This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: KLdC6zUXBfxXICJNZC1uZPs5t8nPOCe3QMRK516wSRg= Subject key identifier: 91:30:6A:95:01:6C:01:6B:18:C8:F1:72:C6:01:C8:1A:7C:EE:1B:55 Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 0862C8E80BBAB3797FB83F80C8D97635597A0772 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: 7A Signing time: Fri 19 Dec 2025 17:00:03 +0000 Manifest this update: Fri 19 Dec 2025 16:55:03 +0000 Manifest next update: Sat 20 Dec 2025 18:53:03 +0000 Files and hashes: 1: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) 2: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) 3: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: Q4fLGIAuzf/YlwXjd/8h6wsBoUhsi4tP5almWTT8S1I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 18:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:62:c8:e8:0b:ba:b3:79:7f:b8:3f:80:c8:d9:76:35:59:7a:07:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Dec 19 16:55:03 2025 GMT Not After : Dec 20 18:53:03 2025 GMT Subject: CN=91306A95016C016B18C8F172C601C81A7CEE1B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:cf:e7:b2:d1:6e:56:28:b0:ef:ce:e8:4a: 93:c8:de:b1:3c:89:5f:c7:b8:51:d0:a3:12:cf:e6: 5a:d6:af:e6:6f:57:6b:e2:24:ab:d3:7d:32:b8:7a: ef:7f:f8:0f:99:df:a5:3e:27:df:16:04:56:69:10: 67:96:87:e0:36:c4:ed:8a:2f:b6:33:0b:10:b0:11: 65:cc:b9:d7:fd:22:5e:bd:6b:13:9d:93:6c:92:81: 09:b1:e2:92:32:b7:72:a5:2b:14:fe:7d:9b:6c:c1: a7:d2:7c:21:cd:ba:e1:05:31:8a:12:06:20:c8:8a: 01:8d:67:04:66:9a:74:20:c3:fe:50:26:a9:8a:ef: 01:15:26:cd:aa:0d:d2:a2:e6:d8:b0:13:e1:79:fd: d2:dd:1a:40:ac:8d:c9:87:53:a6:8c:5e:de:85:6c: 67:d4:df:1d:9d:65:7d:fc:30:a9:c3:05:46:1d:22: 35:92:a4:d5:49:cc:68:61:e8:81:94:55:8f:dd:c5: ec:51:34:61:0a:c2:de:5a:09:56:eb:2a:a5:cb:65: 6e:89:c8:e0:d1:40:03:18:c6:82:54:96:e5:fb:8c: 72:77:7d:e6:bb:50:cb:5f:2b:96:6c:bb:1e:1e:81: 07:53:a2:94:9c:8e:53:e5:d0:c0:2c:b7:68:8a:b9: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:30:6A:95:01:6C:01:6B:18:C8:F1:72:C6:01:C8:1A:7C:EE:1B:55 X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e0:7b:71:39:dc:28:19:5e:b4:4d:96:98:79:30:45:b2:51: 23:fb:92:16:f2:fc:91:e3:b0:90:1a:ea:bb:2b:9a:15:24:15: 4c:65:5e:19:a7:e1:69:fa:eb:83:b8:37:00:65:8a:5d:54:44: c5:d8:7f:91:d8:4d:79:60:43:cb:e6:d2:e6:36:75:73:14:39: ce:95:72:0c:21:55:fe:fb:ae:5f:9f:4e:e8:3f:aa:e9:b7:8c: 78:55:c5:b4:0c:63:e5:36:f0:77:66:ce:6b:cc:6e:14:e6:18: 6c:82:62:b1:fd:1b:9f:3c:05:4f:db:4c:69:e6:bf:2c:ea:35: ea:19:b7:3b:95:7b:31:7f:8d:25:35:79:7a:a6:1f:11:d3:99: 58:72:e4:a7:41:9e:33:23:84:e7:a2:84:88:04:f3:1d:33:94: c7:63:fc:43:16:50:eb:89:7a:ff:2f:02:21:b5:3d:58:16:21: f8:b0:5f:7d:20:4f:83:cb:33:eb:17:22:4f:31:d0:a5:d6:0d: e0:7e:b4:15:12:dc:82:39:f3:9b:62:af:0f:d8:77:c9:b7:b6: da:1e:18:c5:58:2b:07:33:7a:1b:3b:80:05:d7:79:a0:ce:09: 2d:13:a2:2b:84:45:52:01:ae:90:28:79:cc:a3:1d:5a:73:52: 45:6b:3e:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCGLI6Au6s3l/uD+AyNl2NVl6B3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNTEyMTkxNjU1MDNaFw0yNTEyMjAxODUzMDNaMDMxMTAvBgNV BAMTKDkxMzA2QTk1MDE2QzAxNkIxOEM4RjE3MkM2MDFDODFBN0NFRTFCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqc/nstFuViiw787oSpPI3rE8 iV/HuFHQoxLP5lrWr+ZvV2viJKvTfTK4eu9/+A+Z36U+J98WBFZpEGeWh+A2xO2K L7YzCxCwEWXMudf9Il69axOdk2ySgQmx4pIyt3KlKxT+fZtswafSfCHNuuEFMYoS BiDIigGNZwRmmnQgw/5QJqmK7wEVJs2qDdKi5tiwE+F5/dLdGkCsjcmHU6aMXt6F bGfU3x2dZX38MKnDBUYdIjWSpNVJzGhh6IGUVY/dxexRNGEKwt5aCVbrKqXLZW6J yODRQAMYxoJUluX7jHJ3fea7UMtfK5Zsux4egQdTopScjlPl0MAst2iKuTMPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkTBqlQFsAWsYyPFyxgHIGnzuG1UwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk+B7cTncKBletE2WmHkwRbJRI/uSFvL8keOwkBrquyuaFSQVTGVeGafhafrr g7g3AGWKXVRExdh/kdhNeWBDy+bS5jZ1cxQ5zpVyDCFV/vuuX59O6D+q6beMeFXF tAxj5Tbwd2bOa8xuFOYYbIJisf0bnzwFT9tMaea/LOo16hm3O5V7MX+NJTV5eqYf EdOZWHLkp0GeMyOE56KEiATzHTOUx2P8QxZQ64l6/y8CIbU9WBYh+LBffSBPg8sz 6xciTzHQpdYN4H60FRLcgjnzm2KvD9h3ybe22h4YxVgrBzN6GzuABdd5oM4JLROi K4RFUgGukCh5zKMdWnNSRWs+hA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:37:43 2025 by rpki-client