This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: Qz/sO7nRxGY7ksa+kukoavmgxv11Yu64VX374kTk+zg= Subject key identifier: 3D:82:50:F7:76:D1:F0:7A:CC:4B:DE:FE:B5:B3:46:BB:21:AD:3A:5A Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 594489295D722DB864149B7294E861791664D4D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 0257 Signing time: Sat 06 Dec 2025 02:47:26 +0000 Manifest this update: Sat 06 Dec 2025 02:42:26 +0000 Manifest next update: Sun 07 Dec 2025 03:34:26 +0000 Files and hashes: 1: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=) 2: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=) 3: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: 1TEYNX55S/7tfP/ZaBJbat0EnZs2bobqov2amghU7DY=) 4: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:44:89:29:5d:72:2d:b8:64:14:9b:72:94:e8:61:79:16:64:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Dec 6 02:42:26 2025 GMT Not After : Dec 7 03:34:26 2025 GMT Subject: CN=3D8250F776D1F07ACC4BDEFEB5B346BB21AD3A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:a9:d2:60:a0:53:c8:44:c2:19:8e:d6:4d: 04:ea:9a:db:0c:7c:61:9c:df:79:8b:96:c1:d9:72: 15:ee:b8:60:38:10:d9:2c:96:87:69:09:16:16:d6: 3a:59:8e:a9:ee:ac:50:73:9a:27:3b:8b:a7:78:c8: e7:f6:51:cc:a9:28:76:2e:71:d4:d6:a6:3d:56:7f: e6:d0:52:e1:8f:b3:78:51:ce:62:36:0c:47:24:d0: 6b:3b:09:df:bf:8b:6a:4f:cb:fc:ab:8d:c9:a1:7b: ce:4d:c8:1e:a4:73:b5:e4:9a:86:ee:bd:90:f2:32: 28:6f:d7:83:f2:6e:c9:11:e5:27:cc:44:13:9e:78: 17:e2:5a:14:97:23:0d:2a:46:2d:6c:52:ab:13:65: d0:d1:f7:84:92:48:17:dd:f1:f1:e4:bc:84:10:91: 8d:05:94:a0:0f:92:07:c4:bd:99:73:2a:93:87:e4: 2a:6a:1e:a6:cb:dd:7c:ba:a1:47:7e:03:95:99:fe: 80:6e:32:96:58:9d:f0:27:cf:5e:15:9e:a9:cf:09: f9:05:dc:ea:d6:87:96:68:a9:c4:e9:b0:9d:16:3b: 9c:a2:43:db:f2:6f:4b:74:4e:c5:fe:80:0c:82:cd: 4c:2c:28:de:d1:a4:a9:2a:ff:38:eb:a7:2c:bf:4e: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:50:F7:76:D1:F0:7A:CC:4B:DE:FE:B5:B3:46:BB:21:AD:3A:5A X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0c:ad:35:ce:d6:62:cd:19:8a:93:d9:87:ee:c3:be:8c:d9: 54:2d:c5:58:1e:42:24:6e:db:57:77:c5:da:fd:52:86:97:bd: 2c:b8:6f:e5:c5:5f:06:23:a4:01:ba:05:ef:8a:1c:02:91:74: d7:a6:07:ae:f5:b5:56:c3:58:f6:5b:c7:76:db:9d:14:8c:ec: 76:5b:b9:45:7e:dd:87:0e:5a:1d:a2:62:65:3b:60:fc:79:bb: ec:ee:ea:8f:1e:f7:c5:7a:f6:b2:cd:b4:a8:3a:1a:2d:37:73: f6:1b:3d:47:88:19:6b:e2:3e:d2:bb:96:9b:b7:d0:3b:54:58: 74:7f:ca:fa:54:20:f8:16:69:88:bd:0a:93:e0:b7:05:a9:0a: fb:58:68:0a:4f:12:61:d4:ea:7f:de:91:77:6e:d1:84:ca:12: e3:46:c9:11:16:f3:93:11:cd:e0:cc:e2:69:6d:1d:b3:6a:5e: a4:bf:0f:da:0c:21:29:bf:2d:08:65:16:be:d1:fb:54:3d:7d: 59:e4:4e:e5:01:f1:c0:68:5c:f1:03:e3:f7:80:5c:bd:49:e1: 4a:b5:c3:ca:46:d3:a8:c0:a0:e3:ae:02:0d:a3:d5:28:63:c9: 16:72:fd:d5:28:32:fd:14:cf:7b:78:6c:13:ce:50:e1:f3:99: 0a:d7:80:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWUSJKV1yLbhkFJtylOhheRZk1NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTEyMDYwMjQyMjZaFw0yNTEyMDcwMzM0MjZaMDMxMTAvBgNV BAMTKDNEODI1MEY3NzZEMUYwN0FDQzRCREVGRUI1QjM0NkJCMjFBRDNBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGKnSYKBTyETCGY7WTQTqmtsM fGGc33mLlsHZchXuuGA4ENkslodpCRYW1jpZjqnurFBzmic7i6d4yOf2UcypKHYu cdTWpj1Wf+bQUuGPs3hRzmI2DEck0Gs7Cd+/i2pPy/yrjcmhe85NyB6kc7Xkmobu vZDyMihv14PybskR5SfMRBOeeBfiWhSXIw0qRi1sUqsTZdDR94SSSBfd8fHkvIQQ kY0FlKAPkgfEvZlzKpOH5CpqHqbL3Xy6oUd+A5WZ/oBuMpZYnfAnz14VnqnPCfkF 3OrWh5ZoqcTpsJ0WO5yiQ9vyb0t0TsX+gAyCzUwsKN7RpKkq/zjrpyy/TuePAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPYJQ93bR8HrMS97+tbNGuyGtOlowHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbwytNc7WYs0ZipPZh+7DvozZVC3FWB5CJG7bV3fF2v1Shpe9LLhv5cVfBiOk AboF74ocApF016YHrvW1VsNY9lvHdtudFIzsdlu5RX7dhw5aHaJiZTtg/Hm77O7q jx73xXr2ss20qDoaLTdz9hs9R4gZa+I+0ruWm7fQO1RYdH/K+lQg+BZpiL0Kk+C3 BakK+1hoCk8SYdTqf96Rd27RhMoS40bJERbzkxHN4MziaW0ds2pepL8P2gwhKb8t CGUWvtH7VD19WeRO5QHxwGhc8QPj94BcvUnhSrXDykbTqMCg464CDaPVKGPJFnL9 1Sgy/RTPe3hsE85Q4fOZCteAYA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:57 2025 by rpki-client