96:47:df: 21:59:9f:2a:72:ff:59:9d:cf:1e:53:76:18:75:e3:32:ac:cb: 4f:09:cc:06:8b:23:77:7f:16:bc:e1:66:99:b6:33:7d:ff:ef: 95:a1:78:8e:b4:2e:e3:2d:ff:f5:57:77:3c:60:a7:c9:56:cc: 47:6b:85:1c:2a:10:59:1a:fb:34:65:71:01:dd:65:02:bf:d1: f2:63:86:bc:f9:5b:60:4b:e8:4e:93:31:5d:8b:a4:f4:34:27: 53:34:98:a1:a0:87:9b:24:82:ab:0b:30:40:52:5f:a6:39:ad: 53:c8:1b:f1:2d:5c:34:67:c4:2e:95:47:9d:a9:07:3f:bf:1c: 43:39:b3:3d:a4:85:e2:8a:23:a3:40:fd:ec:80:bb:4a:42:d6: b4:e8:d0:8f:7f:56:69:54:f7:80:13:b2:80:50:c4:da:3f:6b: 0c:35:aa:ac:be:2f:a9:76:41:f3:74:fe:ca:6a:24:95:92:e1: 90:9e:90:d3:64:92:05:19:e5:99:3f:2c:e0:5f:58:66:da:56: de:7d:fd:8a:8d:fe:c9:b2:fa:46:89:8e:4b:8a:83:f1:d6:95: de:3b:08:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDHrPUDIPp8eiS4YA8tmarmsHzP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTEyMjAyMzUyMDNaFw0yNTEyMjIwMDQyMDNaMDMxMTAvBgNV BAMTKEFDMUFCMTBDQTJBQUU1QjYzMDNERkRFQ0I1NDhBMkJFQTIyNTlDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7EjNl1xPTlWJ8FnJs34iiTj1 jy4SnyqQVLIeGtUDdx/HuCepTqTe0oXhJCndUdyLPlmiFsJGdDtaqXDXwfF81Dwm HdoGWq+7HzvWmvYJR0dkwWEnuWJADjSSkZ9o15HlYjATCckpEKpIxB0EmpgoLrRh xYEY8q1DELQnodjnC6Z0BCsn8jBkx2FWNfDrzaqWLzpQKbimMV8thfdgWrRRbrK8 M8DX1wYtuZDetvzTeFMmAtn2yT+uuBWw9eKVy1gszhJUsduqgwKbUzfammIbIp0m rirJ/lr0IGETlU9ckMuJjAQlcjSKElFlhrEfCHyVzcSF5b7H5WyX2z5puOR5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrBqxDKKq5bYwPf3stUiivqIlnKAwHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC9C RkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl0lAcokziIHr3Lzl4V/97Kal2Vpuw2948zOm8o0Hb4aSlkffIVmfKnL/WZ3P HlN2GHXjMqzLTwnMBosjd38WvOFmmbYzff/vlaF4jrQu4y3/9Vd3PGCnyVbMR2uF HCoQWRr7NGVxAd1lAr/R8mOGvPlbYEvoTpMxXYuk9DQnUzSYoaCHmySCqwswQFJf pjmtU8gb8S1cNGfELpVHnakHP78cQzmzPaSF4oojo0D97IC7SkLWtOjQj39WaVT3 gBOygFDE2j9rDDWqrL4vqXZB83T+ymoklZLhkJ6Q02SSBRnlmT8s4F9YZtpW3n39 io3+ybL6RomOS4qD8daV3jsIkA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:15 2025 by rpki-client