This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft File: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json) Hash identifier: IXv1B8jaMPX5v37baHHcZ7GZAKoQyJmv2P4GD7XHBU4= Subject key identifier: F4:B4:91:65:1B:7F:13:1C:A1:CE:E7:D9:71:C5:F6:52:31:88:35:14 Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Certificate serial: 28A962E023DDD41E426679068D66A4770D904E3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft Manifest number: 05 Signing time: Wed 24 Dec 2025 07:55:02 +0000 Manifest this update: Wed 24 Dec 2025 07:50:02 +0000 Manifest next update: Thu 25 Dec 2025 10:53:02 +0000 Files and hashes: 1: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: LlDvPG2lLa3WDVvqIQ/Vmu/Mvmnft3jjiy+4kcb6ZaQ=) 2: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=) 3: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 10:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a9:62:e0:23:dd:d4:1e:42:66:79:06:8d:66:a4:77:0d:90:4e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Validity Not Before: Dec 24 07:50:02 2025 GMT Not After : Dec 25 10:53:02 2025 GMT Subject: CN=F4B491651B7F131CA1CEE7D971C5F65231883514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:be:1f:f2:c4:cf:51:77:aa:97:90:51:5e: 59:83:34:bb:00:49:fa:85:7a:4b:46:eb:55:73:99: 42:00:e6:0d:cb:75:9d:b5:ae:26:49:c4:8b:d4:bf: b0:35:23:10:a6:d0:c3:34:85:56:44:de:9f:7e:b2: d3:b3:0d:30:6e:1e:7b:20:e6:99:96:6c:96:30:2b: 88:16:af:3f:46:8e:f9:76:3b:61:09:d1:6e:6e:f7: f6:72:f5:b4:9a:69:5c:05:fc:4b:b3:27:33:f6:62: 36:3d:e9:f7:10:8a:bc:48:57:57:d2:50:41:7d:a7: ff:0b:8b:85:5a:e0:b1:13:2c:8d:a6:90:9d:36:d6: 7f:85:dd:30:11:2d:2a:37:3a:06:f5:2e:63:5f:5d: cb:12:ef:24:08:ac:55:f1:f7:3e:e6:08:97:7d:a2: 72:d1:51:2f:72:b8:60:32:0e:8f:92:ea:7e:51:5e: 42:5a:0b:d6:65:36:48:b1:0b:32:d8:c4:db:99:3f: 5f:5b:fd:5e:82:a4:9d:b8:6b:08:83:2e:eb:08:96: 10:93:01:9d:2d:7c:98:7f:3a:a3:bc:22:a8:c9:77: 18:87:26:1f:45:43:76:40:5f:27:b7:1e:eb:a8:f9: 89:42:c9:8b:3a:15:51:9f:2d:37:e4:b8:3b:dd:d9: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B4:91:65:1B:7F:13:1C:A1:CE:E7:D9:71:C5:F6:52:31:88:35:14 X509v3 Authority Key Identifier: keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:54:75:b8:f5:8e:df:97:ff:8c:fb:66:4d:ac:7b:8e:81:4c: af:13:c9:3f:c5:6e:9d:f2:4a:e3:cb:a8:ed:26:d1:05:43:39: ad:f7:17:7f:c0:67:4b:a1:a4:f0:c7:d8:92:23:84:4a:f4:ed: 19:94:99:23:22:cc:6a:09:a7:3f:67:c1:22:76:a9:3c:ff:ff: 2e:42:71:53:63:12:b7:dd:37:25:b0:5f:ce:07:cc:3d:91:b3: ed:17:f3:32:fb:f8:7b:86:43:44:5f:d2:2c:85:b0:b6:62:35: 76:d4:20:09:28:3b:d6:18:66:f4:0d:7a:24:76:fe:08:ea:f1: 32:c2:32:5d:62:c4:e5:95:25:0f:5a:6a:ac:64:7a:f2:f3:0b: 33:89:43:bb:52:1f:fa:4d:37:5b:8e:03:d5:7b:eb:e5:a7:9e: 1f:d4:97:ce:8c:40:8b:e7:69:1e:b8:73:35:b0:75:04:3d:59: 67:5d:88:84:b0:ef:18:83:ac:18:d9:ec:1b:35:7f:2c:ac:1c: 26:2a:4c:c4:0d:af:02:22:32:d5:3d:64:c3:87:60:6f:1d:47: fa:64:f8:a8:5d:03:e5:cc:ba:57:4c:fd:b1:a7:ae:8e:66:71: 6a:b1:c5:a2:ec:48:c7:4d:6e:c4:40:9a:4f:b1:bb:ec:47:3e: ab:cf:fd:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKKli4CPd1B5CZnkGjWakdw2QTj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF QjkxQTA3QTAeFw0yNTEyMjQwNzUwMDJaFw0yNTEyMjUxMDUzMDJaMDMxMTAvBgNV BAMTKEY0QjQ5MTY1MUI3RjEzMUNBMUNFRTdEOTcxQzVGNjUyMzE4ODM1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBb4f8sTPUXeql5BRXlmDNLsA SfqFektG61VzmUIA5g3LdZ21riZJxIvUv7A1IxCm0MM0hVZE3p9+stOzDTBuHnsg 5pmWbJYwK4gWrz9Gjvl2O2EJ0W5u9/Zy9bSaaVwF/EuzJzP2YjY96fcQirxIV1fS UEF9p/8Li4Va4LETLI2mkJ021n+F3TARLSo3Ogb1LmNfXcsS7yQIrFXx9z7mCJd9 onLRUS9yuGAyDo+S6n5RXkJaC9ZlNkixCzLYxNuZP19b/V6CpJ24awiDLusIlhCT AZ0tfJh/OqO8IqjJdxiHJh9FQ3ZAXye3Huuo+YlCyYs6FVGfLTfkuDvd2Zl/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9LSRZRt/ExyhzufZccX2UjGINRQwHwYDVR0j BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMC9B RkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABlR1uPWO35f/jPtmTax7joFMrxPJP8VunfJK48uo7SbRBUM5rfcXf8BnS6Gk 8MfYkiOESvTtGZSZIyLMagmnP2fBInapPP//LkJxU2MSt903JbBfzgfMPZGz7Rfz Mvv4e4ZDRF/SLIWwtmI1dtQgCSg71hhm9A16JHb+COrxMsIyXWLE5ZUlD1pqrGR6 8vMLM4lDu1If+k03W44D1Xvr5aeeH9SXzoxAi+dpHrhzNbB1BD1ZZ12IhLDvGIOs GNnsGzV/LKwcJipMxA2vAiIy1T1kw4dgbx1H+mT4qF0D5cy6V0z9saeujmZxarHF ouxIx01uxECaT7G77Ec+q8/9Dw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:09 2025 by rpki-client