This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json)
Hash identifier: tiK5cUvaVxHkDrKr3+iykplVN3AcFs0/4j3pZ5BmzNc=
Subject key identifier: FE:92:48:D0:03:3F:F3:88:F6:B3:C8:8F:3D:68:C9:DC:75:8E:41:20
Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Certificate serial: 7E585E0C58217B3FDBA78FB6D1F994DD02ED1302
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
Manifest number: 01AD
Signing time: Sun 28 Dec 2025 04:18:54 +0000
Manifest this update: Sun 28 Dec 2025 04:13:54 +0000
Manifest next update: Mon 29 Dec 2025 07:09:54 +0000
Files and hashes: 1: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=)
2: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=)
3: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=)
4: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: u0gbvt8X9bouhgSasSz3tuIn8A2zZEUIv+KczBXT5rQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl
rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 29 Dec 2025 07:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:58:5e:0c:58:21:7b:3f:db:a7:8f:b6:d1:f9:94:dd:02:ed:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Validity
Not Before: Dec 28 04:13:54 2025 GMT
Not After : Dec 29 07:09:54 2025 GMT
Subject: CN=FE9248D0033FF388F6B3C88F3D68C9DC758E4120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:60:96:61:14:ac:18:59:90:9e:5b:ac:13:
8e:cc:e6:5c:b7:0e:ac:17:43:a6:56:6f:26:ec:e8:
06:59:5e:3d:67:48:6a:86:16:b7:53:37:82:58:62:
2e:e0:37:7e:61:48:e7:91:11:d4:f3:ea:34:ec:fe:
98:0d:df:7c:89:b9:a0:f0:08:4a:cd:ed:c5:38:eb:
aa:30:81:2b:fc:fa:12:18:a4:94:39:6f:d8:d2:61:
58:72:71:6d:18:79:c5:7c:a7:ae:98:6d:35:c6:c9:
f4:29:ab:2a:97:de:b1:f8:ec:cb:62:ba:69:86:6f:
db:ce:c9:d0:91:cb:d4:32:14:49:d3:69:36:f9:95:
b0:19:4a:4a:f7:05:87:61:35:9e:67:b9:c3:f4:02:
3c:5a:03:62:08:ef:b6:73:18:b2:cd:20:69:29:14:
02:3d:1a:f6:5b:cc:d2:41:64:1c:46:47:10:c2:1b:
78:ad:fa:55:9e:a7:31:e4:6e:bb:ee:5c:31:cf:24:
18:e8:22:d8:ff:1c:9f:c5:dc:62:9d:6c:75:57:f1:
4a:c9:f1:7a:f0:34:d0:2f:f8:c3:02:53:d3:c5:3f:
68:4d:a8:cf:b6:79:df:8a:69:cb:a8:d7:58:0c:7c:
fd:5d:b6:db:df:a5:77:35:31:e8:87:03:3f:59:55:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:92:48:D0:03:3F:F3:88:F6:B3:C8:8F:3D:68:C9:DC:75:8E:41:20
X509v3 Authority Key Identifier:
keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:26:1c:2c:5b:31:2a:53:2d:07:cf:f9:00:52:5e:48:35:c4:
1f:28:4b:c1:a0:c4:f9:89:02:1a:b3:b4:ad:35:7d:15:82:bb:
d2:8f:79:8f:88:39:24:dc:f5:9c:53:ed:f7:ab:c7:e1:82:24:
07:ef:86:54:33:59:8c:8e:92:3b:e6:2a:7f:ca:e5:a6:88:37:
11:7c:38:ae:28:c8:42:5e:69:94:d3:88:2f:f3:1d:a6:fc:e8:
b0:e4:4f:c7:52:8c:6b:1d:4d:25:17:87:4b:50:87:53:32:8c:
dd:76:d6:b2:64:d9:d0:e3:e7:b0:03:2a:3c:6c:39:6e:b0:b4:
cc:2b:a6:94:2f:d8:71:82:77:67:9f:99:12:b1:b9:88:cf:02:
cb:fb:fd:58:ea:ff:1a:16:b0:ea:e6:0f:4f:80:3a:28:f6:31:
9d:3c:cb:e5:1e:f8:44:31:89:51:8f:d3:6d:c1:ff:01:be:ba:
a9:b2:4c:60:37:87:cf:cd:10:c6:df:47:9f:a8:05:46:77:92:
ac:b2:6f:17:f0:a8:c7:4a:e7:f8:7d:3b:ff:80:22:1b:b9:d9:
12:d2:20:a8:ee:e1:b7:25:5f:51:dc:c4:7f:ff:e0:71:39:f9:
83:f6:c9:64:be:e5:63:cc:5b:d5:64:99:90:93:d8:3a:80:73:
15:c5:89:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUflheDFghez/bp4+20fmU3QLtEwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC
REZDRUQ0NTAeFw0yNTEyMjgwNDEzNTRaFw0yNTEyMjkwNzA5NTRaMDMxMTAvBgNV
BAMTKEZFOTI0OEQwMDMzRkYzODhGNkIzQzg4RjNENjhDOURDNzU4RTQxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAF2CWYRSsGFmQnlusE47M5ly3
DqwXQ6ZWbybs6AZZXj1nSGqGFrdTN4JYYi7gN35hSOeREdTz6jTs/pgN33yJuaDw
CErN7cU466owgSv8+hIYpJQ5b9jSYVhycW0YecV8p66YbTXGyfQpqyqX3rH47Mti
ummGb9vOydCRy9QyFEnTaTb5lbAZSkr3BYdhNZ5nucP0AjxaA2II77ZzGLLNIGkp
FAI9GvZbzNJBZBxGRxDCG3it+lWepzHkbrvuXDHPJBjoItj/HJ/F3GKdbHVX8UrJ
8XrwNNAv+MMCU9PFP2hNqM+2ed+Kacuo11gMfP1dttvfpXc1MeiHAz9ZVXRTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/pJI0AM/84j2s8iPPWjJ3HWOQSAwHwYDVR0j
BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0
QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5
NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B
RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJiYcLFsxKlMtB8/5AFJeSDXEHyhLwaDE+YkCGrO0rTV9FYK70o95j4g5JNz1
nFPt96vH4YIkB++GVDNZjI6SO+Yqf8rlpog3EXw4rijIQl5plNOIL/MdpvzosORP
x1KMax1NJReHS1CHUzKM3XbWsmTZ0OPnsAMqPGw5brC0zCumlC/YcYJ3Z5+ZErG5
iM8Cy/v9WOr/Ghaw6uYPT4A6KPYxnTzL5R74RDGJUY/TbcH/Ab66qbJMYDeHz80Q
xt9Hn6gFRneSrLJvF/Cox0rn+H07/4AiG7nZEtIgqO7htyVfUdzEf//gcTn5g/bJ
ZL7lY8xb1WSZkJPYOoBzFcWJZQ==
-----END CERTIFICATE-----
Generated at Sun Dec 28 11:09:09 2025 by rpki-client