This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft File: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft (raw, json) Hash identifier: wOduY0OuBOOHB13jvU8nOdwoPHvZbRVyfHZedwroUeI= Subject key identifier: D0:00:11:2F:76:B2:42:EC:5E:56:EB:D7:20:05:13:5A:2C:46:B0:FF Authority key identifier: 57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B Certificate issuer: /CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Certificate serial: 21C6EF57D3912A691351CBAC5FA3D310CBB96022 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft Manifest number: 02A8 Signing time: Sat 20 Dec 2025 09:35:56 +0000 Manifest this update: Sat 20 Dec 2025 09:30:56 +0000 Manifest next update: Sun 21 Dec 2025 13:16:56 +0000 Files and hashes: 1: 323830343a383165303a3a2f33322d3438203d3e20323732343833.roa (hash: gGpb7QOWhrxLz+03Ox3Po1Me5Z0eXwZv1Sn7CGLLb4c=) 2: 3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa (hash: xB1yM8uvGqhBpUylreV+SOfIooIymRzer1Ue3ghc1C0=) 3: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl (hash: 1oYD3gzi4hyQXqO7/ey7LyPXJHU6FzGzbQSY1bbHUgs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 13:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c6:ef:57:d3:91:2a:69:13:51:cb:ac:5f:a3:d3:10:cb:b9:60:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Validity Not Before: Dec 20 09:30:56 2025 GMT Not After : Dec 21 13:16:56 2025 GMT Subject: CN=D000112F76B242EC5E56EBD72005135A2C46B0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:b3:21:ba:e1:18:a6:ed:d3:d1:5e:7d:31: 1f:9c:e2:64:42:f7:33:aa:d1:9b:26:3e:88:2e:53: 98:0a:54:52:44:0c:ec:bb:14:b4:52:df:42:8c:f2: b7:8c:dd:c0:2a:63:c7:6f:14:8b:2b:92:69:e8:7b: 38:01:e6:06:f9:28:0c:d8:ba:91:ac:9f:df:d3:e8: 1b:26:3a:66:57:b0:3b:8b:cc:ae:11:4a:2d:49:5c: d5:23:fb:c0:93:3e:8a:55:8e:70:29:83:aa:98:81: 5f:db:2a:58:fe:96:8b:da:10:ad:16:51:db:3f:f4: 75:75:de:f6:9a:22:f9:ca:c6:7c:e8:18:c7:e5:7d: 2f:3e:29:1b:66:61:62:7f:e5:7e:b8:13:a0:d9:2e: ed:98:84:42:5b:20:ba:ea:2a:e6:a6:5d:04:c8:a0: 35:78:53:bb:bd:ef:d9:a2:fe:28:5c:33:33:9d:b2: 2f:b0:e4:4e:e4:b6:44:41:13:74:88:f5:92:25:37: 7d:11:68:40:06:f5:84:b1:95:a0:71:77:3b:f0:b0: a6:30:4f:db:15:27:85:ca:0b:1a:01:cb:e3:50:f3: 12:a1:31:3b:62:95:f8:01:a1:ae:68:fd:09:90:fe: 89:ba:95:bd:7a:bd:e8:14:5f:3b:9b:d1:9c:01:88: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:11:2F:76:B2:42:EC:5E:56:EB:D7:20:05:13:5A:2C:46:B0:FF X509v3 Authority Key Identifier: keyid:57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:45:97:25:e3:b9:77:55:58:74:b2:35:19:0f:73:3b:c6:27: 10:46:14:53:7f:b1:ed:f7:5a:9c:94:76:56:d0:49:f9:d3:08: 99:8e:61:8d:28:0a:15:71:07:61:4d:c2:10:fd:ae:f6:90:a4: cf:87:e0:4c:7f:e6:11:ec:75:03:2a:f1:bd:4e:a4:b1:1f:5f: 48:8b:a5:10:77:21:66:29:ba:36:c7:ff:20:66:3a:fa:20:8d: 1a:b5:cc:e6:00:7c:8a:d9:fb:10:63:aa:f1:3c:10:d4:bf:44: 77:47:14:68:5a:3f:06:bd:a4:b9:02:5c:d5:d1:75:0c:06:c7: 7e:2b:7b:c6:1a:f7:4b:01:d8:58:2e:bf:cd:0e:4b:e2:61:c2: b3:3b:30:86:3f:6f:9d:d8:c4:26:23:55:56:9b:e1:ab:f6:68: 45:f8:6a:2c:95:2d:ed:c7:a8:a3:a6:1d:2b:c2:c6:49:44:76: b1:5e:35:f7:f1:9b:58:fc:65:99:10:32:16:75:3e:b1:51:8b: 6e:d1:db:cc:42:6d:8f:38:b3:e8:04:9a:8f:d6:71:4e:75:68: e5:1e:72:4b:09:59:d3:e3:1d:34:ce:1a:b2:40:7f:f0:05:fd: ba:18:22:a1:b1:f3:92:6c:81:19:7d:9d:09:b5:7d:09:37:3e: 31:4f:27:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIcbvV9ORKmkTUcusX6PTEMu5YCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcyNURGQjJEQzI3ODZFNEZDNTZCQTBDMTE1NjcwMzJF QTM4OUUyQjAeFw0yNTEyMjAwOTMwNTZaFw0yNTEyMjExMzE2NTZaMDMxMTAvBgNV BAMTKEQwMDAxMTJGNzZCMjQyRUM1RTU2RUJENzIwMDUxMzVBMkM0NkIwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3frMhuuEYpu3T0V59MR+c4mRC 9zOq0ZsmPoguU5gKVFJEDOy7FLRS30KM8reM3cAqY8dvFIsrkmnoezgB5gb5KAzY upGsn9/T6BsmOmZXsDuLzK4RSi1JXNUj+8CTPopVjnApg6qYgV/bKlj+lovaEK0W Uds/9HV13vaaIvnKxnzoGMflfS8+KRtmYWJ/5X64E6DZLu2YhEJbILrqKuamXQTI oDV4U7u979mi/ihcMzOdsi+w5E7ktkRBE3SI9ZIlN30RaEAG9YSxlaBxdzvwsKYw T9sVJ4XKCxoBy+NQ8xKhMTtilfgBoa5o/QmQ/om6lb16vegUXzub0ZwBiHm3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0AARL3ayQuxeVuvXIAUTWixGsP8wHwYDVR0j BBgwFoAUVyXfstwnhuT8VroMEVZwMuo4niswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6 VFIvMC81NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MjVERkIyREMyNzg2RTRG QzU2QkEwQzExNTY3MDMyRUEzODlFMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6VFIvMC81 NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEEWXJeO5d1VYdLI1GQ9zO8YnEEYUU3+x7fdanJR2VtBJ+dMImY5hjSgKFXEH YU3CEP2u9pCkz4fgTH/mEex1AyrxvU6ksR9fSIulEHchZim6Nsf/IGY6+iCNGrXM 5gB8itn7EGOq8TwQ1L9Ed0cUaFo/Br2kuQJc1dF1DAbHfit7xhr3SwHYWC6/zQ5L 4mHCszswhj9vndjEJiNVVpvhq/ZoRfhqLJUt7ceoo6YdK8LGSUR2sV419/GbWPxl mRAyFnU+sVGLbtHbzEJtjziz6ASaj9ZxTnVo5R5ySwlZ0+MdNM4askB/8AX9uhgi obHzkmyBGX2dCbV9CTc+MU8neg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:25:04 2025 by rpki-client