This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft File: A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft (raw, json) Hash identifier: L/cSorHiMLc11UNNJRKHpGv8nLjoqJYPhyv2le05aTc= Subject key identifier: E9:FC:D4:83:67:77:31:3D:33:3C:A8:1F:C1:2E:20:F4:DB:E5:F6:D6 Authority key identifier: A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81 Certificate issuer: /CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681 Certificate serial: 3207951D11BBD63D0A5BC0105231EBF35AFF459C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer Subject info access: rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft Manifest number: 0297 Signing time: Sun 21 Dec 2025 20:24:14 +0000 Manifest this update: Sun 21 Dec 2025 20:19:14 +0000 Manifest next update: Mon 22 Dec 2025 21:56:14 +0000 Files and hashes: 1: 323830343a366463633a383930303a3a2f34302d3430203d3e20323730353536.roa (hash: 8yrRsyCDM+9yUwTmDX5QuXgIyJhKh8kzYwtKgCXSBSY=) 2: 323830343a366463633a3a2f33322d3332203d3e20323730353536.roa (hash: itmOhkfLxklmHqNDTjRVrMCUKTbybE0DwE+HIXyvTWc=) 3: A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl (hash: PzwTgpXiNd74C4qqNJQrbdjkSQQqAsUrgy2q2n2YnJ0=) 4: 323830343a366463633a383830303a3a2f34302d3430203d3e20323730353536.roa (hash: k8ezV1uJt2uXK6yqpYWugF6+uU1j4puoE9u88VujkCA=) 5: 3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa (hash: Gpf/tXyZICt+phsbh9jwR1ExPkNADbNeLUQZSEcPTR0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 21:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:07:95:1d:11:bb:d6:3d:0a:5b:c0:10:52:31:eb:f3:5a:ff:45:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681 Validity Not Before: Dec 21 20:19:14 2025 GMT Not After : Dec 22 21:56:14 2025 GMT Subject: CN=E9FCD4836777313D333CA81FC12E20F4DBE5F6D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:02:e3:88:0e:5c:3c:1b:f4:8e:78:66:b8: 48:00:31:43:5a:ab:63:38:ce:85:d7:6f:54:62:3c: c2:7c:42:53:9d:33:fd:e4:f6:0f:e2:a1:55:0e:20: d8:8b:f6:d4:a6:be:1f:d2:76:a4:68:a9:d2:e4:26: 47:bd:96:e0:7d:a0:84:63:71:92:25:54:94:5a:fd: ba:8e:f6:44:66:30:25:fc:ee:ad:3d:14:b3:f2:31: 93:02:c0:b0:98:ee:6e:96:39:ec:96:a2:15:8f:ae: 7d:da:1f:86:52:7f:25:b8:fe:62:f4:4c:7e:68:a9: a6:1a:da:68:19:ef:f0:2a:11:cc:28:5e:5d:8a:16: 4c:9b:c6:f5:03:ce:0a:e7:d8:c2:e7:0b:05:12:af: ed:78:3d:6c:81:f4:56:16:d0:82:1c:c0:08:f5:32: 36:cc:3b:a6:95:72:5b:7f:fb:60:e5:3b:5c:15:9c: 5b:76:45:0c:97:ed:39:b5:d4:22:d9:4f:a2:f1:6e: d2:52:f7:d3:51:40:f9:46:7f:58:2b:15:e8:80:82: 59:9f:2e:1f:86:2e:b4:fb:89:31:42:47:7c:15:d3: f1:da:65:a5:45:7a:1d:0c:94:1c:e7:59:c3:2d:84: 88:6a:5d:f8:c4:98:12:6f:49:cf:f5:fd:2a:7b:44: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:D4:83:67:77:31:3D:33:3C:A8:1F:C1:2E:20:F4:DB:E5:F6:D6 