This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft File: DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft (raw, json) Hash identifier: HrkeqB1Y6IgqD5a/Y6fYPn/BNvdR656sp+3uicccDdo= Subject key identifier: 8C:9E:EB:B5:32:33:11:5A:D5:79:9D:E9:45:17:0B:25:C4:B4:47:53 Authority key identifier: DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76 Certificate issuer: /CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76 Certificate serial: 42CE5285A675CCE10EBB9929D72F7EF4E1DB98FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft Manifest number: 0243 Signing time: Mon 22 Dec 2025 13:11:04 +0000 Manifest this update: Mon 22 Dec 2025 13:06:04 +0000 Manifest next update: Tue 23 Dec 2025 14:55:04 +0000 Files and hashes: 1: 3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (hash: XhQtGkmxlIoTQ7XqEuCKGZLcMg+a7EX+70TZqKNxv0w=) 2: 323830343a326633383a3a2f33322d3438203d3e20323634383738.roa (hash: 8qCs3rHqS1/6KOvaWm8UdvtlldzimJVDXGto/kxbPrI=) 3: DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl (hash: xQ0pqgLOhFvSEV8pt8F59Iifd/54Uim8ZdPJscQYYs0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 14:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ce:52:85:a6:75:cc:e1:0e:bb:99:29:d7:2f:7e:f4:e1:db:98:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76 Validity Not Before: Dec 22 13:06:04 2025 GMT Not After : Dec 23 14:55:04 2025 GMT Subject: CN=8C9EEBB53233115AD5799DE945170B25C4B44753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:4e:a3:a5:6a:9f:35:20:26:38:f7:6f:3b: 6f:6a:95:59:67:bb:ea:ff:b7:9f:3a:1f:5f:1f:be: d0:bd:f6:dd:17:d1:54:81:ae:16:13:fd:7f:a1:27: df:33:43:1f:f5:cc:d1:04:72:5f:65:d5:2c:be:7c: 52:4b:f3:e1:c3:6d:05:02:1b:10:8f:5e:e2:6f:4f: b7:ca:6d:98:3f:75:4c:35:66:69:d5:c2:51:e9:9a: 91:5c:0f:af:f3:29:3a:10:2a:e9:fe:08:37:43:77: 40:06:a1:62:99:95:0f:67:fb:46:e9:5e:a9:c2:98: e5:de:4c:e1:ec:57:51:f7:19:5c:53:19:97:37:05: 20:80:b2:99:9b:ec:44:73:c4:43:93:f6:2a:98:94: 8c:fc:4b:9c:5d:60:fc:ad:ac:d1:17:48:9a:65:c9: 83:07:e5:6e:8a:db:89:53:1b:e4:55:86:e6:ba:74: 05:b0:cf:84:f0:6f:55:a6:d2:cb:2a:ac:90:92:c2: 1f:0a:83:83:3f:5e:f0:c0:b6:15:e2:97:e8:bc:ab: fe:fc:8d:d1:67:9b:63:78:58:0f:d7:86:66:70:0d: 91:a6:4f:44:44:01:b8:67:a8:94:55:5b:15:ac:31: 14:aa:34:f7:b9:7e:8b:d5:8a:a9:e9:56:e7:e1:4a: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:EB:B5:32:33:11:5A:D5:79:9D:E9:45:17:0B:25:C4:B4:47:53 X509v3 Authority Key Identifier: keyid:DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:97:b4:1d:ec:e7:36:d4:f2:c4:f5:09:f9:f6:5a:ae:dd: 