This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft File: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft (raw, json) Hash identifier: ZtE90Zd35MxAuL3BfPtl3eMQWVTgwdjf7U406YS/okc= Subject key identifier: B1:C3:19:46:7F:7E:40:EB:1E:98:71:2E:43:DD:A5:DA:20:37:72:1D Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E Certificate issuer: /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E Certificate serial: 749C8FACBBA4FC4CB0FC66C082DDB5AEBEAF745C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft Manifest number: 012C Signing time: Fri 05 Dec 2025 14:05:28 +0000 Manifest this update: Fri 05 Dec 2025 14:00:28 +0000 Manifest next update: Sat 06 Dec 2025 16:51:28 +0000 Files and hashes: 1: 323830343a363139633a3a2f33322d313238203d3e20323639323435.roa (hash: YKjIAqG1yuEFYMVP4xZkWKECjkHqyOHvad/Qpo5c/Co=) 2: 34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (hash: E+cklEAbvkMVYK9jhvnpL60xDxOtgqMtgJs65eGmU7c=) 3: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl (hash: xWSggkNIO/idL7HhcGjG6I9QC+HMYgMUlxts8lN5JX8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 16:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9c:8f:ac:bb:a4:fc:4c:b0:fc:66:c0:82:dd:b5:ae:be:af:74:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E Validity Not Before: Dec 5 14:00:28 2025 GMT Not After : Dec 6 16:51:28 2025 GMT Subject: CN=B1C319467F7E40EB1E98712E43DDA5DA2037721D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:11:db:7e:c3:93:a7:85:86:28:c6:61:40: 91:8f:d0:84:e4:0e:c4:d3:c6:bb:7e:a4:de:44:53: f4:19:fc:0d:56:85:91:2e:c1:17:39:db:ea:30:ee: 1b:5a:77:09:19:8e:57:3e:c6:24:f2:f8:62:c3:38: 8c:7d:f9:cd:92:2e:ae:7b:d3:a5:69:3f:86:6a:29: cc:28:5f:62:6f:2e:33:a8:ee:cb:2d:c5:0a:a0:93: 16:9c:58:1b:ce:5f:9b:0b:af:58:c1:1d:c9:7e:07: da:6a:5b:a0:bf:95:53:02:43:a8:fe:c2:18:66:f3: 86:ae:80:8a:bd:a4:31:7a:8b:f0:1d:e5:c3:ee:40: 59:1a:fd:9b:c1:11:3c:0a:37:07:d8:23:55:ad:31: f9:59:4b:c0:5f:db:3d:0e:61:d6:ad:e8:59:0f:b7: 58:32:a1:0f:d4:a1:53:47:1d:dc:ed:a2:f5:9f:c0: d6:30:19:4a:6a:b4:67:73:40:81:1a:72:23:fd:1a: 42:e3:e7:53:65:d4:cf:15:55:d9:9d:4a:dd:04:bb: 1c:0f:49:19:60:f7:cb:77:39:03:23:63:b1:ca:82: f8:42:b2:6d:f4:a1:8b:e7:61:e9:96:f3:ae:45:16: 70:bc:c2:25:4f:0b:ea:c3:60:55:65:65:aa:28:b2: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:19:46:7F:7E:40:EB:1E:98:71:2E:43:DD:A5:DA:20:37:72:1D X509v3 Authority Key Identifier: keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d9:5d:85:0f:38:88:03:9c:53:29:aa:5b:88:9a:ba:0e:6e: 