This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: IwERzrTtgSYMw8fEcjoafsLi3YM2YEBExw4LCpWLQDM= Subject key identifier: 42:D5:D4:8D:E3:50:C3:0D:EB:13:82:B7:7B:50:ED:AC:2D:59:2B:AE Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 66B8A003D07FE856FEACBD58B4DBDC7A32ECCF00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0345 Signing time: Tue 23 Dec 2025 04:10:03 +0000 Manifest this update: Tue 23 Dec 2025 04:05:02 +0000 Manifest next update: Wed 24 Dec 2025 05:45:02 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 2: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 3: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: 7k6egjKzznuhluzSGP9Iqmxpiew6/WX2sz+BlqxGTLc=) 4: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 5: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 05:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b8:a0:03:d0:7f:e8:56:fe:ac:bd:58:b4:db:dc:7a:32:ec:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Dec 23 04:05:02 2025 GMT Not After : Dec 24 05:45:02 2025 GMT Subject: CN=42D5D48DE350C30DEB1382B77B50EDAC2D592BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:bb:46:09:58:f7:56:32:8c:be:8a:9c:7c: 7f:04:ff:89:2a:a2:e0:37:32:19:aa:5c:02:b2:9d: 7e:6e:89:58:15:a9:5f:ce:b9:ba:da:44:eb:83:d8: 03:7a:ab:b9:9a:41:43:6a:36:dc:ad:14:b3:99:4b: 51:d5:ee:80:2e:0a:8d:49:6a:51:16:74:b4:cf:5c: d4:ea:17:a7:70:3d:17:6b:98:06:3e:fd:c8:4f:9a: 3f:c3:b1:52:43:61:49:ea:a5:fc:cb:87:ef:14:f9: c7:ac:59:9b:25:fc:ef:d4:8d:4a:12:17:80:28:ba: be:05:cd:db:cd:20:76:bd:ab:2a:4b:6e:ce:db:80: 7e:98:19:b0:b9:a3:76:67:de:cf:00:35:49:fa:51: f3:9b:4a:94:07:1f:c5:73:89:f4:4d:3d:e0:9c:7a: aa:fe:5e:ee:99:98:30:fb:b9:46:66:33:63:e6:44: f8:f0:e4:cf:50:df:ff:ce:41:39:58:ad:88:44:3c: 33:21:6c:e8:34:f6:8b:b5:0f:01:98:4f:9b:1f:30: 14:34:ef:d9:1e:12:96:e4:2a:2d:ab:89:13:84:48: b4:fb:28:4a:76:58:90:9d:c2:49:a4:e3:a5:49:16: ad:6d:a6:ef:ae:4f:b5:e6:d3:17:65:d1:d9:37:9f: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D5:D4:8D:E3:50:C3:0D:EB:13:82:B7:7B:50:ED:AC:2D:59:2B:AE X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3a:44:96:a3:54:cf:9b:49:68:9a:96:2b:e8:c5:a8:31:8f: 7d:4d:aa:6d:ff:17:d0:65:89:36:0e:e8:f5:d4:c6:e4:d8:1d: 71:fe:d9:59:1e:c9:2a:71:4e:17:98:09:f2:c4:d0:ef:54:44: c0:cf:3b:7c:01:e3:a2:95:6d:42:93:45:94:af:de:51:01:be: 10:0e:d6:da:f3:24:74:15:07:f1:b1:2a:b3:14:90:a6:7a:a8: fe:f5:92:8c:b9:f1:d4:f1:06:d0:28:7a:93:f9:19:2c:8e:40: d4:26:d1:8e:c0:91:f8:11:2d:af:c5:a7:b1:95:c1:19:cf:95: 08:99:62:98:03:8d:79:1d:20:c9:1f:4a:30:7c:30:b9:6e:d5: d0:fe:71:96:34:c1:00:e5:fb:ab:af:c0:87:a1:80:d5:82:15: b8:51:5a:bd:a1:32:06:43:83:43:e7:b6:e3:a6:79:8d:78:65: 4b:89:da:a2:0c:cf:23:75:8e:d5:27:35:01:84:bf:fa:9b:2a: 9f:33:0b:90:32:4e:03:80:76:cf:bd:86:6d:87:b5:c6:17:6b: 70:71:a6:f8:88:49:72:2f:af:c7:2a:bc:45:dd:40:61:96:37: 1f:18:8d:ab:6d:a7:57:0b:13:03:e9:89:16:e4:58:84:36:4f: 08:53:ba:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZrigA9B/6Fb+rL1YtNvcejLszwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTEyMjMwNDA1MDJaFw0yNTEyMjQwNTQ1MDJaMDMxMTAvBgNV BAMTKDQyRDVENDhERTM1MEMzMERFQjEzODJCNzdCNTBFREFDMkQ1OTJCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA7tGCVj3VjKMvoqcfH8E/4kq ouA3MhmqXAKynX5uiVgVqV/OubraROuD2AN6q7maQUNqNtytFLOZS1HV7oAuCo1J alEWdLTPXNTqF6dwPRdrmAY+/chPmj/DsVJDYUnqpfzLh+8U+cesWZsl/O/UjUoS F4Aour4FzdvNIHa9qypLbs7bgH6YGbC5o3Zn3s8ANUn6UfObSpQHH8VzifRNPeCc eqr+Xu6ZmDD7uUZmM2PmRPjw5M9Q3//OQTlYrYhEPDMhbOg09ou1DwGYT5sfMBQ0 79keEpbkKi2riROESLT7KEp2WJCdwkmk46VJFq1tpu+uT7Xm0xdl0dk3n1wzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQtXUjeNQww3rE4K3e1DtrC1ZK64wHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPzpElqNUz5tJaJqWK+jFqDGPfU2qbf8X0GWJNg7o9dTG5Ngdcf7ZWR7JKnFO F5gJ8sTQ71REwM87fAHjopVtQpNFlK/eUQG+EA7W2vMkdBUH8bEqsxSQpnqo/vWS jLnx1PEG0Ch6k/kZLI5A1CbRjsCR+BEtr8WnsZXBGc+VCJlimAONeR0gyR9KMHww uW7V0P5xljTBAOX7q6/Ah6GA1YIVuFFavaEyBkODQ+e246Z5jXhlS4naogzPI3WO 1Sc1AYS/+psqnzMLkDJOA4B2z72GbYe1xhdrcHGm+IhJci+vxyq8Rd1AYZY3HxiN q22nVwsTA+mJFuRYhDZPCFO67Q== -----END CERTIFICATE-----Generated at Tue Dec 23 18:05:54 2025 by rpki-client