This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft File: D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json) Hash identifier: hPvc1tPAes7n0S3XDW4ra8PubGPEeSKYaRmHB5o0nVM= Subject key identifier: 7E:47:5E:B7:6C:E2:65:C2:B3:CA:E3:F0:53:79:22:1D:18:15:73:EF Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5 Certificate issuer: /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5 Certificate serial: 359F90EF45721D619C543746F172B3AAE8B80DBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft Manifest number: 0137 Signing time: Sat 06 Dec 2025 03:41:43 +0000 Manifest this update: Sat 06 Dec 2025 03:36:43 +0000 Manifest next update: Sun 07 Dec 2025 04:48:43 +0000 Files and hashes: 1: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=) 2: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: buIv/ohFIFmEdS2Dn4IgH+6hwdDcE8E3bWYoPDDOohA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9f:90:ef:45:72:1d:61:9c:54:37:46:f1:72:b3:aa:e8:b8:0d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5 Validity Not Before: Dec 6 03:36:43 2025 GMT Not After : Dec 7 04:48:43 2025 GMT Subject: CN=7E475EB76CE265C2B3CAE3F05379221D181573EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:b2:a1:73:14:bb:d1:95:b5:7d:72:80:27: 2c:f3:e9:f9:ba:cc:cd:7c:57:9a:e3:89:8c:aa:0a: 65:a9:4b:8f:d6:f4:6a:3b:17:21:e3:d8:0a:22:ee: 04:db:98:d9:3d:bf:59:50:cb:2e:f3:e4:2c:9f:de: 9c:93:2e:f0:30:54:9c:fc:67:bd:38:06:98:bb:7d: 19:0f:28:aa:84:d3:a2:9e:9b:a1:b2:d5:81:8d:26: 2c:49:66:00:87:06:f0:28:1c:0f:c4:9c:06:07:bf: e2:09:0f:a3:a0:a5:85:3b:d2:de:62:c7:9b:28:4d: b0:0d:25:18:7e:7a:53:bb:35:58:a2:0f:ec:6e:27: 0c:60:7b:b4:4a:51:f3:10:ea:d2:2f:b1:54:c2:76: a8:d5:31:a6:69:cb:22:d7:24:d7:38:d4:f6:d6:90: 1d:eb:70:0c:a9:24:81:9a:f6:70:48:c3:c5:f6:3b: ed:3e:38:20:70:38:14:10:66:d4:84:e8:b0:05:7d: f5:64:4d:b5:b8:25:f3:24:9e:c2:76:bb:53:58:08: fe:10:9a:01:55:78:be:af:02:38:cc:53:56:a7:f4: e0:8a:39:c2:4e:a4:cd:28:d4:74:42:c0:61:fc:9d: d1:ac:ab:43:73:cf:21:c8:ea:4f:97:87:d4:19:eb: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:47:5E:B7:6C:E2:65:C2:B3:CA:E3:F0:53:79:22:1D:18:15:73:EF X509v3 Authority Key Identifier: keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cd:ab:ee:dd:d8:6c:c4:a7:1c:e0:20:87:02:93:26:82:e0: 78:b4:1f:73:da:7c:1a:87:29:b8:10:57:32:f6:d1:b2:a8:fa: 26:88:c0:01:c6:ba:0c:c2:ca:cd:f8:f2:49:40:65:e7:18:7e: 7d:91:49:30:c1:32:9e:a8:ae:f5:73:b4:80:96:97:27:2e:2d: 82:1b:1f:4b:de:0c:84:cb:27:67:d6:db:bd:82:ac:c0:3d:29: 45:98:c4:21:7d:80:d7:11:62:86:92:75:21:ce:81:23:86:04: 15:13:4d:8c:cf:1b:a0:19:5c:e1:0d:f8:25:71:0e:0e:5f:ff: 47:ea:15:cc:18:f4:45:6a:f3:12:ac:9e:02:78:5c:a5:a9:47: b2:db:c6:3e:65:fb:33:91:70:a8:21:81:50:f1:4e:06:d5:ed: 64:ad:01:64:c2:62:03:14:24:91:e0:52:fe:5f:5b:b8:fc:52: c1:59:43:6c:14:67:30:80:d1:11:e1:6b:fb:07:89:18:d8:87: 6f:b2:94:9d:ee:ac:d7:78:34:b3:28:d2:cc:ab:15:d9:a0:ae: b1:dd:88:3a:c7:9a:ae:27:25:43:79:7a:df:49:9c:83:6e:a8: 09:0e:36:46:2f:1a:d1:26:b7:09:f3:01:63:1b:43:24:27:30: bb:81:fb:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNZ+Q70VyHWGcVDdG8XKzqui4DbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4QkQ0OUYxNjk4REU5NDhGNDcxMzZCNkI4RDI0ODRG NTNDNTZENTAeFw0yNTEyMDYwMzM2NDNaFw0yNTEyMDcwNDQ4NDNaMDMxMTAvBgNV BAMTKDdFNDc1RUI3NkNFMjY1QzJCM0NBRTNGMDUzNzkyMjFEMTgxNTczRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSj7KhcxS70ZW1fXKAJyzz6fm6 zM18V5rjiYyqCmWpS4/W9Go7FyHj2Aoi7gTbmNk9v1lQyy7z5Cyf3pyTLvAwVJz8 Z704Bpi7fRkPKKqE06Kem6Gy1YGNJixJZgCHBvAoHA/EnAYHv+IJD6OgpYU70t5i x5soTbANJRh+elO7NViiD+xuJwxge7RKUfMQ6tIvsVTCdqjVMaZpyyLXJNc41PbW kB3rcAypJIGa9nBIw8X2O+0+OCBwOBQQZtSE6LAFffVkTbW4JfMknsJ2u1NYCP4Q mgFVeL6vAjjMU1an9OCKOcJOpM0o1HRCwGH8ndGsq0NzzyHI6k+Xh9QZ67x5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfkdet2ziZcKzyuPwU3kiHRgVc+8wHwYDVR0j BBgwFoAU14vUnxaY3pSPRxNra40khPU8VtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5E MzMvMC9ENzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OEJENDlGMTY5OERFOTQ4 RjQ3MTM2QjZCOEQyNDg0RjUzQzU2RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5EMzMvMC9E NzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnM2r7t3YbMSnHOAghwKTJoLgeLQfc9p8GocpuBBXMvbRsqj6JojAAca6DMLK zfjySUBl5xh+fZFJMMEynqiu9XO0gJaXJy4tghsfS94MhMsnZ9bbvYKswD0pRZjE IX2A1xFihpJ1Ic6BI4YEFRNNjM8boBlc4Q34JXEODl//R+oVzBj0RWrzEqyeAnhc palHstvGPmX7M5FwqCGBUPFOBtXtZK0BZMJiAxQkkeBS/l9buPxSwVlDbBRnMIDR EeFr+weJGNiHb7KUne6s13g0syjSzKsV2aCusd2IOseariclQ3l630mcg26oCQ42 Ri8a0Sa3CfMBYxtDJCcwu4H78Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:29 2025 by rpki-client