This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json) Hash identifier: R7wQBAUiIIZA6hdJ/JLgrd8/PgK8eZGyOSJwBLdOoZ4= Subject key identifier: 8A:FB:DC:99:CC:22:48:D7:91:89:58:36:9F:C5:28:16:24:0C:40:06 Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Certificate serial: 48B6BAD9EFCE836427E121F1EDBAF1191B4F1140 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft Manifest number: 0354 Signing time: Sat 20 Dec 2025 01:53:51 +0000 Manifest this update: Sat 20 Dec 2025 01:48:51 +0000 Manifest next update: Sun 21 Dec 2025 02:42:51 +0000 Files and hashes: 1: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: EMEyZPhWtrK8Nn7vBAQkthddNgiB/JWDu8Jhp5HFW+4=) 2: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: Cv/CYH8R4kueB9d5skXR/XvGpgGSxuwGpj0ARNbZVzM=) 3: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 02:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b6:ba:d9:ef:ce:83:64:27:e1:21:f1:ed:ba:f1:19:1b:4f:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Validity Not Before: Dec 20 01:48:51 2025 GMT Not After : Dec 21 02:42:51 2025 GMT Subject: CN=8AFBDC99CC2248D7918958369FC52816240C4006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:61:d1:f2:09:17:c5:2e:6b:29:fd:b6:76:35: 92:d1:ab:10:7a:fb:2a:15:e8:a3:fe:aa:ab:c4:e5: ed:7f:03:f3:86:a3:74:6e:bc:75:d3:42:c1:63:3d: 3e:e2:4b:2c:4f:b4:f2:ac:4e:45:98:e1:fb:fb:ce: 21:fa:0d:37:d6:6f:85:df:5d:cc:36:ba:4a:a7:9e: 0b:2e:bf:b7:a7:f7:d5:b9:07:24:55:75:8a:94:2e: 5a:b9:48:28:1f:51:59:95:8e:3f:00:44:85:8a:5e: 09:b8:e9:a6:68:60:df:2f:e6:41:60:28:73:8b:3f: a9:fa:03:4d:69:00:eb:ac:8e:2f:62:ce:a3:7e:eb: bb:41:ae:aa:01:80:e5:0b:c9:bd:42:24:d9:cd:a4: ba:44:c2:73:cd:9b:c6:ab:c6:32:60:89:4d:36:28: 27:9b:47:83:73:df:a2:6a:ba:36:74:53:e9:49:db: bd:3f:86:cf:94:d3:e7:13:82:74:46:ed:09:a2:7e: 74:c6:ab:8c:76:f9:7d:5f:d3:81:2d:c4:fa:17:e1: 19:e1:d2:e5:62:6e:11:5f:eb:6d:65:16:65:6b:1c: e1:7d:e8:18:f5:24:68:57:4a:37:96:3c:f4:84:13: 35:94:01:54:a5:1d:14:2b:9d:54:3b:0a:1a:12:06: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FB:DC:99:CC:22:48:D7:91:89:58:36:9F:C5:28:16:24:0C:40:06 X509v3 Authority Key Identifier: keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ce:b2:3b:05:bc:99:04:d1:4f:b3:5a:ff:0a:72:fd:22:21: 4b:37:06:55:d2:f8:56:93:f5:9c:d6:d9:8f:0d:95:65:dd:8a: fa:c0:2f:cf:b9:ad:05:1e:13:40:a2:00:e3:c1:a5:37:db:f2: ab:7f:d3:1c:7d:83:c1:c8:a2:5a:a6:1f:f5:b5:af:46:62:99: 5d:e7:77:9d:1e:3c:9a:27:3e:d1:cc:86:e8:04:cf:c7:fe:be: c3:02:0c:8d:40:54:42:db:29:c2:76:6c:bd:6b:53:4c:e9:a9: e8:36:2d:c3:cc:de:03:b7:30:e1:f6:0d:cc:0e:f0:82:01:e3: 65:66:b5:dd:a4:b7:5d:e4:54:4b:62:82:09:dc:fe:45:3f:cf: 42:10:5b:85:c9:f8:0c:ad:b4:53:cd:da:82:ed:ac:c7:8a:aa: 66:c8:e0:f1:37:67:f8:bb:01:b8:eb:c1:5e:98:21:27:99:bc: 6e:2b:9f:2c:1d:a8:84:81:42:8e:6b:81:f3:90:7a:e3:b1:12: 74:e6:d2:60:43:58:4d:8b:43:0a:80:2c:3e:77:0f:cf:13:15: b2:16:67:ae:8e:3b:bd:e4:3d:35:6a:bd:a7:9f:d3:7f:59:9c: b8:8e:c8:29:77:2c:48:24:a5:16:25:2f:75:c5:2f:75:9e:d7: 5a:72:15:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSLa62e/Og2Qn4SHx7brxGRtPEUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDQTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5 QkZFOTFFQzAeFw0yNTEyMjAwMTQ4NTFaFw0yNTEyMjEwMjQyNTFaMDMxMTAvBgNV BAMTKDhBRkJEQzk5Q0MyMjQ4RDc5MTg5NTgzNjlGQzUyODE2MjQwQzQwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyYdHyCRfFLmsp/bZ2NZLRqxB6 +yoV6KP+qqvE5e1/A/OGo3RuvHXTQsFjPT7iSyxPtPKsTkWY4fv7ziH6DTfWb4Xf Xcw2ukqnngsuv7en99W5ByRVdYqULlq5SCgfUVmVjj8ARIWKXgm46aZoYN8v5kFg KHOLP6n6A01pAOusji9izqN+67tBrqoBgOULyb1CJNnNpLpEwnPNm8arxjJgiU02 KCebR4Nz36JqujZ0U+lJ270/hs+U0+cTgnRG7QmifnTGq4x2+X1f04EtxPoX4Rnh 0uVibhFf621lFmVrHOF96Bj1JGhXSjeWPPSEEzWUAVSlHRQrnVQ7ChoSBqkJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUivvcmcwiSNeRiVg2n8UoFiQMQAYwHwYDVR0j BBgwFoAUr8qH5K0DW15MoO2hxMBCxpv+kewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFC eGcvMS9BRkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0E4N0U0QUQwMzVCNUU0 Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS9B RkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADc6yOwW8mQTRT7Na/wpy/SIhSzcGVdL4VpP1nNbZjw2VZd2K+sAvz7mtBR4T QKIA48GlN9vyq3/THH2DwciiWqYf9bWvRmKZXed3nR48mic+0cyG6ATPx/6+wwIM jUBUQtspwnZsvWtTTOmp6DYtw8zeA7cw4fYNzA7wggHjZWa13aS3XeRUS2KCCdz+ RT/PQhBbhcn4DK20U83agu2sx4qqZsjg8Tdn+LsBuOvBXpghJ5m8biufLB2ohIFC jmuB85B647ESdObSYENYTYtDCoAsPncPzxMVshZnro47veQ9NWq9p5/Tf1mcuI7I KXcsSCSlFiUvdcUvdZ7XWnIVTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:11:38 2025 by rpki-client