This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft File: DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft (raw, json) Hash identifier: t1vkvXK6muliB5GNQkkMPZ/Want1U/rBQZR94OBrDzM= Subject key identifier: 05:11:04:0A:F4:9F:F3:32:5A:56:D6:90:33:9D:55:AF:B1:81:03:27 Authority key identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E Certificate issuer: /CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E Certificate serial: 7A13C1A233132AFB2CB501D7FA588F951C36F09F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer Subject info access: rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft Manifest number: 0154 Signing time: Mon 22 Dec 2025 14:40:49 +0000 Manifest this update: Mon 22 Dec 2025 14:35:49 +0000 Manifest next update: Tue 23 Dec 2025 18:20:49 +0000 Files and hashes: 1: DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl (hash: RiOQ+gxcKD4LgyWQ796Yyb6PWmXSy2JyuA467DsMv48=) 2: 34352e3233392e32342e302f32322d3234203d3e20323638333734.roa (hash: pjcENXhwN39gPAIuzrYcrkt1/jTP1rUfHtlUwzsHBWs=) 3: 323830343a353033303a3a2f33322d3438203d3e20323638333734.roa (hash: bmCfoJVjmMhZ9Zxei7VwsBUkWDIqf9LkUDnbJiwOoO8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 18:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:13:c1:a2:33:13:2a:fb:2c:b5:01:d7:fa:58:8f:95:1c:36:f0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E Validity Not Before: Dec 22 14:35:49 2025 GMT Not After : Dec 23 18:20:49 2025 GMT Subject: CN=0511040AF49FF3325A56D690339D55AFB1810327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:ed:78:af:88:51:e7:61:36:7a:d2:31:a1: cd:f1:63:6a:21:c1:5c:64:f5:f7:cf:9f:e4:43:84: 23:ba:dd:d4:22:fd:3b:59:4c:2a:64:3c:91:90:c6: 7c:97:4d:23:b0:fb:60:86:18:5b:e0:12:f3:16:50: f0:7b:71:7d:7a:fd:04:51:50:3c:38:bc:1d:e1:87: ff:2f:ff:40:f5:28:c1:98:a9:99:e4:2d:ba:cd:3a: f0:52:f8:60:da:40:16:43:10:3a:3a:80:d1:b1:45: 11:f6:28:4c:31:6b:be:e0:91:fd:03:e3:cc:2d:1f: 9a:c9:26:d3:03:73:5d:09:5f:ba:3b:3b:2c:05:16: 90:dc:a9:e7:8f:c0:be:9a:dd:ca:f6:ca:e6:30:fe: 38:35:58:90:91:17:3c:16:81:37:0a:6e:b6:ae:d7: 7b:9c:a8:73:6a:ba:ac:b0:31:0e:38:16:b1:3d:2a: 90:d6:24:d0:73:bb:96:f7:16:94:a4:d1:25:c4:50: 4a:86:de:24:c1:27:91:97:eb:6d:b4:41:b6:e0:3f: e0:2c:03:73:3f:87:16:5b:94:79:f0:f8:05:a2:9d: 82:f4:f4:e7:82:38:f2:6c:ab:2b:90:e4:26:99:e7: 0d:ed:69:16:61:80:0c:ab:eb:c9:75:be:d6:5a:ef: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:11:04:0A:F4:9F:F3:32:5A:56:D6:90:33:9D:55:AF:B1:81:03:27 X509v3 Authority Key Identifier: