This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft File: 58A28FA55A129B3ED7724531E87F15ECD22B918D.mft (raw, json) Hash identifier: CaZAvZvoczq+Ce0GO2QyP8LHf9d7DgAYIRj8d+Smpcg= Subject key identifier: 32:36:1F:3A:B3:D6:56:A1:35:AF:C4:C9:06:6E:1E:1F:30:47:09:01 Authority key identifier: 58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D Certificate issuer: /CN=58A28FA55A129B3ED7724531E87F15ECD22B918D Certificate serial: 27A08C52A1C4AB0EA422D48C6F04367599B8D1CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft Manifest number: 0125 Signing time: Sat 06 Dec 2025 14:18:47 +0000 Manifest this update: Sat 06 Dec 2025 14:13:47 +0000 Manifest next update: Sun 07 Dec 2025 16:10:47 +0000 Files and hashes: 1: 323830343a393336343a3a2f33322d3332203d3e20323734373734.roa (hash: OO7Z6diGpEfL/MFcTxHKDmseZGAvPEOiht5SQidTcN0=) 2: 58A28FA55A129B3ED7724531E87F15ECD22B918D.crl (hash: MsX0GtCmlKu7pCUpg/UY8s48urh1uyhkR9+UApSzILY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 16:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a0:8c:52:a1:c4:ab:0e:a4:22:d4:8c:6f:04:36:75:99:b8:d1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A28FA55A129B3ED7724531E87F15ECD22B918D Validity Not Before: Dec 6 14:13:47 2025 GMT Not After : Dec 7 16:10:47 2025 GMT Subject: CN=32361F3AB3D656A135AFC4C9066E1E1F30470901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9a:88:c1:e0:93:a2:1b:ab:43:b5:ca:f4:7d: fe:07:8e:48:cd:5a:79:9c:f9:45:2b:11:22:f5:79: ac:7b:a1:11:6a:5c:b3:98:23:2f:e6:c7:83:54:82: d7:36:dd:3b:28:32:37:ca:5c:55:b0:80:c3:8b:c7: 45:fb:30:7b:c9:84:83:52:02:92:15:a5:12:e2:66: 72:84:d2:26:27:d7:83:2b:7a:30:97:1f:22:4a:a6: 6e:b1:ae:3e:c5:2f:35:b5:b0:bc:0f:0a:b5:c9:6c: 06:3a:00:6b:a5:83:65:18:6a:18:1f:ed:96:6b:d0: e4:37:be:4a:c8:e4:34:4c:9f:0b:ac:f0:55:c0:ef: 52:67:3d:7d:3a:87:99:f8:93:f6:d0:f4:79:8b:4c: 76:6d:4e:2c:81:02:b2:3a:df:46:19:bc:54:5b:d9: 18:89:c2:c0:99:d5:03:86:90:b8:40:4f:bf:53:78: 15:c8:f6:2d:af:bd:73:81:f6:7f:41:71:78:17:10: 87:48:d5:6d:43:95:b7:08:6a:91:4d:2f:40:32:05: 9e:9f:bb:bf:82:b7:08:cb:ea:a8:32:0e:29:9a:59: a8:31:7d:2a:a4:6d:ca:77:36:e2:5e:e9:b5:21:09: b2:81:8f:07:cf:0e:9c:27:80:6b:15:05:a0:c5:82: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:36:1F:3A:B3:D6:56:A1:35:AF:C4:C9:06:6E:1E:1F:30:47:09:01 X509v3 Authority Key Identifier: keyid:58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e6:5a:6a:96:31:92:c4:60:76:9c:cc:c5:02:7e:e6:b4:82: 