This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: mCtmXWAwG3NBdKpH+0UIhOSBSwOcLvFHKS954NVB+sA= Subject key identifier: CA:9A:54:71:43:81:01:7C:C1:C7:B8:51:A1:FA:32:12:CD:A1:11:26 Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 6C3115F06F562219DAB0A78227F6A63BB26EF3A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: CD Signing time: Wed 24 Dec 2025 15:27:59 +0000 Manifest this update: Wed 24 Dec 2025 15:22:59 +0000 Manifest next update: Thu 25 Dec 2025 19:09:59 +0000 Files and hashes: 1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: Lp7Fe1aLf11snGuTYknXuww4TVD2Y55QUwKYSOi+UEs=) 2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 17:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:31:15:f0:6f:56:22:19:da:b0:a7:82:27:f6:a6:3b:b2:6e:f3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: Dec 24 15:22:59 2025 GMT Not After : Dec 25 19:09:59 2025 GMT Subject: CN=CA9A54714381017CC1C7B851A1FA3212CDA11126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:ea:0a:0e:e0:c7:14:db:cf:4d:f5:8f:f5: 9d:f6:16:59:54:ac:cc:8f:d0:4d:37:fe:18:5a:b8: 5d:c5:f6:a2:d0:9c:9c:7a:76:d0:39:53:8e:4b:63: e6:ef:a3:6d:b7:f4:23:74:d6:ec:d3:1c:62:b0:66: b0:7c:a5:c7:f5:63:2e:12:cf:84:36:8d:78:ef:24: 8c:e4:23:e0:91:83:d1:c0:5f:0a:99:81:b4:a5:82: bb:0d:a1:77:5b:d9:f2:24:89:f2:c5:ed:1d:72:57: 9a:43:b0:af:a6:36:27:e1:f2:88:a3:70:4f:98:b3: 34:a4:52:e2:22:c1:bc:9f:10:a9:20:7e:8b:d9:94: bc:66:97:6d:d0:e5:6f:59:94:84:6a:fc:21:20:cf: e5:e3:33:0f:07:7d:7c:ac:ee:2d:9d:eb:10:e7:52: 7c:6c:b4:88:cc:f7:ec:42:b9:9b:c2:56:43:3e:52: a8:10:1e:f6:0d:5c:a9:4b:93:ed:45:fd:a7:72:16: 6a:93:24:e9:b6:b4:5a:0b:41:77:a3:c5:d3:ac:3a: 85:c9:b5:e2:e8:bd:8b:05:83:fd:0b:97:6f:a3:03: b0:3a:8f:f4:cd:11:05:6d:44:2a:6d:7e:50:00:4b: 9a:68:bd:91:44:b7:24:49:32:37:4b:ce:b0:88:4b: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:54:71:43:81:01:7C:C1:C7:B8:51:A1:FA:32:12:CD:A1:11:26 X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:b7:5d:47:b8:d0:c2:45:f6:4e:75:f9:6a:53:0c:54:c4:5b: 9a:34:f4:76:b5:a3:6c:2f:43:0c:af:8c:c0:1e:a9:ac:43:dd: 9b:63:66:c4:c8:c4:74:93:4a:c5:ee:e5:3c:39:78:8e:7c:98: 36:a8:88:63:69:b7:42:0d:04:66:a7:98:bd:27:37:58:d7:77: 0d:7f:8c:a7:f9:43:da:a5:02:66:56:2d:78:f5:f1:fb:89:f2: ce:1b:8f:1c:7f:66:ab:7c:92:e2:ea:dc:64:92:11:4f:0c:91: e2:cf:2e:5f:62:ab:c8:96:8f:e1:2a:e7:05:d5:13:9a:11:1c: ff:e3:42:7e:ab:12:9f:73:e2:a3:d3:15:5d:ca:e0:fb:92:d5: a1:f3:bb:96:73:1e:28:2a:25:78:c4:cc:f7:a1:f3:3e:ec:d9: bc:0e:85:2d:88:82:64:8e:d6:f2:51:27:85:99:2a:7c:f5:db: 32:02:5a:b2:a0:6f:b3:15:29:3a:3c:04:82:c5:37:84:c7:f8: 93:68:f3:10:bb:cb:ce:85:b0:45:3f:ca:48:8a:58:0b:5e:40: 3e:8a:c6:b3:04:5c:79:85:31:63:8d:6d:79:a8:a7:07:f4:0e: cc:8a:2d:41:6e:7e:1e:0d:2d:16:b1:06:06:86:8c:02:41:bf: e1:01:68:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbDEV8G9WIhnasKeCJ/amO7Ju86QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNTEyMjQxNTIyNTlaFw0yNTEyMjUxOTA5NTlaMDMxMTAvBgNV BAMTKENBOUE1NDcxNDM4MTAxN0NDMUM3Qjg1MUExRkEzMjEyQ0RBMTExMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8P+oKDuDHFNvPTfWP9Z32FllU rMyP0E03/hhauF3F9qLQnJx6dtA5U45LY+bvo2239CN01uzTHGKwZrB8pcf1Yy4S z4Q2jXjvJIzkI+CRg9HAXwqZgbSlgrsNoXdb2fIkifLF7R1yV5pDsK+mNifh8oij cE+YszSkUuIiwbyfEKkgfovZlLxml23Q5W9ZlIRq/CEgz+XjMw8HfXys7i2d6xDn UnxstIjM9+xCuZvCVkM+UqgQHvYNXKlLk+1F/adyFmqTJOm2tFoLQXejxdOsOoXJ teLovYsFg/0Ll2+jA7A6j/TNEQVtRCptflAAS5povZFEtyRJMjdLzrCIS9T1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyppUcUOBAXzBx7hRofoyEs2hESYwHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2bddR7jQwkX2TnX5alMMVMRbmjT0drWjbC9DDK+MwB6prEPdm2NmxMjEdJNK xe7lPDl4jnyYNqiIY2m3Qg0EZqeYvSc3WNd3DX+Mp/lD2qUCZlYtePXx+4nyzhuP HH9mq3yS4urcZJIRTwyR4s8uX2KryJaP4SrnBdUTmhEc/+NCfqsSn3Pio9MVXcrg +5LVofO7lnMeKColeMTM96HzPuzZvA6FLYiCZI7W8lEnhZkqfPXbMgJasqBvsxUp OjwEgsU3hMf4k2jzELvLzoWwRT/KSIpYC15APorGswRceYUxY41teainB/QOzIot QW5+Hg0tFrEGBoaMAkG/4QFo2Q== -----END CERTIFICATE-----Generated at Wed Dec 24 17:55:21 2025 by rpki-client