This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft File: 87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft (raw, json) Hash identifier: LPPtieL+qH2NEhdR5mpRyPROvfybYS0/gV/s4N5ODD4= Subject key identifier: BE:C8:5E:C3:78:EA:7B:E3:AA:A0:48:4E:15:4C:BF:7D:A3:9F:14:94 Authority key identifier: 87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29 Certificate issuer: /CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929 Certificate serial: 112340D3CF18F3B8D9DD085C3F66EB5968731DAE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer Subject info access: rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft Manifest number: 0322 Signing time: Sat 06 Dec 2025 04:24:18 +0000 Manifest this update: Sat 06 Dec 2025 04:19:18 +0000 Manifest next update: Sun 07 Dec 2025 07:29:18 +0000 Files and hashes: 1: 87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl (hash: oR0aGloEYbJ2iOxFL0y5p+lXGfv1ypD0LOEsgmZNCDM=) 2: 323830343a386639343a3a2f33322d3430203d3e20323733343939.roa (hash: dRrkcU6DKtPX/khP0O/WGga3UHvPMwxgO8xn/K1yGVk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:23:40:d3:cf:18:f3:b8:d9:dd:08:5c:3f:66:eb:59:68:73:1d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929 Validity Not Before: Dec 6 04:19:18 2025 GMT Not After : Dec 7 07:29:18 2025 GMT Subject: CN=BEC85EC378EA7BE3AAA0484E154CBF7DA39F1494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2d:df:59:f8:9e:e4:4d:27:e1:37:a8:87:cc: f5:c1:27:28:b7:dc:6e:22:21:42:0e:43:11:e0:ec: 9f:55:8a:b9:7d:d3:40:b0:12:68:4b:55:51:3e:0b: 61:66:af:2b:9e:17:85:2b:4d:5e:1d:bc:e9:e8:5d: 33:2c:cd:09:64:30:d4:59:89:93:dd:74:28:16:23: 71:42:0c:42:41:fd:af:8d:65:68:4d:15:24:f5:45: af:ef:3c:f8:32:08:78:43:cb:d1:74:08:0c:8c:0f: 87:4e:0c:66:45:86:94:a8:13:99:fd:6a:6e:da:a8: d9:a8:b5:19:79:11:5a:e6:fe:48:48:20:52:28:99: 62:99:63:e2:60:88:28:44:8a:29:62:66:c7:07:7f: 35:d4:6b:e1:6a:b9:58:d6:00:ec:f0:43:fb:92:52: 84:90:19:39:d4:83:c9:95:bd:6d:c5:91:e3:46:10: c7:8e:75:2d:89:e1:d0:73:0c:4f:85:d6:ce:68:82: b5:f6:1f:27:b4:e0:6a:9d:5e:eb:3e:8a:1a:6f:10: 8c:eb:4a:85:d4:96:f9:2f:c5:46:b1:f8:18:25:d7: 78:dc:e4:4c:d2:7c:d7:91:ec:b2:7f:c1:24:b1:d0: 20:02:4e:b5:44:46:26:28:d7:e5:1a:b0:64:71:48: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C8:5E:C3:78:EA:7B:E3:AA:A0:48:4E:15:4C:BF:7D:A3:9F:14:94 X509v3 Authority Key Identifier: keyid:87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:90:2b:34:d3:58:87:98:90:50:14:ee:be:98:ff:72:53:61: 