This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft File: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json) Hash identifier: s1LEhkoqTDuaKHVXbyubopEOLyae5z06oBj1OyBpGQc= Subject key identifier: 34:B9:34:08:CA:16:51:29:29:CE:B4:D4:04:E5:42:14:13:28:EC:AE Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF Certificate issuer: /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF Certificate serial: 11D89E73247A7EF983347D9390C467AB903CFDA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft Manifest number: 026E Signing time: Tue 23 Dec 2025 02:13:49 +0000 Manifest this update: Tue 23 Dec 2025 02:08:49 +0000 Manifest next update: Wed 24 Dec 2025 04:40:49 +0000 Files and hashes: 1: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: 8gZng/LcYVjRvdKcIWLphoxYezlVpCWANLcyK6msRE4=) 2: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: xPaRuE5rYjW1ARQTWN41V8yaBWsMJhK8QXRX3GWVWZY=) 3: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: qR6iS5F06BWnuM8HyC9ItrpXDfvJvjlt1MMd4yffj18=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 04:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d8:9e:73:24:7a:7e:f9:83:34:7d:93:90:c4:67:ab:90:3c:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF Validity Not Before: Dec 23 02:08:49 2025 GMT Not After : Dec 24 04:40:49 2025 GMT Subject: CN=34B93408CA16512929CEB4D404E542141328ECAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:8a:f4:4f:dc:90:01:27:a1:a5:d3:5d:ea: c1:9f:0f:3b:dd:92:e3:8d:5c:e7:89:0b:c0:1a:14: 9f:45:8f:f5:63:0e:bd:3f:63:58:34:71:00:f0:3e: 4f:01:bf:da:14:85:aa:7b:b4:6c:30:25:4d:34:c0: 8e:e2:60:1e:2e:c0:fd:6f:1f:dc:fd:17:43:cf:55: 01:da:b0:d3:e3:18:fc:64:6f:82:18:e1:97:01:25: 5b:06:1f:fd:60:fd:70:d5:b7:a1:00:bb:06:8c:be: cf:23:dd:76:f9:c1:e8:21:2c:04:41:7b:12:cf:80: ed:3a:00:bb:6f:62:ea:f9:6f:37:d5:9b:25:c6:96: 72:0f:21:f4:37:e6:52:e2:36:28:6c:d2:c5:63:f5: 7a:8b:63:bb:e0:b1:54:ea:a3:31:b8:57:0d:d3:d7: 69:32:11:5a:39:b0:c4:5c:88:7c:67:ce:d7:96:14: 5f:d0:0e:bf:ee:bc:19:4d:2e:02:92:ce:71:37:44: 11:db:ab:41:a2:b7:e2:02:32:02:49:40:20:ec:9d: e4:64:22:61:f4:fd:f7:2d:7e:86:a2:2f:85:f3:72: a9:12:f5:1c:15:27:16:c4:b9:43:d3:d5:89:56:67: e6:2e:d6:2c:43:04:eb:88:53:f8:86:72:ae:a4:1c: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B9:34:08:CA:16:51:29:29:CE:B4:D4:04:E5:42:14:13:28:EC:AE X509v3 Authority Key Identifier: keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:02:12:fe:23:c6:5c:57:c9:ac:18:ec:42:da:60:18:86:3d: 91:35:53:57:fa:7d:bf:6e:02:88:c7:9c:f0:da:c1:35:ed:63: b6:9a:49:dd:bd:c9:95:fc:cb:e6:67:08:26:81:78:f2:49:e9: 36:2f:16:a1:99:74:5b:6f:5c:cd:13:4f:27:2d:ea:4e:c6:b1: 68:42:30:ca:c3:fa:2d:01:3b:9c:10:45:96:b0:e1:75:c9:c6: a3:d0:57:90:02:0f:6f:ff:e7:09:21:1e:86:bc:ee:43:95:42: aa:b0:82:60:5e:a6:2f:94:0c:f9:c8:ca:ad:2c:f6:e0:2e:ca: cd:f6:07:1a:e0:d9:61:b7:ee:2b:39:67:c8:71:77:62:1c:82: 02:81:e4:e4:15:da:d1:ce:a6:e2:d2:e3:ad:7b:c8:7c:60:4a: 2d:bb:a6:2a:14:3f:d9:93:49:0d:c5:51:41:5a:08:10:1a:b3: 51:cc:ae:e2:71:12:69:d3:b4:0f:98:34:c6:52:fa:25:54:31: 4b:78:eb:3b:df:ef:91:e4:18:c9:d1:be:4d:b9:4d:46:46:91: 70:1d:2f:31:80:66:b9:9d:ad:2d:03:05:3b:7a:05:0b:7c:b7: ab:8a:2b:9a:b4:69:db:98:5f:e3:c4:d8:9e:89:a4:3d:0e:07: e9:eb:34:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEdiecyR6fvmDNH2TkMRnq5A8/aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGNTIwNEI0MTE2OUNCQkYyRjY4QTUwMEUwMzZGQkE2 QzNDM0JFRjAeFw0yNTEyMjMwMjA4NDlaFw0yNTEyMjQwNDQwNDlaMDMxMTAvBgNV BAMTKDM0QjkzNDA4Q0ExNjUxMjkyOUNFQjRENDA0RTU0MjE0MTMyOEVDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaYr0T9yQASehpdNd6sGfDzvd kuONXOeJC8AaFJ9Fj/VjDr0/Y1g0cQDwPk8Bv9oUhap7tGwwJU00wI7iYB4uwP1v H9z9F0PPVQHasNPjGPxkb4IY4ZcBJVsGH/1g/XDVt6EAuwaMvs8j3Xb5weghLARB exLPgO06ALtvYur5bzfVmyXGlnIPIfQ35lLiNihs0sVj9XqLY7vgsVTqozG4Vw3T 12kyEVo5sMRciHxnzteWFF/QDr/uvBlNLgKSznE3RBHbq0Git+ICMgJJQCDsneRk ImH0/fctfoaiL4XzcqkS9RwVJxbEuUPT1YlWZ+Yu1ixDBOuIU/iGcq6kHPhXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNLk0CMoWUSkpzrTUBOVCFBMo7K4wHwYDVR0j BBgwFoAUyvUgS0EWnLvy9opQDgNvumw8O+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZK RTkvMC9DQUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjUyMDRCNDExNjlDQkJG MkY2OEE1MDBFMDM2RkJBNkMzQzNCRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZKRTkvMC9D QUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAgIS/iPGXFfJrBjsQtpgGIY9kTVTV/p9v24CiMec8NrBNe1jtppJ3b3JlfzL 5mcIJoF48knpNi8WoZl0W29czRNPJy3qTsaxaEIwysP6LQE7nBBFlrDhdcnGo9BX kAIPb//nCSEehrzuQ5VCqrCCYF6mL5QM+cjKrSz24C7KzfYHGuDZYbfuKzlnyHF3 YhyCAoHk5BXa0c6m4tLjrXvIfGBKLbumKhQ/2ZNJDcVRQVoIEBqzUcyu4nESadO0 D5g0xlL6JVQxS3jrO9/vkeQYydG+TblNRkaRcB0vMYBmuZ2tLQMFO3oFC3y3q4or mrRp25hf48TYnomkPQ4H6es0EQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:42:31 2025 by rpki-client