17:26:30:ac:a0:2a:ed:55:35:94:76:82:0a:0c:92:15:e2:4e: a3:11:f0:30:3c:0b:b3:75:3d:6a:82:c4:22:6c:97:55:fd:80: ec:cf:91:84:d4:38:ef:5c:cb:d2:9c:70:13:28:32:1f:ad:09: fe:d0:0c:f0:b3:af:67:92:46:c3:9c:49:25:85:84:15:99:0e: 63:22:9f:28:88:eb:6f:39:9c:7a:cd:97:d4:7d:4c:61:7e:65: 65:2e:39:6f:ee:7b:b1:48:72:0e:41:00:11:f8:84:32:73:18: 18:6f:28:13:0b:02:13:ac:98:9d:b3:57:f3:e6:78:74:38:92: 90:2c:b3:0e:ef:9f:5d:cb:8e:38:2c:37:b9:52:28:27:c1:5c: fc:5b:51:4c:f1:93:c8:9e:7b:b5:b3:0d:91:b5:b9:7a:ec:10: c0:c3:1e:13:23:05:b3:eb:4c:98:65:69:0d:a6:53:09:a1:5b: 84:7d:14:44:2e:cd:65:bf:9e:6e:49:3b:31:6c:86:82:4a:0d: 3e:60:d7:b1:f3:0f:f7:9e:f9:6e:ec:2a:aa:28:ef:98:95:2d: 12:73:11:f8:ba:d4:19:17:04:7d:91:81:c8:0b:64:38:75:a6: 09:92:de:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ6CMUqHEqw6kItSMbwQ2dZm40c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBMjhGQTU1QTEyOUIzRUQ3NzI0NTMxRTg3RjE1RUNE MjJCOTE4RDAeFw0yNTEyMDYxNDEzNDdaFw0yNTEyMDcxNjEwNDdaMDMxMTAvBgNV BAMTKDMyMzYxRjNBQjNENjU2QTEzNUFGQzRDOTA2NkUxRTFGMzA0NzA5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtmojB4JOiG6tDtcr0ff4HjkjN Wnmc+UUrESL1eax7oRFqXLOYIy/mx4NUgtc23TsoMjfKXFWwgMOLx0X7MHvJhINS ApIVpRLiZnKE0iYn14MrejCXHyJKpm6xrj7FLzW1sLwPCrXJbAY6AGulg2UYahgf 7ZZr0OQ3vkrI5DRMnwus8FXA71JnPX06h5n4k/bQ9HmLTHZtTiyBArI630YZvFRb 2RiJwsCZ1QOGkLhAT79TeBXI9i2vvXOB9n9BcXgXEIdI1W1DlbcIapFNL0AyBZ6f u7+CtwjL6qgyDimaWagxfSqkbcp3NuJe6bUhCbKBjwfPDpwngGsVBaDFggnTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMjYfOrPWVqE1r8TJBm4eHzBHCQEwHwYDVR0j BBgwFoAUWKKPpVoSmz7XckUx6H8V7NIrkY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQk1Wd0oySEFRaThyekdpdjFWaTlQbUNBb0ZxaUNocG5pNlQyU3pKcloy NEcvMC81OEEyOEZBNTVBMTI5QjNFRDc3MjQ1MzFFODdGMTVFQ0QyMkI5MThELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4QTI4RkE1NUExMjlCM0VE NzcyNDUzMUU4N0YxNUVDRDIyQjkxOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qk1Wd0oySEFRaThyekdpdjFWaTlQbUNBb0ZxaUNocG5pNlQyU3pKcloyNEcvMC81 OEEyOEZBNTVBMTI5QjNFRDc3MjQ1MzFFODdGMTVFQ0QyMkI5MThELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOZaapYxksRgdpzMxQJ+5rSCFyYwrKAq7VU1lHaCCgySFeJOoxHwMDwLs3U9 aoLEImyXVf2A7M+RhNQ471zL0pxwEygyH60J/tAM8LOvZ5JGw5xJJYWEFZkOYyKf KIjrbzmces2X1H1MYX5lZS45b+57sUhyDkEAEfiEMnMYGG8oEwsCE6yYnbNX8+Z4 dDiSkCyzDu+fXcuOOCw3uVIoJ8Fc/FtRTPGTyJ57tbMNkbW5euwQwMMeEyMFs+tM mGVpDaZTCaFbhH0URC7NZb+ebkk7MWyGgkoNPmDXsfMP9575buwqqijvmJUtEnMR +LrUGRcEfZGByAtkOHWmCZLeJA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:12 2025 by rpki-client