This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft File: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft (raw, json) Hash identifier: HVwHj1pFvkDY5HVKZwmGskunipqUdXhLV3c1QVUaBhM= Subject key identifier: DE:DF:94:EE:89:2F:8A:9F:6B:53:25:07:34:EF:5C:3B:13:0C:5D:E4 Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 Certificate issuer: /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Certificate serial: 59AA1A2A76323FEEC916CF40018B8E7E8EB226A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject info access: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft Manifest number: 032C Signing time: Fri 05 Dec 2025 20:13:20 +0000 Manifest this update: Fri 05 Dec 2025 20:08:20 +0000 Manifest next update: Sun 07 Dec 2025 00:03:20 +0000 Files and hashes: 1: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: +7GsRgs7NRIZR5WPMQvqtfPP2hg4idIHIzt0q9r+wrk=) 2: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl (hash: SMFuMmrCFoN/gj2XFqM822St1tHZMNqJ3lh2XAzsotE=) 3: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: 7nYq6K8fdw4ZRybGXDs4Kkd0F3fRmBUFACD2hQSjlMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:aa:1a:2a:76:32:3f:ee:c9:16:cf:40:01:8b:8e:7e:8e:b2:26:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Validity Not Before: Dec 5 20:08:20 2025 GMT Not After : Dec 7 00:03:20 2025 GMT Subject: CN=DEDF94EE892F8A9F6B53250734EF5C3B130C5DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:3d:04:d2:3c:41:96:97:b1:71:42:75:28: 79:67:cf:a2:60:12:49:4f:28:ca:cf:62:d3:15:a3: dc:0d:a7:a2:1d:f4:75:94:59:c9:1d:20:a9:3c:de: 3f:fb:12:ce:f1:ea:ee:87:0a:d2:16:ae:c8:34:11: 8e:c1:0a:c7:bd:96:5a:e5:8e:8b:39:ee:13:36:52: ab:8d:0c:91:0e:b3:ff:7a:f2:ee:cc:94:e0:90:de: e3:fb:2c:1f:8a:77:e9:5a:60:b8:a0:16:4a:1b:88: a8:0d:50:13:b7:99:44:38:97:ae:63:ea:36:06:ba: 75:b5:41:7a:3e:6d:33:3f:20:3a:90:c2:71:ef:7b: 88:7f:e2:89:8d:af:70:6f:bf:cc:05:ef:ab:2a:58: 5b:42:c1:be:d3:c7:3a:d2:09:11:dc:0e:16:e9:b1: 69:10:8d:ab:ea:df:ea:69:e2:86:fc:8f:92:0b:f5: 73:ed:12:ac:79:34:f5:05:e5:1d:93:7c:4b:fb:81: bc:87:13:83:17:6c:45:3f:8c:8d:e3:77:fa:d8:47: bb:bc:a2:f6:32:2e:4d:22:4f:fd:a5:eb:ff:01:99: 3a:27:27:31:c3:98:81:b3:31:8a:bb:34:57:25:e4: 02:49:36:01:13:0b:07:94:19:8a:62:97:04:70:d0: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DF:94:EE:89:2F:8A:9F:6B:53:25:07:34:EF:5C:3B:13:0C:5D:E4 X509v3 Authority Key Identifier: keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:93:90:65:47:6f:58:de:e6:01:88:4c:f1:5d:9e:38:42:6a: 84:26:b3:1d:3a:39:d0:e7:36:da:a3:82:2f:d8:bd:ad:78:84: 0c:79:98:ea:45:fd:16:c4:cd:71:3f:62:e6:6f:93:83:06:cb: 27:06:72:5e:99:5a:9e:c8:20:eb:34:23:68:6b:d3:1c:68:94: 51:bb:39:c1:a4:4b:58:73:e1:d2:34:69:ed:f5:af:8e:79:b6: 2c:b9:c0:dc:10:36:8d:da:3d:29:69:95:51:0b:d4:d7:4f:c1: 63:9c:46:04:f3:f3:5f:7b:4f:41:8a:0e:77:2a:d5:d7:2f:a3: fc:93:9a:a2:b2:fa:6b:cb:0f:e1:78:f8:a0:e2:4a:7c:b7:73: 90:61:d4:77:45:20:59:c7:ec:c8:51:eb:6c:34:7e:cd:fa:1c: 0d:40:9d:39:11:fe:72:0c:bc:b6:97:30:3f:ea:2d:0a:43:43: 0f:b3:86:85:a4:76:42:a9:9a:57:6b:f7:a9:33:fd:4c:39:3f: 65:c1:d7:10:ee:16:7a:9f:e6:60:aa:14:a8:66:a5:53:d6:f0: 6c:be:52:47:04:e0:63:2b:60:11:58:5d:02:69:21:b9:e3:85: e2:3e:91:29:b0:83:9b:45:4c:e4:e6:b5:02:e1:e3:b6:86:c4: 2b:ef:bd:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWaoaKnYyP+7JFs9AAYuOfo6yJqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ0M0FGMkZDM0EwQkQwOTVGRDA2MjYyNUM1RUNFMzRC ODRBOTUyMzAeFw0yNTEyMDUyMDA4MjBaFw0yNTEyMDcwMDAzMjBaMDMxMTAvBgNV BAMTKERFREY5NEVFODkyRjhBOUY2QjUzMjUwNzM0RUY1QzNCMTMwQzVERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDT0E0jxBlpexcUJ1KHlnz6Jg EklPKMrPYtMVo9wNp6Id9HWUWckdIKk83j/7Es7x6u6HCtIWrsg0EY7BCse9llrl jos57hM2UquNDJEOs/968u7MlOCQ3uP7LB+Kd+laYLigFkobiKgNUBO3mUQ4l65j 6jYGunW1QXo+bTM/IDqQwnHve4h/4omNr3Bvv8wF76sqWFtCwb7TxzrSCRHcDhbp sWkQjavq3+pp4ob8j5IL9XPtEqx5NPUF5R2TfEv7gbyHE4MXbEU/jI3jd/rYR7u8 ovYyLk0iT/2l6/8BmTonJzHDmIGzMYq7NFcl5AJJNgETCweUGYpilwRw0AOnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3t+U7okvip9rUyUHNO9cOxMMXeQwHwYDVR0j BBgwFoAUXUOvL8OgvQlf0GJiXF7ONLhKlSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR NkcvMS81RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENDNBRjJGQzNBMEJEMDk1 RkQwNjI2MjVDNUVDRTM0Qjg0QTk1MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJRNkcvMS81 RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtpOQZUdvWN7mAYhM8V2eOEJqhCazHTo50Oc22qOCL9i9rXiEDHmY6kX9FsTN cT9i5m+TgwbLJwZyXplansgg6zQjaGvTHGiUUbs5waRLWHPh0jRp7fWvjnm2LLnA 3BA2jdo9KWmVUQvU10/BY5xGBPPzX3tPQYoOdyrV1y+j/JOaorL6a8sP4Xj4oOJK fLdzkGHUd0UgWcfsyFHrbDR+zfocDUCdORH+cgy8tpcwP+otCkNDD7OGhaR2Qqma V2v3qTP9TDk/ZcHXEO4Wep/mYKoUqGalU9bwbL5SRwTgYytgEVhdAmkhueOF4j6R KbCDm0VM5Oa1AuHjtobEK++9ig== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:17 2025 by rpki-client