5f:a4:26:e5:e1:21:01:54:a3:dd:a5:c4:ab:4f:df:6c:3d:28: 5a:e5:79:27:fe:7b:15:4d:72:f5:77:48:5e:11:8a:e8:6a:e4: f0:4c:ad:94:e4:44:e8:39:a5:bc:68:cd:83:71:4e:fa:d4:0f: af:ad:0b:b2:c6:02:f5:0d:76:9a:85:6e:0f:69:43:be:c9:c4: 5c:d8:cb:2c:b5:b2:64:88:e7:6b:0a:dd:46:5d:8f:3c:a0:b6: f4:e0:69:40:31:19:13:5e:cf:c1:48:ab:68:f9:ae:db:fe:4d: fb:f3:67:fe:35:43:03:c4:5e:82:3a:dd:1d:df:50:6a:63:db: 8d:27:81:8c:f7:28:e9:ae:e6:9a:a0:85:bb:eb:91:3b:c8:92: 1b:6d:9f:59:37:a1:fd:2d:1b:58:24:87:b4:01:e4:79:5c:82: 0b:24:54:0b:98:dc:d7:3e:92:3b:74:0b:6d:9b:3e:2f:9e:d0: 2a:b2:f8:b3:d8:89:9e:2e:72:db:37:c0:5b:74:5a:60:22:ca: 4a:e4:ac:ae:9e:c8:36:ac:75:72:c7:08:c3:0b:af:20:f3:2e: 3c:dd:55:da:5b:4d:5c:ac:6c:ec:1a:5a:b9:81:6a:89:7b:de: 07:83:d3:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUESNA088Y87jZ3QhcP2brWWhzHa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEQjJENDJGNkFBMjc1N0YzODIxRjQ1Q0VEODc0N0Iw QjY4QTkyOTAeFw0yNTEyMDYwNDE5MThaFw0yNTEyMDcwNzI5MThaMDMxMTAvBgNV BAMTKEJFQzg1RUMzNzhFQTdCRTNBQUEwNDg0RTE1NENCRjdEQTM5RjE0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Ld9Z+J7kTSfhN6iHzPXBJyi3 3G4iIUIOQxHg7J9Virl900CwEmhLVVE+C2FmryueF4UrTV4dvOnoXTMszQlkMNRZ iZPddCgWI3FCDEJB/a+NZWhNFST1Ra/vPPgyCHhDy9F0CAyMD4dODGZFhpSoE5n9 am7aqNmotRl5EVrm/khIIFIomWKZY+JgiChEiiliZscHfzXUa+FquVjWAOzwQ/uS UoSQGTnUg8mVvW3FkeNGEMeOdS2J4dBzDE+F1s5ogrX2Hye04GqdXus+ihpvEIzr SoXUlvkvxUax+Bgl13jc5EzSfNeR7LJ/wSSx0CACTrVERiYo1+UasGRxSLY3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvshew3jqe+OqoEhOFUy/faOfFJQwHwYDVR0j BBgwFoAUh9stQvaqJ1fzgh9Fzth0ewtoqSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0JSSzlwSHVCUEpyQlVVb280VTJoczFRWXRKdU1TN0daVE5ZaW1TTFhZ aUwvMC84N0RCMkQ0MkY2QUEyNzU3RjM4MjFGNDVDRUQ4NzQ3QjBCNjhBOTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3REIyRDQyRjZBQTI3NTdG MzgyMUY0NUNFRDg3NDdCMEI2OEE5MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0JSSzlwSHVCUEpyQlVVb280VTJoczFRWXRKdU1TN0daVE5ZaW1TTFhZaUwvMC84 N0RCMkQ0MkY2QUEyNzU3RjM4MjFGNDVDRUQ4NzQ3QjBCNjhBOTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArJArNNNYh5iQUBTuvpj/clNhX6Qm5eEhAVSj3aXEq0/fbD0oWuV5J/57FU1y 9XdIXhGK6Grk8EytlORE6DmlvGjNg3FO+tQPr60LssYC9Q12moVuD2lDvsnEXNjL LLWyZIjnawrdRl2PPKC29OBpQDEZE17PwUiraPmu2/5N+/Nn/jVDA8RegjrdHd9Q amPbjSeBjPco6a7mmqCFu+uRO8iSG22fWTeh/S0bWCSHtAHkeVyCCyRUC5jc1z6S O3QLbZs+L57QKrL4s9iJni5y2zfAW3RaYCLKSuSsrp7INqx1cscIwwuvIPMuPN1V 2ltNXKxs7BpauYFqiXveB4PTmg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:49 2025 by rpki-client