56:59:16:6c:be:0b:e7:d0:4b:44:ed:ae:21:07:92:15:4e:fd: 4c:e7:b2:6b:72:c0:68:57:4b:ac:c1:77:85:44:7d:2b:2e:6d: 9d:93:d9:ec:74:38:ed:71:32:44:dd:5d:ce:09:dd:09:a6:c3: b2:4d:fe:f0:09:56:d8:df:4a:92:b2:4f:c8:45:09:71:d7:14: 65:c8:67:f2:d9:cc:20:be:08:8d:9d:10:54:77:4f:f3:ed:9b: 03:ae:1c:e3:6f:3c:8d:a3:78:7a:70:98:5f:dd:b2:70:5e:3a: ce:62:e9:8d:0a:0f:2d:65:23:2a:ed:7c:68:da:af:1f:be:4b: d9:dc:5e:c4:93:8e:2e:73:01:51:57:e7:0a:28:7a:8d:b3:a2: d9:0e:35:e2:34:42:38:5e:0c:70:f6:57:96:5d:73:24:a5:22: c6:8f:3c:cb:fe:c5:2a:6b:bc:6b:b4:37:5e:42:7d:61:47:53: b6:23:2c:f2:69:2f:f6:1f:5d:49:05:87:ff:4c:ea:68:ed:ec: 9d:05:d7:ca:6a:af:0a:53:48:46:54:e4:3d:ad:ad:2a:93:61: b1:a9:f6:3e:0f:e0:fd:01:79:d2:9c:ee:d3:d0:a4:6b:14:34: 1f:f2:0d:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdJyPrLuk/Eyw/GbAgt21rr6vdFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkREMTQzRjYyRTM5N0E4N0VDMjJGQzIzOUU3REEyNDM1 QUQ4MEQ5RTAeFw0yNTEyMDUxNDAwMjhaFw0yNTEyMDYxNjUxMjhaMDMxMTAvBgNV BAMTKEIxQzMxOTQ2N0Y3RTQwRUIxRTk4NzEyRTQzRERBNURBMjAzNzcyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5RHbfsOTp4WGKMZhQJGP0ITk DsTTxrt+pN5EU/QZ/A1WhZEuwRc52+ow7htadwkZjlc+xiTy+GLDOIx9+c2SLq57 06VpP4ZqKcwoX2JvLjOo7sstxQqgkxacWBvOX5sLr1jBHcl+B9pqW6C/lVMCQ6j+ whhm84augIq9pDF6i/Ad5cPuQFka/ZvBETwKNwfYI1WtMflZS8Bf2z0OYdat6FkP t1gyoQ/UoVNHHdztovWfwNYwGUpqtGdzQIEaciP9GkLj51Nl1M8VVdmdSt0EuxwP SRlg98t3OQMjY7HKgvhCsm30oYvnYemW865FFnC8wiVPC+rDYFVlZaoosmUxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUscMZRn9+QOsemHEuQ92l2iA3ch0wHwYDVR0j BBgwFoAU/dFD9i45eofsIvwjnn2iQ1rYDZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpoZUJxRnhGem5MMXFmQWViWVVBWXYzbWk0VlZNUThudzd0c0pDREpK bVovMC9GREQxNDNGNjJFMzk3QTg3RUMyMkZDMjM5RTdEQTI0MzVBRDgwRDlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZERDE0M0Y2MkUzOTdBODdF QzIyRkMyMzlFN0RBMjQzNUFEODBEOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlpoZUJxRnhGem5MMXFmQWViWVVBWXYzbWk0VlZNUThudzd0c0pDREpKbVovMC9G REQxNDNGNjJFMzk3QTg3RUMyMkZDMjM5RTdEQTI0MzVBRDgwRDlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMNldhQ84iAOcUymqW4iaug5uVlkWbL4L59BLRO2uIQeSFU79TOeya3LAaFdL rMF3hUR9Ky5tnZPZ7HQ47XEyRN1dzgndCabDsk3+8AlW2N9KkrJPyEUJcdcUZchn 8tnMIL4IjZ0QVHdP8+2bA64c4288jaN4enCYX92ycF46zmLpjQoPLWUjKu18aNqv H75L2dxexJOOLnMBUVfnCih6jbOi2Q414jRCOF4McPZXll1zJKUixo88y/7FKmu8 a7Q3XkJ9YUdTtiMs8mkv9h9dSQWH/0zqaO3snQXXymqvClNIRlTkPa2tKpNhsan2 Pg/g/QF50pzu09CkaxQ0H/INfw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:00 2025 by rpki-client