keyid:DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c7:68:ff:ad:5f:ff:7f:10:40:5f:39:01:19:ba:bb:ab:6d: 99:72:01:cf:17:c6:bb:1f:ab:1c:c2:5a:61:1b:4d:34:10:66: 5a:41:69:0d:42:dd:cd:ea:ef:66:76:1a:df:13:ef:73:9b:57: 03:02:49:7f:cd:7f:c8:62:1b:a5:4b:45:97:cb:5a:e9:ce:39: 39:0a:c1:59:fb:8d:6c:12:1f:f6:72:0f:38:a9:77:33:92:e3: 59:85:76:a0:62:d8:db:50:e1:21:00:b7:61:15:ae:f0:c2:d8: 13:58:86:c7:d4:1a:a1:95:62:93:c9:e8:cc:1b:7d:fe:c3:24: cb:4d:df:3e:1f:fe:2d:78:af:87:cb:c3:07:27:a4:01:65:03: 13:10:a8:9d:46:2d:05:7e:09:b3:ef:7e:69:15:1e:59:04:0e: 61:76:96:c7:53:77:35:65:69:f9:3f:48:d3:d2:31:98:93:ab: af:bc:d5:c8:d5:f2:09:14:12:e4:b8:e1:e9:dc:02:e4:f8:33: b7:bf:2a:3d:a7:97:23:cc:c4:95:7d:49:53:46:c0:bb:19:38: 4b:de:48:f7:12:1c:8a:65:c6:9b:08:19:96:f3:fe:cb:37:2b: de:8a:56:2f:4c:7e:79:04:48:3b:74:13:87:df:a8:41:6f:29: 0c:1f:3a:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUehPBojMTKvsstQHX+liPlRw28J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNzhCRTMzNTAwNTdBQ0M4RkU5NkVFNUQyNEJENTc4 QTAzNDY0RTAeFw0yNTEyMjIxNDM1NDlaFw0yNTEyMjMxODIwNDlaMDMxMTAvBgNV BAMTKDA1MTEwNDBBRjQ5RkYzMzI1QTU2RDY5MDMzOUQ1NUFGQjE4MTAzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/+14r4hR52E2etIxoc3xY2oh wVxk9ffPn+RDhCO63dQi/TtZTCpkPJGQxnyXTSOw+2CGGFvgEvMWUPB7cX16/QRR UDw4vB3hh/8v/0D1KMGYqZnkLbrNOvBS+GDaQBZDEDo6gNGxRRH2KEwxa77gkf0D 48wtH5rJJtMDc10JX7o7OywFFpDcqeePwL6a3cr2yuYw/jg1WJCRFzwWgTcKbrau 13ucqHNquqywMQ44FrE9KpDWJNBzu5b3FpSk0SXEUEqG3iTBJ5GX6220QbbgP+As A3M/hxZblHnw+AWinYL09OeCOPJsqyuQ5CaZ5w3taRZhgAyr68l1vtZa74yFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBREECvSf8zJaVtaQM51Vr7GBAycwHwYDVR0j BBgwFoAU3veL4zUAV6zI/pbuXSS9V4oDRk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQU0xajJGb1pUMTR6WHlvRmdjeDhvMmRmdW5hWTJlMTdCS1cyalhjVFZ3 V00vMC9ERUY3OEJFMzM1MDA1N0FDQzhGRTk2RUU1RDI0QkQ1NzhBMDM0NjRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRjc4QkUzMzUwMDU3QUND OEZFOTZFRTVEMjRCRDU3OEEwMzQ2NEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QU0xajJGb1pUMTR6WHlvRmdjeDhvMmRmdW5hWTJlMTdCS1cyalhjVFZ3V00vMC9E RUY3OEJFMzM1MDA1N0FDQzhGRTk2RUU1RDI0QkQ1NzhBMDM0NjRFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi8do/61f/38QQF85ARm6u6ttmXIBzxfGux+rHMJaYRtNNBBmWkFpDULdzerv ZnYa3xPvc5tXAwJJf81/yGIbpUtFl8ta6c45OQrBWfuNbBIf9nIPOKl3M5LjWYV2 oGLY21DhIQC3YRWu8MLYE1iGx9QaoZVik8nozBt9/sMky03fPh/+LXivh8vDByek AWUDExConUYtBX4Js+9+aRUeWQQOYXaWx1N3NWVp+T9I09IxmJOrr7zVyNXyCRQS 5Ljh6dwC5Pgzt78qPaeXI8zElX1JU0bAuxk4S95I9xIcimXGmwgZlvP+yzcr3opW L0x+eQRIO3QTh9+oQW8pDB86WQ== -----END CERTIFICATE-----Generated at Mon Dec 22 18:42:48 2025 by rpki-client