This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: LELCD5+gFTrTXaQj6Fp5v/IpFYaANKAbu42C9++N0qw= Subject key identifier: 43:D0:96:C2:7C:16:EE:97:39:5A:F2:AD:D8:09:AB:58:F2:5C:A3:54 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 341DC2914DB589B9A3C65118D15D56DFBFD9B8F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 0336 Signing time: Tue 23 Dec 2025 09:26:25 +0000 Manifest this update: Tue 23 Dec 2025 09:21:25 +0000 Manifest next update: Wed 24 Dec 2025 12:58:25 +0000 Files and hashes: 1: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 2: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 3: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: oJD/mZbOdN6QxCu5Z8qIiBslP35Vj2ZQAbg/DL9dEIM=) 4: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 10:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1d:c2:91:4d:b5:89:b9:a3:c6:51:18:d1:5d:56:df:bf:d9:b8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Dec 23 09:21:25 2025 GMT Not After : Dec 24 12:58:25 2025 GMT Subject: CN=43D096C27C16EE97395AF2ADD809AB58F25CA354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:64:0c:b5:03:63:71:ed:e9:e3:d9:bf:36: 4a:ee:eb:3f:09:16:8f:a9:51:e0:74:2d:df:a3:0a: 85:4b:cc:f2:c2:04:98:69:81:f9:a0:9c:fb:d7:08: 3b:46:1b:7e:0c:8e:0a:8c:9c:ca:22:1b:6d:c4:bb: 13:2e:e2:43:b9:1c:62:b4:2c:ac:d2:f2:99:46:61: dd:cc:ec:41:3c:bc:31:91:f7:ed:08:12:c5:96:df: 5b:a8:52:96:dc:26:c4:b4:09:40:ff:9c:88:f8:06: 75:e3:5e:03:dd:36:7f:24:72:cb:81:2d:68:85:2d: 19:a9:ed:26:dc:0e:73:21:21:e9:df:f3:c4:e1:72: 49:89:26:fc:48:df:8d:6a:31:4f:3a:30:b7:f3:3a: 50:de:c3:05:40:d1:52:ae:9a:da:c8:64:5f:2b:28: ea:5f:13:25:9f:b6:f7:a9:0d:20:d0:44:1f:75:bf: 4d:cc:9e:73:fa:b3:2c:e1:d8:c7:39:65:e5:ec:88: 7a:dd:2c:af:5e:d5:fe:20:6b:9e:75:65:7a:cd:58: c1:ff:23:77:8f:5a:bb:8b:23:f9:27:4b:7e:56:69: f3:20:80:70:0d:87:59:85:cf:0c:df:ac:29:13:14: 01:b8:65:7b:02:a8:b2:e0:b2:d1:9a:aa:a0:81:1f: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:96:C2:7C:16:EE:97:39:5A:F2:AD:D8:09:AB:58:F2:5C:A3:54 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1f:bf:59:76:d5:87:49:1d:8b:5b:bc:fa:9c:ce:5e:47:6e: 16:8c:75:45:77:50:48:2d:98:a7:45:f7:d1:69:e8:15:2d:9c: de:aa:d6:3a:93:a4:26:ce:61:b0:a3:97:0f:45:b4:01:f7:00: 50:36:f2:5b:5c:54:f7:1f:23:c5:70:89:5b:28:8e:e9:04:e5: b0:4b:79:1c:41:cf:19:10:c5:4c:40:a0:58:08:1e:95:0e:76: 46:8a:e5:e6:80:ab:ce:d0:40:17:fd:8e:e0:07:75:0c:1a:f9: b7:c3:e4:08:25:ba:20:8a:b2:3d:a2:aa:61:0f:7e:ac:f2:b0: 1d:18:4b:32:9a:67:2b:3e:c3:c8:61:df:31:4f:7c:c3:f3:25: b1:4f:89:ff:ae:d1:d2:78:0b:78:45:3e:67:a6:2a:39:ca:3d: 48:8b:db:a9:26:ae:c8:1f:60:e1:93:e2:81:11:14:71:c5:f6: 4b:44:2c:6a:16:40:51:42:d1:a7:ad:1b:00:e5:61:bc:c6:a8: ae:cb:df:4a:3d:a6:0b:ba:e9:1d:38:c1:08:bb:b8:f6:66:2a: 1e:a6:47:6c:5b:83:14:4c:92:52:60:f0:a5:c3:09:ad:cb:37: bf:21:73:e5:d9:76:a2:4b:a9:dd:db:13:4f:9a:de:90:4a:40: 05:71:30:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNB3CkU21ibmjxlEY0V1W37/ZuPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTEyMjMwOTIxMjVaFw0yNTEyMjQxMjU4MjVaMDMxMTAvBgNV BAMTKDQzRDA5NkMyN0MxNkVFOTczOTVBRjJBREQ4MDlBQjU4RjI1Q0EzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWoWQMtQNjce3p49m/Nkru6z8J Fo+pUeB0Ld+jCoVLzPLCBJhpgfmgnPvXCDtGG34MjgqMnMoiG23EuxMu4kO5HGK0 LKzS8plGYd3M7EE8vDGR9+0IEsWW31uoUpbcJsS0CUD/nIj4BnXjXgPdNn8kcsuB LWiFLRmp7SbcDnMhIenf88ThckmJJvxI341qMU86MLfzOlDewwVA0VKumtrIZF8r KOpfEyWftvepDSDQRB91v03MnnP6syzh2Mc5ZeXsiHrdLK9e1f4ga551ZXrNWMH/ I3ePWruLI/knS35WafMggHANh1mFzwzfrCkTFAG4ZXsCqLLgstGaqqCBH5QNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ9CWwnwW7pc5WvKt2AmrWPJco1QwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsR+/WXbVh0kdi1u8+pzOXkduFox1RXdQSC2Yp0X30WnoFS2c3qrWOpOkJs5h sKOXD0W0AfcAUDbyW1xU9x8jxXCJWyiO6QTlsEt5HEHPGRDFTECgWAgelQ52Rorl 5oCrztBAF/2O4Ad1DBr5t8PkCCW6IIqyPaKqYQ9+rPKwHRhLMppnKz7DyGHfMU98 w/MlsU+J/67R0ngLeEU+Z6YqOco9SIvbqSauyB9g4ZPigREUccX2S0QsahZAUULR p60bAOVhvMaorsvfSj2mC7rpHTjBCLu49mYqHqZHbFuDFEySUmDwpcMJrcs3vyFz 5dl2okup3dsTT5rekEpABXEwAg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:03:57 2025 by rpki-client