11:b3:df:a5:35:88:ec:29:f3:b7:a8:1a:72:5a:4a:17:81:4e: e9:06:dc:7f:f6:f6:8c:ba:c7:45:6d:ee:e7:4b:48:a4:75:b0: 00:7c:3d:ae:d0:6d:6c:80:88:d7:27:bf:12:5d:50:fc:61:cd: 98:85:9c:31:79:a9:dc:2d:40:99:96:3a:b6:4a:dd:bc:13:01: fd:a1:4f:52:f7:e0:5e:0d:fd:b0:1d:65:28:bd:85:54:bb:bf: a7:ff:b3:58:70:7d:ba:0c:ef:80:25:61:ce:31:3b:b2:47:5b: f2:cb:e7:71:ab:5a:07:6f:3a:f8:73:28:ce:14:9b:6b:4a:67: 4b:cf:84:41:7a:fc:c8:c8:7b:db:08:25:ec:1f:2f:33:3e:fe: 32:2a:39:67:1c:e7:d0:61:45:9f:e9:64:1d:b0:36:1c:19:a1: 44:91:f0:e8:23:ec:d6:fa:03:bd:ec:7b:a3:33:0a:a1:ad:6e: a7:79:07:21:1f:90:28:61:4a:15:4e:a4:5f:9f:ff:31:73:4e: dd:e4:03:a6:90:3d:23:72:37:47:02:06:fd:7f:39:41:91:5e: 97:ea:a7:37:29:21:a1:fd:79:1c:fe:8d:70:a4:b7:79:17:c2: 63:52:70:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQs5ShaZ1zOEOu5kp1y9+9OHbmPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFDMEE2MjYwQjkwRUU2RjJGNjZCRkI5OThGNkQ2Mzcw QjIxOUM3NjAeFw0yNTEyMjIxMzA2MDRaFw0yNTEyMjMxNDU1MDRaMDMxMTAvBgNV BAMTKDhDOUVFQkI1MzIzMzExNUFENTc5OURFOTQ1MTcwQjI1QzRCNDQ3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpU6jpWqfNSAmOPdvO29qlVln u+r/t586H18fvtC99t0X0VSBrhYT/X+hJ98zQx/1zNEEcl9l1Sy+fFJL8+HDbQUC GxCPXuJvT7fKbZg/dUw1ZmnVwlHpmpFcD6/zKToQKun+CDdDd0AGoWKZlQ9n+0bp XqnCmOXeTOHsV1H3GVxTGZc3BSCAspmb7ERzxEOT9iqYlIz8S5xdYPytrNEXSJpl yYMH5W6K24lTG+RVhua6dAWwz4Twb1Wm0ssqrJCSwh8Kg4M/XvDAthXil+i8q/78 jdFnm2N4WA/XhmZwDZGmT0REAbhnqJRVWxWsMRSqNPe5fovViqnpVufhSg4bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjJ7rtTIzEVrVeZ3pRRcLJcS0R1MwHwYDVR0j BBgwFoAU2sCmJguQ7m8vZr+5mPbWNwshnHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWU0TlRtTHJBamd4QlpLY3RZVXpBbVFCVEUyanpqVkVqb0dtOHg1cnhX akQvMC9EQUMwQTYyNjBCOTBFRTZGMkY2NkJGQjk5OEY2RDYzNzBCMjE5Qzc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQzBBNjI2MEI5MEVFNkYy RjY2QkZCOTk4RjZENjM3MEIyMTlDNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWU0TlRtTHJBamd4QlpLY3RZVXpBbVFCVEUyanpqVkVqb0dtOHg1cnhXakQvMC9E QUMwQTYyNjBCOTBFRTZGMkY2NkJGQjk5OEY2RDYzNzBCMjE5Qzc2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUUiXtB3s5zbU8sT1Cfn2Wq7dEbPfpTWI7Cnzt6gaclpKF4FO6Qbcf/b2jLrH RW3u50tIpHWwAHw9rtBtbICI1ye/El1Q/GHNmIWcMXmp3C1AmZY6tkrdvBMB/aFP UvfgXg39sB1lKL2FVLu/p/+zWHB9ugzvgCVhzjE7skdb8svncataB286+HMozhSb a0pnS8+EQXr8yMh72wgl7B8vMz7+Mio5Zxzn0GFFn+lkHbA2HBmhRJHw6CPs1voD vex7ozMKoa1up3kHIR+QKGFKFU6kX5//MXNO3eQDppA9I3I3RwIG/X85QZFel+qn Nykhof15HP6NcKS3eRfCY1Jw4g== -----END CERTIFICATE-----Generated at Mon Dec 22 15:44:03 2025 by rpki-client