This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json)
Hash identifier: vDJGfsx0sF/L8GH93gQKN6lp6rTNxb31wdo0cui9Fnk=
Subject key identifier: 78:B1:23:13:26:B2:B4:67:D8:ED:67:8E:22:64:1F:61:07:28:07:F3
Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Certificate serial: 5F90D48607DA3BB5546636AC6524C761E92D06F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
Manifest number: 01A4
Signing time: Sun 21 Dec 2025 09:38:22 +0000
Manifest this update: Sun 21 Dec 2025 09:33:22 +0000
Manifest next update: Mon 22 Dec 2025 13:12:22 +0000
Files and hashes: 1: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=)
2: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=)
3: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=)
4: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: cpJfZ9HBrVghs75mbzTgEfwIUW9FedZnnbWXqLpR7ao=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl
rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 13:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:90:d4:86:07:da:3b:b5:54:66:36:ac:65:24:c7:61:e9:2d:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Validity
Not Before: Dec 21 09:33:22 2025 GMT
Not After : Dec 22 13:12:22 2025 GMT
Subject: CN=78B1231326B2B467D8ED678E22641F61072807F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:ac:e7:0f:0f:40:b0:89:3e:5e:37:b8:e4:
7f:6c:75:86:6c:cd:c4:6b:27:5b:03:2b:ce:11:4e:
cf:73:9c:14:ee:02:c4:3f:a4:d3:89:9a:9f:8d:16:
a7:8a:69:c4:e1:e7:2a:ba:b9:f3:97:f5:f2:0e:b4:
26:db:2c:81:1f:df:5a:6e:03:df:20:76:34:83:0c:
51:3d:1f:ab:63:e2:2b:c1:b6:c5:ba:61:7a:2a:6e:
16:28:8d:b0:ab:37:4f:81:73:2d:cf:39:b7:7a:63:
1b:dd:9c:4e:88:d3:67:bb:06:96:c9:1f:30:a8:96:
eb:0f:63:a5:1a:2e:49:fa:ba:29:b4:7a:5f:62:ed:
40:54:dc:cd:07:ff:11:8a:92:2d:60:a5:68:0f:22:
48:1d:f0:91:97:2e:6c:12:75:12:62:07:8c:e0:7d:
68:f5:63:e9:5f:91:e1:17:d9:c2:96:cc:b6:b0:20:
cd:53:5d:0d:c6:33:0b:fd:5e:20:31:13:67:f3:cd:
8b:99:75:8c:4c:df:bb:da:8f:6c:1d:3a:04:8f:7a:
b1:36:ef:08:78:d9:a6:c1:86:6d:df:1f:d8:b8:42:
56:1a:87:db:67:e3:fe:49:e3:60:ee:98:2c:39:57:
ad:03:a7:8b:d1:fc:4e:ef:f4:a0:55:73:dc:c0:56:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:23:13:26:B2:B4:67:D8:ED:67:8E:22:64:1F:61:07:28:07:F3
X509v3 Authority Key Identifier:
keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:f1:28:ca:d0:0d:4a:e3:20:f8:fb:13:d8:17:ec:ee:70:
df:59:19:02:50:89:8a:60:1e:29:2c:d5:34:b3:9e:2f:05:cd:
dd:68:da:76:04:f5:4f:f6:25:61:d5:30:0a:c7:22:a8:dc:71:
4e:e1:98:73:42:67:35:50:7d:bb:ea:33:a1:c7:cd:4b:68:ae:
63:3f:75:63:9c:a1:7c:8b:e5:73:be:cf:e5:4c:88:89:a3:99:
71:00:d0:6f:c9:a6:11:de:76:2e:a3:ef:dc:70:0c:07:df:c5:
92:4e:03:2b:59:19:3b:9d:c0:14:71:f8:a2:0f:20:1a:b2:4e:
46:b0:e5:58:5c:28:55:95:6e:4b:dd:42:6f:ef:e7:94:1a:5e:
87:f9:33:46:db:58:96:38:e3:09:ae:d7:2e:35:22:2d:da:cd:
f6:5d:2b:dc:c3:24:d6:66:e4:ab:66:ae:0e:f5:9b:ff:ff:74:
27:ae:45:24:17:bb:cc:20:84:1d:71:61:27:eb:ca:08:29:fc:
41:a6:3b:e8:dc:f5:fb:40:a5:91:39:95:5f:a3:6a:8c:f0:3e:
2e:0c:3c:42:8e:32:2b:15:8c:4a:5c:2e:e0:61:1b:e3:d2:76:
30:68:36:d5:7a:8b:70:22:04:e4:d8:89:4a:fc:37:18:d0:fe:
1b:5f:39:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX5DUhgfaO7VUZjasZSTHYektBvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC
REZDRUQ0NTAeFw0yNTEyMjEwOTMzMjJaFw0yNTEyMjIxMzEyMjJaMDMxMTAvBgNV
BAMTKDc4QjEyMzEzMjZCMkI0NjdEOEVENjc4RTIyNjQxRjYxMDcyODA3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUaznDw9AsIk+Xje45H9sdYZs
zcRrJ1sDK84RTs9znBTuAsQ/pNOJmp+NFqeKacTh5yq6ufOX9fIOtCbbLIEf31pu
A98gdjSDDFE9H6tj4ivBtsW6YXoqbhYojbCrN0+Bcy3PObd6YxvdnE6I02e7BpbJ
HzColusPY6UaLkn6uim0el9i7UBU3M0H/xGKki1gpWgPIkgd8JGXLmwSdRJiB4zg
fWj1Y+lfkeEX2cKWzLawIM1TXQ3GMwv9XiAxE2fzzYuZdYxM37vaj2wdOgSPerE2
7wh42abBhm3fH9i4QlYah9tn4/5J42DumCw5V60Dp4vR/E7v9KBVc9zAVpjrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeLEjEyaytGfY7WeOImQfYQcoB/MwHwYDVR0j
BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0
QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5
NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B
RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOQDxKMrQDUrjIPj7E9gX7O5w31kZAlCJimAeKSzVNLOeLwXN3WjadgT1T/Yl
YdUwCsciqNxxTuGYc0JnNVB9u+ozocfNS2iuYz91Y5yhfIvlc77P5UyIiaOZcQDQ
b8mmEd52LqPv3HAMB9/Fkk4DK1kZO53AFHH4og8gGrJORrDlWFwoVZVuS91Cb+/n
lBpeh/kzRttYljjjCa7XLjUiLdrN9l0r3MMk1mbkq2auDvWb//90J65FJBe7zCCE
HXFhJ+vKCCn8QaY76Nz1+0ClkTmVX6NqjPA+Lgw8Qo4yKxWMSlwu4GEb49J2MGg2
1XqLcCIE5NiJSvw3GND+G185Sw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:35:20 2025 by rpki-client