This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft File: 9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft (raw, json) Hash identifier: DeeNY/nAV3srnESJjQbwvYVWTJhGpSX10DzS6QHaYWI= Subject key identifier: C6:04:D2:BD:46:83:67:AC:A1:6E:0E:91:4E:CE:DA:4C:80:A0:A6:C9 Authority key identifier: 9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47 Certificate issuer: /CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047 Certificate serial: 5031F5E3F0E444B3440B6853E0469A9BA14562B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer Subject info access: rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft Manifest number: 02AC Signing time: Sat 06 Dec 2025 02:34:31 +0000 Manifest this update: Sat 06 Dec 2025 02:29:31 +0000 Manifest next update: Sun 07 Dec 2025 05:03:31 +0000 Files and hashes: 1: 323830343a373862633a3a2f33322d313238203d3e20323731323632.roa (hash: W8hsSOKjJTpzYWQXdLpDwkH1spfBNRqGKdniteFHpVU=) 2: 9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl (hash: SygIN9g2fg+CqFGGlONLWgq5t1qXi1Bm5ZGF1QQXzAs=) 3: 3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa (hash: kWIHzD0y5GXw8oi2jQKsjvmzMk3ObH8EiiM16pmOXtA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:31:f5:e3:f0:e4:44:b3:44:0b:68:53:e0:46:9a:9b:a1:45:62:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047 Validity Not Before: Dec 6 02:29:31 2025 GMT Not After : Dec 7 05:03:31 2025 GMT Subject: CN=C604D2BD468367ACA16E0E914ECEDA4C80A0A6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:74:3f:93:62:2b:51:34:84:81:7f:e0:2b: f1:c8:6f:fa:91:f5:67:c3:32:79:5b:fe:b8:56:0c: 43:41:41:f1:36:d3:5f:b8:35:22:41:f2:3e:24:6d: d9:40:57:1c:01:84:dc:57:59:c9:56:a6:33:4a:cf: 8c:13:1a:81:a3:d1:51:87:d8:22:11:b3:2b:6f:b9: a1:e8:c0:6c:cb:33:12:7c:ff:81:e7:0e:bf:57:99: cd:51:e9:d1:91:8f:19:e5:78:e1:3b:89:12:33:6f: b8:c5:95:d8:ac:81:0a:e1:1e:d7:61:68:6d:6d:14: e8:a3:7d:f0:fa:14:7a:fa:6e:30:87:37:31:46:48: 5a:5a:97:61:a2:02:f7:d4:27:47:1f:47:d9:0d:90: 73:0f:2f:75:0f:98:74:bd:87:2d:8b:77:1f:46:5b: 7e:94:19:f5:19:96:d9:d8:ee:91:55:76:38:7b:62: 5b:c1:d4:6a:da:af:0d:1a:d9:70:68:e9:06:0e:95: fa:a4:2c:ff:e8:09:1f:90:f8:51:5e:b2:04:d4:72: c4:25:e3:12:c4:1f:52:e5:eb:7a:57:82:3e:17:c2: d3:88:8f:92:af:3f:c2:d8:ce:2a:12:36:f5:97:cc: 65:e9:9c:13:04:4c:9d:c5:c4:ff:bc:7a:60:9b:dd: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:04:D2:BD:46:83:67:AC:A1:6E:0E:91:4E:CE:DA:4C:80:A0:A6:C9 X509v3 Authority Key Identifier: keyid:9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c8:b6:e8:e3:0f:c1:19:1c:09:7c:93:45:68:be:d6:fc:63: