This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json) Hash identifier: rbGByPTE/cRcKIJUQPQXXidcPQf7xzrpr8Eg3UwNVPk= Subject key identifier: A2:DF:7E:BA:6A:C1:D0:97:96:85:DA:07:FF:C5:93:CE:4C:93:32:D5 Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Certificate serial: 24D967250D42954F8027F0B881EBC2CE80257F4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft Manifest number: 0328 Signing time: Fri 05 Dec 2025 20:39:48 +0000 Manifest this update: Fri 05 Dec 2025 20:34:48 +0000 Manifest next update: Sat 06 Dec 2025 23:22:48 +0000 Files and hashes: 1: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=) 2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: biFPtXW+3KCc5H3bkJKCbbK4aZ4bdN0GHRV1gj62IaM=) 3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d9:67:25:0d:42:95:4f:80:27:f0:b8:81:eb:c2:ce:80:25:7f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Validity Not Before: Dec 5 20:34:48 2025 GMT Not After : Dec 6 23:22:48 2025 GMT Subject: CN=A2DF7EBA6AC1D0979685DA07FFC593CE4C9332D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:14:67:19:c3:61:65:e2:2e:ff:51:79:38: c8:c5:f7:ce:97:04:c1:ce:ef:19:bf:4a:46:19:76: 73:cb:16:db:48:ec:c4:ba:38:88:ad:e6:69:26:e2: 43:e8:8f:69:f4:5b:c1:fa:e6:91:ff:e1:bf:78:e1: 35:9c:5c:38:87:b1:07:6d:70:ab:75:8c:fe:36:bf: e7:a9:13:70:60:7c:9a:e2:01:00:2d:98:08:6c:86: 91:de:a6:c3:98:ea:fa:ec:f0:54:2d:01:f5:4f:a8: 08:7d:4e:73:70:32:cd:1c:75:8b:d8:50:ad:4d:35: 6e:af:b7:0a:f9:21:de:c7:29:03:75:61:ef:97:02: d2:15:11:ff:b8:26:60:88:04:75:ac:46:a9:be:74: 8b:d8:49:ba:5d:8a:48:a8:d6:16:5a:18:24:e4:43: 79:a3:ad:92:d5:79:b2:1b:83:c5:4d:76:28:74:56: f2:06:6b:6e:f6:0d:76:db:dc:53:69:af:8c:ba:b7: ea:c8:87:43:ff:90:d6:14:2e:71:90:f3:53:b3:5e: 51:70:c6:8b:82:ba:96:d3:5d:f5:20:ee:99:fd:cb: e4:21:99:01:37:b0:32:34:5b:5d:a4:0b:cd:6d:65: 03:ff:43:d9:ba:e3:6e:fb:bb:ac:16:94:af:b8:ef: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DF:7E:BA:6A:C1:D0:97:96:85:DA:07:FF:C5:93:CE:4C:93:32:D5 X509v3 Authority Key Identifier: keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8b:cf:de:21:41:c8:5e:1a:d3:ed:b1:e3:48:cd:d7:14:6e: a8:a5:19:dd:f7:81:86:b2:10:6d:f5:a6:84:ea:2d:12:a5:ca: 69:9a:5c:94:22:32:7f:a9:0c:c0:4f:35:0a:54:2a:2c:f5:c2: 56:f6:75:35:be:3e:fc:ba:bb:63:e3:1e:3e:b2:56:08:f4:e6: 36:fb:2a:03:b1:be:a7:de:40:48:e8:8e:21:a1:f5:e9:31:ae: e6:85:67:58:79:9f:ea:b7:1c:c0:8a:31:8c:7b:a3:53:d8:69: fe:22:b0:61:0c:4e:98:96:6a:38:44:be:67:65:07:16:45:c5: 98:2a:b0:a3:47:8a:98:7d:b5:79:97:3b:c3:7d:f8:2f:ad:5b: d4:15:f8:20:5d:66:1a:94:69:82:76:93:57:8f:3b:b6:34:a2: 86:40:33:b5:c1:17:73:0e:b9:6e:c1:82:6e:14:46:eb:9d:3d: d2:1c:48:cb:dd:38:d3:fe:cf:14:9b:a7:93:f1:fd:a9:eb:7d: 89:94:c5:5a:bb:3a:38:3b:3d:34:28:66:57:8f:9e:28:5a:28: 0a:0c:04:de:32:7f:2a:a3:84:fb:42:4f:4c:7b:cc:fa:29:dc: 3d:d3:9d:8c:a6:39:80:f7:30:a7:66:47:b7:31:92:bb:22:30: 6f:41:e5:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJNlnJQ1ClU+AJ/C4gevCzoAlf0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC MkI0MjJERjAeFw0yNTEyMDUyMDM0NDhaFw0yNTEyMDYyMzIyNDhaMDMxMTAvBgNV BAMTKEEyREY3RUJBNkFDMUQwOTc5Njg1REEwN0ZGQzU5M0NFNEM5MzMyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWBRnGcNhZeIu/1F5OMjF986X BMHO7xm/SkYZdnPLFttI7MS6OIit5mkm4kPoj2n0W8H65pH/4b944TWcXDiHsQdt cKt1jP42v+epE3BgfJriAQAtmAhshpHepsOY6vrs8FQtAfVPqAh9TnNwMs0cdYvY UK1NNW6vtwr5Id7HKQN1Ye+XAtIVEf+4JmCIBHWsRqm+dIvYSbpdikio1hZaGCTk Q3mjrZLVebIbg8VNdih0VvIGa272DXbb3FNpr4y6t+rIh0P/kNYULnGQ81OzXlFw xouCupbTXfUg7pn9y+QhmQE3sDI0W12kC81tZQP/Q9m64277u6wWlK+47z/tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUot9+umrB0JeWhdoH/8WTzkyTMtUwHwYDVR0j BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4 QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjYvP3iFByF4a0+2x40jN1xRuqKUZ3feBhrIQbfWmhOotEqXKaZpclCIyf6kM wE81ClQqLPXCVvZ1Nb4+/Lq7Y+MePrJWCPTmNvsqA7G+p95ASOiOIaH16TGu5oVn WHmf6rccwIoxjHujU9hp/iKwYQxOmJZqOES+Z2UHFkXFmCqwo0eKmH21eZc7w334 L61b1BX4IF1mGpRpgnaTV487tjSihkAztcEXcw65bsGCbhRG65090hxIy9040/7P FJunk/H9qet9iZTFWrs6ODs9NChmV4+eKFooCgwE3jJ/KqOE+0JPTHvM+incPdOd jKY5gPcwp2ZHtzGSuyIwb0HlFg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:23 2025 by rpki-client