This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json) Hash identifier: y+nUrrWyGKh90ksym4QNUTsZS8/oXNelPpl2UyEKYG4= Subject key identifier: EC:19:95:91:FB:B7:9E:50:BB:31:DB:24:44:40:7B:EA:4D:3B:7A:A7 Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Certificate serial: 3AA3B6BD6E32EA28D61F01C97FF043A5883AB274 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft Manifest number: 02AF Signing time: Mon 22 Dec 2025 16:55:29 +0000 Manifest this update: Mon 22 Dec 2025 16:50:29 +0000 Manifest next update: Tue 23 Dec 2025 20:53:29 +0000 Files and hashes: 1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: 0nfaEfHwdQI5BdLajmRxzlZpzr/zR2hc07bBmvu/aWc=) 2: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: RUhPVJbcOr4gT219vmEfw5IpzZ4PVK7OTvfZxHJfvHY=) 3: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: E4agjj5PiQNiWxuQc5+DPLQ5eo9yRLbLsemGpSxKzmY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:b6:bd:6e:32:ea:28:d6:1f:01:c9:7f:f0:43:a5:88:3a:b2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Validity Not Before: Dec 22 16:50:29 2025 GMT Not After : Dec 23 20:53:29 2025 GMT Subject: CN=EC199591FBB79E50BB31DB2444407BEA4D3B7AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:bb:3e:8e:76:30:43:66:79:3e:30:15:e8: 9a:e4:43:ca:2d:db:00:8f:b3:6b:67:25:87:c8:3a: de:13:0a:17:61:42:10:93:73:c7:42:d8:c3:6f:47: 52:a8:ad:14:02:47:69:ff:89:1d:54:9c:94:4d:2d: 2b:db:29:f6:ba:74:6b:96:96:5d:32:64:9d:41:c0: e2:12:a5:eb:d8:4d:0a:8c:dc:b3:a9:ad:e0:c2:51: 7d:67:a0:fc:2b:c8:70:96:14:4c:c5:90:df:cf:52: 38:5c:3b:f9:a6:8c:1e:93:c0:11:7a:1c:aa:03:ff: bc:41:ae:8a:89:c7:56:55:26:59:67:1c:a9:05:c0: b9:81:af:c9:71:c8:a3:b5:05:be:57:5c:88:c8:b4: 47:03:2d:0f:e1:09:f5:f9:e5:73:42:bf:96:73:d1: c1:00:4f:65:35:2a:f7:30:79:a5:32:44:ea:03:48: eb:d5:c6:97:6f:7f:24:8e:42:65:f9:0d:f5:e0:83: fd:d1:05:7a:4c:03:52:2c:f3:0f:7a:96:31:ce:47: 3a:b7:b8:b5:f9:38:09:fb:8d:af:0b:1f:4c:62:ef: 12:a0:e2:c1:99:74:17:94:a5:6e:90:60:8e:1a:39: c5:68:8e:b8:d5:a2:91:3b:f3:bd:4f:82:a3:56:fc: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:95:91:FB:B7:9E:50:BB:31:DB:24:44:40:7B:EA:4D:3B:7A:A7 X509v3 Authority Key Identifier: keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:80:8d:1c:8c:a3:b0:22:71:d2:38:c7:cc:48:97:8a:f7:86: 73:c9:f6:90:3f:35:6f:aa:d2:1f:30:42:cb:1e:76:5b:b4:47: 43:ad:42:e6:c6:2b:a2:76:df:37:bd:51:ae:f3:b6:52:8a:85: a4:bd:b6:3c:82:72:33:86:03:54:39:ad:0b:b2:1b:c1:20:ca: f9:39:e5:a5:2d:7e:ed:19:1c:63:02:d9:e1:21:8f:7a:6c:5d: 83:54:a6:00:3c:e4:ac:9e:41:7c:86:82:ad:b1:e8:99:40:66: 93:a7:49:d8:d6:10:41:00:aa:3b:ce:e2:66:1d:66:b2:67:5c: 3f:0e:7a:1e:98:94:e4:4a:00:ec:d7:a8:dd:10:7b:af:8b:fd: 77:07:b7:7d:57:9e:69:45:d0:dc:c7:09:5a:79:d4:80:1a:c2: d8:d8:0b:c3:5a:58:fd:02:f9:f6:fd:b3:07:dd:db:77:bb:d9: 0f:8d:1c:3b:23:92:cd:de:09:a4:70:79:f4:df:1a:71:3b:96: 56:18:5f:41:16:9d:a8:ad:f1:a0:4c:64:b5:80:57:40:62:e2: b6:c4:76:f0:79:33:1f:27:f1:4b:d3:26:e2:c5:e1:d3:f2:9f: 83:4e:cf:ab:f5:94:7b:72:c2:8a:29:53:a1:a3:10:7e:dd:d4: 7c:ad:0b:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOqO2vW4y6ijWHwHJf/BDpYg6snQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwNTJEMzFGRTQwQjVGMzcwNjM3RTJDMEU0RjFBMThG RjA4Mjk1RjAeFw0yNTEyMjIxNjUwMjlaFw0yNTEyMjMyMDUzMjlaMDMxMTAvBgNV BAMTKEVDMTk5NTkxRkJCNzlFNTBCQjMxREIyNDQ0NDA3QkVBNEQzQjdBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNNrs+jnYwQ2Z5PjAV6JrkQ8ot 2wCPs2tnJYfIOt4TChdhQhCTc8dC2MNvR1KorRQCR2n/iR1UnJRNLSvbKfa6dGuW ll0yZJ1BwOISpevYTQqM3LOpreDCUX1noPwryHCWFEzFkN/PUjhcO/mmjB6TwBF6 HKoD/7xBroqJx1ZVJllnHKkFwLmBr8lxyKO1Bb5XXIjItEcDLQ/hCfX55XNCv5Zz 0cEAT2U1KvcweaUyROoDSOvVxpdvfySOQmX5DfXgg/3RBXpMA1Is8w96ljHORzq3 uLX5OAn7ja8LH0xi7xKg4sGZdBeUpW6QYI4aOcVojrjVopE7871PgqNW/DbJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7BmVkfu3nlC7MdskREB76k07eqcwHwYDVR0j BBgwFoAUWgUtMf5AtfNwY34sDk8aGP8IKV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1m TnAvMS81QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMDUyRDMxRkU0MEI1RjM3 MDYzN0UyQzBFNEYxQTE4RkYwODI5NUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1mTnAvMS81 QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0YCNHIyjsCJx0jjHzEiXiveGc8n2kD81b6rSHzBCyx52W7RHQ61C5sYronbf N71RrvO2UoqFpL22PIJyM4YDVDmtC7IbwSDK+TnlpS1+7RkcYwLZ4SGPemxdg1Sm ADzkrJ5BfIaCrbHomUBmk6dJ2NYQQQCqO87iZh1msmdcPw56HpiU5EoA7Neo3RB7 r4v9dwe3fVeeaUXQ3McJWnnUgBrC2NgLw1pY/QL59v2zB93bd7vZD40cOyOSzd4J pHB59N8acTuWVhhfQRadqK3xoExktYBXQGLitsR28HkzHyfxS9Mm4sXh0/Kfg07P q/WUe3LCiilToaMQft3UfK0LZA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:26:26 2025 by rpki-client