This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft File: BD11125724CB8C5430E605E8628C6235B0ECD037.mft (raw, json) Hash identifier: pqPvDeuzdhWO9noqdPtuG/sIkRqwqgAYrehQwVFhUmE= Subject key identifier: 04:5D:02:B8:70:98:D1:4A:4E:7E:1F:AC:E2:96:F8:8E:CE:38:91:D9 Authority key identifier: BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37 Certificate issuer: /CN=BD11125724CB8C5430E605E8628C6235B0ECD037 Certificate serial: 054068C7C4B73770A3DD175CAE90DC0F5722FD4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer Subject info access: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft Manifest number: 0152 Signing time: Thu 25 Dec 2025 02:10:28 +0000 Manifest this update: Thu 25 Dec 2025 02:05:24 +0000 Manifest next update: Fri 26 Dec 2025 03:25:24 +0000 Files and hashes: 1: 3137372e35322e33322e302f32322d3332203d3e20323632343336.roa (hash: RtrsE+xGCCVr2chEHvLdQ7AT5f/sRQG9Zyqj0JzNMs0=) 2: 3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa (hash: +AusLg2SKOw9O5wiWzX6vgr5NojjKfN8e30wCraIzYo=) 3: BD11125724CB8C5430E605E8628C6235B0ECD037.crl (hash: 0VpSytZLuy8hxWeH1hwIP9kQjVFwGH8idbCevZ3BpWU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 26 Dec 2025 03:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:40:68:c7:c4:b7:37:70:a3:dd:17:5c:ae:90:dc:0f:57:22:fd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD11125724CB8C5430E605E8628C6235B0ECD037 Validity Not Before: Dec 25 02:05:24 2025 GMT Not After : Dec 26 03:25:24 2025 GMT Subject: CN=045D02B87098D14A4E7E1FACE296F88ECE3891D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:f2:28:70:16:93:3e:94:57:9d:dc:5f:6b: 7c:61:f6:c2:14:ea:6f:11:0a:4c:31:12:b2:b0:c0: f3:ec:b8:cb:f6:55:e6:13:b6:d1:97:f6:8c:86:92: 3c:f1:ea:1b:b6:e4:17:04:cb:6c:1e:e0:8e:b7:b8: 57:fb:59:24:5a:e0:b5:48:a4:d4:8a:65:0c:f7:da: d4:70:d6:48:07:c7:5f:8f:37:1d:67:e2:40:49:79: 12:49:fc:dc:26:3a:05:1b:7d:60:c7:00:24:a1:97: 1b:36:34:c9:f6:06:ad:df:d1:32:dc:7d:2c:4c:d1: 0c:04:c6:78:21:df:8d:17:0e:68:b7:87:ba:7e:2a: fe:54:d7:a1:ff:4a:14:f8:56:a2:98:5d:16:fb:c1: 4e:70:95:a2:a2:ae:85:da:24:41:e7:8c:3d:19:d6: 27:23:c0:22:c4:61:f6:1f:76:5a:1e:60:a5:5d:b9: 4a:5b:f9:d0:d1:71:fb:35:91:d6:34:fe:da:85:5d: 20:7a:7a:83:df:8d:b7:e4:c6:60:f5:7e:60:4e:54: e4:71:e3:7e:ed:88:c2:a6:0c:b6:04:57:71:0f:a6: 48:ee:24:a8:f9:8c:e9:b4:68:b4:e8:69:dd:ea:b1: e7:3b:e9:5b:e4:01:93:ac:12:73:b5:8f:7b:62:cc: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5D:02:B8:70:98:D1:4A:4E:7E:1F:AC:E2:96:F8:8E:CE:38:91:D9 X509v3 Authority Key