This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: TNeFYv0/kmhTtHk+bmgolyHK2ggd5F79fSvDPhg6roQ= Subject key identifier: 03:B6:80:3B:17:77:E2:60:D5:7B:53:EC:EF:5C:BD:3A:29:2F:F3:BE Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 525B8B5DBA2F71E45ACB1D3478AE721FA18EEF6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: 01D9 Signing time: Sat 06 Dec 2025 22:51:26 +0000 Manifest this update: Sat 06 Dec 2025 22:46:26 +0000 Manifest next update: Mon 08 Dec 2025 01:44:26 +0000 Files and hashes: 1: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: 1xYFKSeSCizyds5gHEIPv0l3Tzgq0aCCTj2XdNILDmA=) 2: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: jXTLCD+itUW6+r6mSLO4eqiSr5ZBnT4l3FlDgV31d1Q=) 3: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: E8fPnc3D01HrHu0IERiaVvqh7l7+gzZnFGvDM9PE9ic=) 4: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Lr4RgQ9+Kc8eB8NQKeHtU80CyD6ZWwwwrof8SW1hNR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 01:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5b:8b:5d:ba:2f:71:e4:5a:cb:1d:34:78:ae:72:1f:a1:8e:ef:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Dec 6 22:46:26 2025 GMT Not After : Dec 8 01:44:26 2025 GMT Subject: CN=03B6803B1777E260D57B53ECEF5CBD3A292FF3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:b5:b4:a5:73:96:eb:9a:15:3a:e1:9e:4c: ac:32:d3:34:ae:be:d5:f9:d1:da:3e:f3:05:e9:86: 14:71:6f:ff:34:bb:93:a9:55:79:93:22:28:b8:50: 48:94:85:f1:3d:b4:61:84:cf:59:08:68:20:aa:6c: ae:c4:7b:a2:6c:2f:06:42:bc:ae:c3:e4:96:61:39: b2:71:c9:b0:9c:02:22:dd:5c:c5:d1:7b:69:09:c6: aa:24:e2:5c:15:a4:9a:53:17:93:21:56:e1:43:3e: fb:d2:96:98:4c:be:c7:6c:31:f2:f8:bf:91:0b:df: 83:ac:f4:b5:55:f9:e3:14:e6:98:10:2a:e5:63:34: 26:6a:cd:52:ef:97:da:c4:8b:48:11:3e:d2:75:10: a1:31:24:98:2a:8a:80:f3:41:75:fa:2e:91:80:e0: 6c:ca:87:dd:ae:cb:08:ab:37:09:83:64:59:35:3b: d1:68:7c:1b:c7:da:ae:3e:d1:89:b2:9e:de:87:47: e8:12:e5:28:af:ec:53:73:14:da:a1:5a:f6:65:83: 51:51:c4:26:50:57:4b:d3:e8:85:dc:69:62:74:59: a2:b5:c6:a1:86:66:b9:d1:99:f0:df:4f:7a:ba:ef: fd:14:fd:85:a3:85:9c:73:f7:86:26:87:de:26:63: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B6:80:3B:17:77:E2:60:D5:7B:53:EC:EF:5C:BD:3A:29:2F:F3:BE X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:c2:04:f0:fa:31:15:dc:72:8b:5f:a8:df:e9:cc:8a:b7: 78:96:83:1f:21:cc:a1:f1:6e:dd:e5:3a:ae:5e:f0:4e:60:6b: 18:fd:46:c6:ba:1c:ca:86:99:47:0f:f0:a7:87:a6:c2:40:00: dc:4c:2c:9d:44:13:3d:a9:4e:ce:6f:c9:4b:45:2a:a3:7c:92: 1a:06:95:38:78:43:67:60:5d:9c:06:68:fb:fa:f6:a3:11:09: 62:a5:cd:05:7d:19:db:79:03:42:78:cf:d1:b6:55:57:6b:ab: 8d:72:bc:44:c8:bd:f0:75:49:d8:cd:ca:77:10:a8:2a:2d:bb: 4c:6e:e3:b1:52:3c:9e:59:32:cc:86:a8:e9:96:88:0e:ba:3b: f6:8e:ca:d2:47:b7:e4:63:0d:b0:9c:4c:9a:27:95:24:c6:01: 1d:0b:bd:89:cf:1c:cc:5b:50:db:64:b3:44:f4:21:bd:40:82: a3:19:51:69:5d:3b:34:4f:03:f8:6f:55:ac:04:e9:3f:d6:3b: 99:0f:f2:39:76:36:d2:6b:09:6e:48:e1:82:a5:13:d0:a1:52: bf:8e:08:cb:07:37:c0:09:1b:bb:c2:57:5c:3e:74:25:3b:1c: 0a:51:8a:5b:ad:1b:82:fc:55:7e:68:c9:bf:10:b6:33:ec:dd: 3a:51:b0:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUluLXbovceRayx00eK5yH6GO72wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTEyMDYyMjQ2MjZaFw0yNTEyMDgwMTQ0MjZaMDMxMTAvBgNV BAMTKDAzQjY4MDNCMTc3N0UyNjBENTdCNTNFQ0VGNUNCRDNBMjkyRkYzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIbLW0pXOW65oVOuGeTKwy0zSu vtX50do+8wXphhRxb/80u5OpVXmTIii4UEiUhfE9tGGEz1kIaCCqbK7Ee6JsLwZC vK7D5JZhObJxybCcAiLdXMXRe2kJxqok4lwVpJpTF5MhVuFDPvvSlphMvsdsMfL4 v5EL34Os9LVV+eMU5pgQKuVjNCZqzVLvl9rEi0gRPtJ1EKExJJgqioDzQXX6LpGA 4GzKh92uywirNwmDZFk1O9FofBvH2q4+0Ymynt6HR+gS5Siv7FNzFNqhWvZlg1FR xCZQV0vT6IXcaWJ0WaK1xqGGZrnRmfDfT3q67/0U/YWjhZxz94Ymh94mY53rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA7aAOxd34mDVe1Ps71y9Oikv874wHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABjDCBPD6MRXccotfqN/pzIq3eJaDHyHMofFu3eU6rl7wTmBrGP1GxrocyoaZ Rw/wp4emwkAA3EwsnUQTPalOzm/JS0Uqo3ySGgaVOHhDZ2BdnAZo+/r2oxEJYqXN BX0Z23kDQnjP0bZVV2urjXK8RMi98HVJ2M3KdxCoKi27TG7jsVI8nlkyzIao6ZaI Dro79o7K0ke35GMNsJxMmieVJMYBHQu9ic8czFtQ22SzRPQhvUCCoxlRaV07NE8D +G9VrATpP9Y7mQ/yOXY20msJbkjhgqUT0KFSv44Iywc3wAkbu8JXXD50JTscClGK W60bgvxVfmjJvxC2M+zdOlGw/w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:37 2025 by rpki-client