This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: xubmHK8WzZdPrgbo71rkkytA6TilL0dO7A5lboq4M6I= Subject key identifier: 9F:CB:7F:1A:0B:2C:EC:AD:20:77:7A:3F:E3:53:9A:AF:77:1C:93:BA Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 345CF10A9FF9EEE6B90CB45F226E844A20CAC427 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: B5 Signing time: Sat 06 Dec 2025 07:16:08 +0000 Manifest this update: Sat 06 Dec 2025 07:11:08 +0000 Manifest next update: Sun 07 Dec 2025 10:03:08 +0000 Files and hashes: 1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: kfxmc3M46/DEqmOeFztMCXWO0iWEKqT+2TXeMV6hUws=) 2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5c:f1:0a:9f:f9:ee:e6:b9:0c:b4:5f:22:6e:84:4a:20:ca:c4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: Dec 6 07:11:08 2025 GMT Not After : Dec 7 10:03:08 2025 GMT Subject: CN=9FCB7F1A0B2CECAD20777A3FE3539AAF771C93BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:eb:eb:10:fe:2a:94:0b:d8:65:b3:73:2d: 30:22:cc:f3:eb:c6:1c:eb:81:2a:ac:22:8c:81:26: 96:3c:9b:a5:48:63:40:13:b8:f8:1d:55:b6:f3:f3: 32:04:be:b4:11:d3:58:bd:e6:87:27:89:d5:88:d1: 34:23:46:63:76:f6:79:d5:bc:70:7a:74:7a:e9:09: 1e:43:61:38:81:ca:c6:a4:80:9e:af:9b:5a:4c:f3: ce:63:b8:e9:58:fb:d4:31:7c:4d:90:a5:20:ee:0c: fb:5d:02:4a:9e:5e:94:1f:0d:3d:ca:d1:df:12:20: f2:19:25:f1:cd:c6:43:cc:8e:36:0d:96:72:23:e2: a3:26:94:ca:17:1a:8b:f7:21:5a:df:fa:7b:f4:58: 8f:71:3c:2e:09:f1:f4:ba:f0:a1:25:47:a6:5c:66: af:6e:6d:ce:22:7a:16:c3:f9:51:59:3f:b4:52:10: d0:f1:84:1c:11:3b:1b:c6:32:8b:de:2a:d1:a7:81: da:68:2f:f9:57:86:54:0f:04:5d:25:d0:31:b6:c8: 29:0c:c0:07:7c:58:06:b8:99:1c:e6:17:c3:4b:b8: a0:07:0c:6d:68:0e:30:2f:64:4f:b0:38:19:95:b2: 83:2a:61:96:41:30:c6:04:e0:b1:ac:85:d7:28:a5: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CB:7F:1A:0B:2C:EC:AD:20:77:7A:3F:E3:53:9A:AF:77:1C:93:BA X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:31:38:f1:cb:a8:52:4e:b8:48:71:67:d4:18:26:b9:6c:88: 5b:5a:29:40:6a:78:ff:13:20:dc:dd:63:e3:fd:ab:35:5f:d0: c9:ce:02:51:c5:6d:58:ad:7c:b6:f4:e7:fc:49:c8:0c:f6:b5: 71:ba:ac:30:53:86:7c:c0:ef:f8:65:5c:73:5f:d1:3e:f5:b0: 94:fd:fb:7a:88:db:ae:47:09:fd:88:34:41:e4:11:4a:e1:92: 88:99:1a:46:b8:e5:1c:b1:7e:12:dc:17:9a:74:52:bc:da:1d: 93:cf:6e:61:71:d2:ae:50:3b:95:a8:28:b2:11:97:30:cf:af: 75:57:f5:c3:df:a4:3b:b9:0f:df:77:0f:b8:d1:68:d4:99:63: 64:c4:9c:67:ca:c1:c6:d4:2f:f0:ff:61:3f:3d:50:30:39:5f: ea:4e:4d:61:14:70:f6:cb:48:12:d3:71:b6:0a:a1:dd:4c:44: a1:b7:8d:10:98:e5:a8:7c:8b:c8:85:90:8c:f5:c1:39:e2:1a: 59:48:45:df:2b:bf:7b:ee:3c:ab:bd:84:09:ad:42:07:79:2d: 06:05:7d:62:21:8e:37:8d:1e:44:4a:1a:9c:85:b7:aa:14:f2: 94:05:ae:22:67:09:9a:6e:97:25:3d:0b:69:0c:68:08:65:60: 73:90:d8:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNFzxCp/57ua5DLRfIm6ESiDKxCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNTEyMDYwNzExMDhaFw0yNTEyMDcxMDAzMDhaMDMxMTAvBgNV BAMTKDlGQ0I3RjFBMEIyQ0VDQUQyMDc3N0EzRkUzNTM5QUFGNzcxQzkzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTevrEP4qlAvYZbNzLTAizPPr xhzrgSqsIoyBJpY8m6VIY0ATuPgdVbbz8zIEvrQR01i95ocnidWI0TQjRmN29nnV vHB6dHrpCR5DYTiBysakgJ6vm1pM885juOlY+9QxfE2QpSDuDPtdAkqeXpQfDT3K 0d8SIPIZJfHNxkPMjjYNlnIj4qMmlMoXGov3IVrf+nv0WI9xPC4J8fS68KElR6Zc Zq9ubc4iehbD+VFZP7RSENDxhBwROxvGMoveKtGngdpoL/lXhlQPBF0l0DG2yCkM wAd8WAa4mRzmF8NLuKAHDG1oDjAvZE+wOBmVsoMqYZZBMMYE4LGshdcopZanAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn8t/Ggss7K0gd3o/41Oar3cck7owHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDE48cuoUk64SHFn1BgmuWyIW1opQGp4/xMg3N1j4/2rNV/Qyc4CUcVtWK18 tvTn/EnIDPa1cbqsMFOGfMDv+GVcc1/RPvWwlP37eojbrkcJ/Yg0QeQRSuGSiJka RrjlHLF+EtwXmnRSvNodk89uYXHSrlA7lagoshGXMM+vdVf1w9+kO7kP33cPuNFo 1JljZMScZ8rBxtQv8P9hPz1QMDlf6k5NYRRw9stIEtNxtgqh3UxEobeNEJjlqHyL yIWQjPXBOeIaWUhF3yu/e+48q72ECa1CB3ktBgV9YiGON40eREoanIW3qhTylAWu ImcJmm6XJT0LaQxoCGVgc5DYeg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:14 2025 by rpki-client