Identifier: keyid:BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:6a:23:b1:3a:de:68:57:4d:4d:ea:52:9a:ec:c0:e1:bf:e7: f2:1f:79:0f:9b:95:be:fd:1f:06:54:5a:35:70:c5:7c:74:cc: d4:06:7d:f9:3c:14:98:41:d7:75:c5:3a:44:f7:7b:df:d0:28: ba:2b:55:c3:84:d0:d9:18:d6:e7:07:6f:47:f3:3e:a7:48:71: ed:41:e8:76:20:80:7d:a9:d6:23:24:80:45:b7:7e:d0:2b:5d: b0:0f:5c:19:80:94:aa:e3:86:05:13:a9:74:ba:c4:4e:11:b3: 1c:f8:d9:f5:df:3d:df:5e:ba:48:c9:8b:8a:42:c7:17:44:37: 87:da:9b:d1:24:c1:a4:b0:5f:87:2e:8b:69:c9:54:b9:95:63: d9:98:4f:ad:bf:5c:b6:4f:7f:d0:87:a6:f0:04:c1:a1:bd:15: cc:9a:ee:0b:5c:72:3c:6e:45:49:11:0e:a9:7e:ba:20:1b:b5: c6:e0:2d:69:e2:c8:64:27:08:65:b5:5e:77:3c:df:a6:8c:fb: 91:29:30:2a:60:97:b8:03:1a:9e:d9:a9:f5:dd:86:74:b2:ca: 56:ae:c8:07:cb:f4:ca:a2:ab:82:21:7e:4a:42:99:32:01:4d: 02:3b:a6:e4:1f:9f:dc:a3:b7:d3:2b:db:84:af:c3:bb:d0:ee: d7:e3:f3:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBUBox8S3N3Cj3RdcrpDcD1ci/UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQxMTEyNTcyNENCOEM1NDMwRTYwNUU4NjI4QzYyMzVC MEVDRDAzNzAeFw0yNTEyMjUwMjA1MjRaFw0yNTEyMjYwMzI1MjRaMDMxMTAvBgNV BAMTKDA0NUQwMkI4NzA5OEQxNEE0RTdFMUZBQ0UyOTZGODhFQ0UzODkxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlfIocBaTPpRXndxfa3xh9sIU 6m8RCkwxErKwwPPsuMv2VeYTttGX9oyGkjzx6hu25BcEy2we4I63uFf7WSRa4LVI pNSKZQz32tRw1kgHx1+PNx1n4kBJeRJJ/NwmOgUbfWDHACShlxs2NMn2Bq3f0TLc fSxM0QwExngh340XDmi3h7p+Kv5U16H/ShT4VqKYXRb7wU5wlaKiroXaJEHnjD0Z 1icjwCLEYfYfdloeYKVduUpb+dDRcfs1kdY0/tqFXSB6eoPfjbfkxmD1fmBOVORx 437tiMKmDLYEV3EPpkjuJKj5jOm0aLToad3qsec76VvkAZOsEnO1j3tizJLHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBF0CuHCY0UpOfh+s4pb4js44kdkwHwYDVR0j BBgwFoAUvRESVyTLjFQw5gXoYoxiNbDs0DcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhF dWMvMC9CRDExMTI1NzI0Q0I4QzU0MzBFNjA1RTg2MjhDNjIzNUIwRUNEMDM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMTExMjU3MjRDQjhDNTQz MEU2MDVFODYyOEM2MjM1QjBFQ0QwMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhFdWMvMC9C RDExMTI1NzI0Q0I4QzU0MzBFNjA1RTg2MjhDNjIzNUIwRUNEMDM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtmojsTreaFdNTepSmuzA4b/n8h95D5uVvv0fBlRaNXDFfHTM1AZ9+TwUmEHX dcU6RPd739AouitVw4TQ2RjW5wdvR/M+p0hx7UHodiCAfanWIySARbd+0CtdsA9c GYCUquOGBROpdLrEThGzHPjZ9d893166SMmLikLHF0Q3h9qb0STBpLBfhy6LaclU uZVj2ZhPrb9ctk9/0Iem8ATBob0VzJruC1xyPG5FSREOqX66IBu1xuAtaeLIZCcI ZbVedzzfpoz7kSkwKmCXuAMantmp9d2GdLLKVq7IB8v0yqKrgiF+SkKZMgFNAjum 5B+f3KO30yvbhK/Du9Du1+Pz5w== -----END CERTIFICATE-----Generated at Thu Dec 25 15:54:50 2025 by rpki-client