X509v3 Authority Key Identifier: keyid:A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f6:2d:28:f3:9f:af:f5:e2:14:f1:a0:32:3a:2c:51:e3:57: a8:c7:6a:27:82:22:75:72:81:50:a5:8a:2c:19:f3:fd:6d:73: 73:49:0b:e2:9f:53:95:33:d4:db:60:88:26:f4:a9:c0:a9:f9: a2:a3:cb:aa:9c:11:1b:17:c5:f4:1a:b3:71:db:8f:26:4c:9a: a9:74:b7:f6:63:d8:78:cf:8c:cd:06:60:75:d4:bd:c9:16:cc: a5:7f:86:1b:67:cc:c5:84:b1:95:51:ce:c9:43:ca:ff:92:aa: 88:a9:9a:69:f7:f1:3c:f4:e8:74:a2:20:53:55:5f:5c:c9:3e: 27:ac:9d:3f:e7:36:89:cc:c4:17:b4:57:e0:7a:bd:50:f6:1e: 96:f0:eb:89:7e:31:2e:28:1c:b7:67:f9:5e:8c:22:f4:68:50: 8f:23:ed:77:d4:24:d5:49:a4:48:51:c3:1b:02:5c:06:aa:84: e5:cd:27:3e:af:08:14:d1:58:ab:6e:ea:b2:2a:27:01:f1:97: d9:75:ef:97:b4:49:dd:65:54:a4:76:0f:03:d4:97:ca:9a:eb: 96:46:73:c3:c7:59:38:9f:30:24:59:75:7e:a5:a7:ed:1a:91: f7:18:a0:2b:69:cc:3c:b6:b1:14:cc:51:3c:ab:f6:4c:ce:44: 9d:01:83:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMgeVHRG71j0KW8AQUjHr81r/RZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc2OEU4MDcxQkE0MTE3NUZGQkYwRjgxM0ZEMzg1QjZG QTVCMTY4MTAeFw0yNTEyMjEyMDE5MTRaFw0yNTEyMjIyMTU2MTRaMDMxMTAvBgNV BAMTKEU5RkNENDgzNjc3NzMxM0QzMzNDQTgxRkMxMkUyMEY0REJFNUY2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbgLjiA5cPBv0jnhmuEgAMUNa q2M4zoXXb1RiPMJ8QlOdM/3k9g/ioVUOINiL9tSmvh/SdqRoqdLkJke9luB9oIRj cZIlVJRa/bqO9kRmMCX87q09FLPyMZMCwLCY7m6WOeyWohWPrn3aH4ZSfyW4/mL0 TH5oqaYa2mgZ7/AqEcwoXl2KFkybxvUDzgrn2MLnCwUSr+14PWyB9FYW0IIcwAj1 MjbMO6aVclt/+2DlO1wVnFt2RQyX7Tm11CLZT6LxbtJS99NRQPlGf1grFeiAglmf Lh+GLrT7iTFCR3wV0/HaZaVFeh0MlBznWcMthIhqXfjEmBJvSc/1/Sp7RPBfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6fzUg2d3MT0zPKgfwS4g9Nvl9tYwHwYDVR0j BBgwFoAUp2joBxukEXX/vw+BP9OFtvpbFoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREZ1SGFTMzZwcjh6elVQQWJSQWRHTkpjUjdLV2JLUTJ2a1hmd2phNHVt a1cvMC9BNzY4RTgwNzFCQTQxMTc1RkZCRjBGODEzRkQzODVCNkZBNUIxNjgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3NjhFODA3MUJBNDExNzVG RkJGMEY4MTNGRDM4NUI2RkE1QjE2ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REZ1SGFTMzZwcjh6elVQQWJSQWRHTkpjUjdLV2JLUTJ2a1hmd2phNHVta1cvMC9B NzY4RTgwNzFCQTQxMTc1RkZCRjBGODEzRkQzODVCNkZBNUIxNjgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArvYtKPOfr/XiFPGgMjosUeNXqMdqJ4IidXKBUKWKLBnz/W1zc0kL4p9TlTPU 22CIJvSpwKn5oqPLqpwRGxfF9BqzcduPJkyaqXS39mPYeM+MzQZgddS9yRbMpX+G G2fMxYSxlVHOyUPK/5KqiKmaaffxPPTodKIgU1VfXMk+J6ydP+c2iczEF7RX4Hq9 UPYelvDriX4xLigct2f5Xowi9GhQjyPtd9Qk1UmkSFHDGwJcBqqE5c0nPq8IFNFY q27qsionAfGX2XXvl7RJ3WVUpHYPA9SXyprrlkZzw8dZOJ8wJFl1fqWn7RqR9xig K2nMPLaxFMxRPKv2TM5EnQGDTw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:44:59 2025 by rpki-client