This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: 1gh4YsRd1z8FqmXkC4E0OKrQjfy0bpIOvmwCXyWSUoU= Subject key identifier: CE:70:BA:01:60:05:D6:18:E8:E4:1B:03:F7:99:30:67:78:EF:AC:67 Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 671764049E8BFD982D76CFB03C41686288D72877 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: F6 Signing time: Fri 05 Dec 2025 19:11:24 +0000 Manifest this update: Fri 05 Dec 2025 19:06:24 +0000 Manifest next update: Sat 06 Dec 2025 20:11:24 +0000 Files and hashes: 1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: nyRlLYrnukKRApwPKFgplBJwAn6KPsAbNIeaF0azWHc=) 2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:17:64:04:9e:8b:fd:98:2d:76:cf:b0:3c:41:68:62:88:d7:28:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Dec 5 19:06:24 2025 GMT Not After : Dec 6 20:11:24 2025 GMT Subject: CN=CE70BA016005D618E8E41B03F799306778EFAC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:fb:9a:53:5f:6e:a9:4a:9e:31:29:f9:17: 7e:fc:8a:f7:a9:89:f0:81:18:9d:5c:87:69:24:f8: 1b:3d:9d:e3:9c:6e:97:2b:27:79:48:e6:bb:6f:80: e3:15:f7:0a:3c:ce:a1:a0:82:6f:f9:5c:53:3b:ff: 4e:d0:07:06:65:6b:79:ac:b2:70:06:16:73:e5:4d: d5:d8:d8:fe:e8:07:50:5e:78:c4:28:d9:12:a4:08: a4:07:24:d6:46:fc:9c:dc:2c:8b:b8:8e:8d:ca:fd: f0:bd:7f:06:02:0b:04:75:74:25:bb:f8:63:cb:3c: 4e:21:8a:0e:9f:b3:41:82:77:ca:0a:32:3b:ee:d1: f3:76:9e:dc:47:f6:b8:a9:c6:10:5d:c8:fb:52:b6: cf:a7:0f:1b:f5:e2:d8:99:6a:64:96:6b:ff:98:85: 54:bc:2d:a2:0d:22:59:6f:a4:f4:af:8c:2a:67:64: a4:95:b4:0e:6a:25:9a:0b:26:13:e0:b4:89:82:6f: 37:88:89:c5:45:8d:3b:ce:e4:4c:76:9e:44:3f:85: 0e:7d:0d:4f:45:df:ca:48:9a:b1:49:56:3d:04:ea: b5:db:3e:dc:3a:a4:bf:d7:fb:5a:4a:0f:15:ee:f0: fd:b1:77:0c:46:64:45:5e:33:36:3b:ac:5a:15:80: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:BA:01:60:05:D6:18:E8:E4:1B:03:F7:99:30:67:78:EF:AC:67 X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:be:da:ac:e8:e7:33:0d:9c:a6:4d:8b:06:7d:ff:54:d1:aa: a7:05:fc:10:04:81:7c:05:30:4d:c7:7e:e7:73:d6:d0:41:02: 9e:43:08:12:70:36:1e:ca:72:29:a4:d5:a1:b0:d7:e8:68:77: f5:2d:50:ad:4f:a4:d9:31:5e:10:63:d5:ae:58:3d:5c:c0:05: 19:d2:8e:cb:cd:34:ed:23:32:d5:49:02:84:7c:c4:b9:26:36: 14:84:37:65:c8:c7:b6:1c:a1:5f:98:9a:69:ed:fd:6c:d4:bd: 21:54:91:a1:6f:a9:a8:64:e0:c5:3c:c1:68:0f:c0:f0:9e:c0: cb:34:4a:a9:73:1b:d4:b0:ca:10:a3:83:2e:2a:d0:44:f1:38: ec:2d:44:31:47:c1:99:c8:cd:a8:24:c0:b8:b2:42:6b:65:c0: 88:05:1e:48:c2:a8:31:ad:ba:2a:5f:d3:67:f1:fb:d4:c7:f0: 0f:5d:60:72:cd:18:5f:9c:13:2f:36:0a:0e:a0:ba:0a:ec:ea: 31:bd:95:d9:e4:00:0a:80:8d:a8:c1:ce:76:1c:aa:10:20:20: f5:d8:ea:b2:d1:19:30:80:24:07:ed:da:36:23:c0:2c:fd:5b: 7c:7a:1b:ae:e3:91:72:ae:92:3d:c2:ec:4c:46:3a:b6:73:1b: 8c:5f:8b:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZxdkBJ6L/Zgtds+wPEFoYojXKHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTEyMDUxOTA2MjRaFw0yNTEyMDYyMDExMjRaMDMxMTAvBgNV BAMTKENFNzBCQTAxNjAwNUQ2MThFOEU0MUIwM0Y3OTkzMDY3NzhFRkFDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIvuaU19uqUqeMSn5F378ivep ifCBGJ1ch2kk+Bs9neOcbpcrJ3lI5rtvgOMV9wo8zqGggm/5XFM7/07QBwZla3ms snAGFnPlTdXY2P7oB1BeeMQo2RKkCKQHJNZG/JzcLIu4jo3K/fC9fwYCCwR1dCW7 +GPLPE4hig6fs0GCd8oKMjvu0fN2ntxH9ripxhBdyPtSts+nDxv14tiZamSWa/+Y hVS8LaINIllvpPSvjCpnZKSVtA5qJZoLJhPgtImCbzeIicVFjTvO5Ex2nkQ/hQ59 DU9F38pImrFJVj0E6rXbPtw6pL/X+1pKDxXu8P2xdwxGZEVeMzY7rFoVgC87AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUznC6AWAF1hjo5BsD95kwZ3jvrGcwHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlb7arOjnMw2cpk2LBn3/VNGqpwX8EASBfAUwTcd+53PW0EECnkMIEnA2Hspy KaTVobDX6Gh39S1QrU+k2TFeEGPVrlg9XMAFGdKOy8007SMy1UkChHzEuSY2FIQ3 ZcjHthyhX5iaae39bNS9IVSRoW+pqGTgxTzBaA/A8J7AyzRKqXMb1LDKEKODLirQ RPE47C1EMUfBmcjNqCTAuLJCa2XAiAUeSMKoMa26Kl/TZ/H71MfwD11gcs0YX5wT LzYKDqC6CuzqMb2V2eQACoCNqMHOdhyqECAg9djqstEZMIAkB+3aNiPALP1bfHob ruORcq6SPcLsTEY6tnMbjF+LJg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:07 2025 by rpki-client