ee:a0:4f:c7:49:26:c8:c8:7e:fa:85:f9:e9:3b:28:9f:2c:cc: ee:cf:e6:76:20:17:47:77:1e:dd:07:6c:ea:ad:f2:d4:b8:c5: 3a:7f:53:3b:44:a6:e4:46:b5:50:8e:60:27:54:c9:98:4a:d7: ae:1a:b6:b7:4a:18:a6:b9:28:39:93:a8:e9:6c:dd:78:9c:c1: e3:5f:fe:e9:b3:e9:08:5f:2c:3c:40:12:53:38:b3:24:eb:78: ca:3c:46:a1:3b:8b:e9:cc:bf:5a:51:ac:7d:cc:7d:c1:e1:0a: 88:74:b8:63:82:5e:25:88:ee:8b:94:b9:42:28:f3:2e:68:2f: db:cf:fb:fb:0d:fe:9b:18:94:35:e9:a9:1e:5c:0d:c4:27:89: 83:1f:f2:9e:75:f4:81:11:49:0c:76:aa:2d:5f:4b:40:99:8e: c3:84:d1:0b:52:a2:c6:ed:4f:96:60:c5:a9:5b:ca:08:da:53: 0f:42:87:9e:df:ea:5e:55:a8:d4:c1:5e:a8:55:f9:1d:64:5f: 90:7b:66:b5:cc:03:56:3e:9c:00:87:4a:ca:c2:af:57:70:65: 4d:78:d9:0b:75:43:9f:b0:f5:6c:cc:d6:6d:44:66:67:c1:2b: d0:41:5f:9f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUDH14/DkRLNEC2hT4Eaam6FFYrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxN0FFMTJFNTRGRUM3QkYwMTVDOTRFQkQ4MTEwNjJE ODVENzA0NzAeFw0yNTEyMDYwMjI5MzFaFw0yNTEyMDcwNTAzMzFaMDMxMTAvBgNV BAMTKEM2MDREMkJENDY4MzY3QUNBMTZFMEU5MTRFQ0VEQTRDODBBMEE2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48nQ/k2IrUTSEgX/gK/HIb/qR 9WfDMnlb/rhWDENBQfE201+4NSJB8j4kbdlAVxwBhNxXWclWpjNKz4wTGoGj0VGH 2CIRsytvuaHowGzLMxJ8/4HnDr9Xmc1R6dGRjxnleOE7iRIzb7jFldisgQrhHtdh aG1tFOijffD6FHr6bjCHNzFGSFpal2GiAvfUJ0cfR9kNkHMPL3UPmHS9hy2Ldx9G W36UGfUZltnY7pFVdjh7YlvB1Grarw0a2XBo6QYOlfqkLP/oCR+Q+FFesgTUcsQl 4xLEH1Ll63pXgj4XwtOIj5KvP8LYzioSNvWXzGXpnBMETJ3FxP+8emCb3Z7nAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUxgTSvUaDZ6yhbg6RTs7aTICgpskwHwYDVR0j BBgwFoAUnheuEuVP7HvwFclOvYEQYthdcEcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9mWGk1VTk0SHg4am5mY0NUOEgzTXlRcWFZdEpZbXJLeDJHbUM3NGJvTXRZ LzAvOUUxN0FFMTJFNTRGRUM3QkYwMTVDOTRFQkQ4MTEwNjJEODVENzA0Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85RTE3QUUxMkU1NEZFQzdCRjAx NUM5NEVCRDgxMTA2MkQ4NUQ3MDQ3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZY aTVVOTRIeDhqbmZjQ1Q4SDNNeVFxYVl0Slltckt4MkdtQzc0Ym9NdFkvMC85RTE3 QUUxMkU1NEZFQzdCRjAxNUM5NEVCRDgxMTA2MkQ4NUQ3MDQ3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Qsi26OMPwRkcCXyTRWi+1vxj7qBPx0kmyMh++oX56TsonyzM7s/mdiAXR3ce3Qds 6q3y1LjFOn9TO0Sm5Ea1UI5gJ1TJmErXrhq2t0oYprkoOZOo6WzdeJzB41/+6bPp CF8sPEASUzizJOt4yjxGoTuL6cy/WlGsfcx9weEKiHS4Y4JeJYjui5S5QijzLmgv 28/7+w3+mxiUNempHlwNxCeJgx/ynnX0gRFJDHaqLV9LQJmOw4TRC1Kixu1PlmDF qVvKCNpTD0KHnt/qXlWo1MFeqFX5HWRfkHtmtcwDVj6cAIdKysKvV3BlTXjZC3VD n7D1bMzWbURmZ8Er0EFfnw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:31 2025 by rpki-client