This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: XmnID78DzP4BkpWzk8eVUO1/kBO3QDIu9oaO1Zp3UcQ= Subject key identifier: 38:8D:5A:B1:E1:60:86:E4:FE:A7:F5:3F:2F:C3:77:6C:6C:81:8B:5A Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 0AC50654014CCCABEA87D2E487BF8A72FFF133D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: 0111 Signing time: Wed 24 Dec 2025 08:51:42 +0000 Manifest this update: Wed 24 Dec 2025 08:46:42 +0000 Manifest next update: Thu 25 Dec 2025 09:45:42 +0000 Files and hashes: 1: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: N5s4NBOZePsT+7trpSfEYTvBVinqUx7eso4l/f66QGo=) 2: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 09:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c5:06:54:01:4c:cc:ab:ea:87:d2:e4:87:bf:8a:72:ff:f1:33:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Dec 24 08:46:42 2025 GMT Not After : Dec 25 09:45:42 2025 GMT Subject: CN=388D5AB1E16086E4FEA7F53F2FC3776C6C818B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:40:82:71:a9:87:2a:69:3b:99:16:c2:63: 21:8a:7a:94:e4:ed:15:39:1b:f2:4e:27:81:00:e1: 1c:36:93:ce:57:df:a0:5a:a6:d3:94:47:02:38:b6: 65:6d:0a:7c:c6:5b:07:50:40:ee:9c:cb:31:da:41: a5:5f:09:81:eb:c7:92:82:ff:1b:a9:63:c6:97:06: 97:57:13:cd:64:ac:57:d0:58:59:00:1b:f8:bb:fd: 96:44:73:ae:a7:9c:b9:ab:83:6a:8f:d1:82:ab:a4: 11:5c:9b:75:04:17:43:de:d2:55:72:a7:78:dd:a6: bb:12:5b:67:57:d0:08:b9:33:1b:df:20:84:87:98: b4:f6:15:07:0a:b6:72:ab:55:7b:ee:0a:74:e9:1a: 7a:8c:a7:64:a3:37:94:e5:3d:8a:12:20:d4:e7:e5: 9e:71:c2:11:2e:fe:3d:04:e7:c4:9e:26:ba:03:d2: cd:be:8a:31:c3:f8:48:ac:e9:72:f5:84:7c:09:ef: 6a:91:47:15:89:0b:5c:be:2c:ce:0a:29:b8:95:99: 00:8f:22:59:02:55:1a:c0:2d:aa:32:b6:2b:bb:1b: f4:46:02:9f:b9:ef:28:41:9d:27:cb:2c:f1:a2:b6: 34:72:33:d2:3f:c4:fc:d2:f7:8f:a8:a4:e6:cb:87: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:5A:B1:E1:60:86:E4:FE:A7:F5:3F:2F:C3:77:6C:6C:81:8B:5A X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b7:5d:98:58:d4:67:7f:b0:59:9d:c8:70:bf:8a:b0:b0:ee: 4f:31:45:03:de:14:52:f1:eb:fe:8d:96:49:a8:73:22:38:e0: f9:11:25:7a:aa:c2:12:85:59:90:1f:81:51:ea:b3:9c:72:6d: c5:fd:6e:e7:49:26:5f:cb:35:ff:e5:04:bf:80:0a:83:15:55: fc:9a:e6:7a:7e:91:4d:be:70:e7:ee:03:18:4d:73:f4:0f:31: cd:16:c2:f6:b8:f0:c4:9d:89:07:a4:ee:97:93:6c:9a:b5:55: dc:45:cf:8c:28:da:2a:cf:e5:aa:cf:da:ad:39:7a:47:ef:1c: c9:7b:83:19:3b:53:31:5f:7d:a2:62:10:f9:28:d5:c0:f3:23: c0:0c:e3:8d:a4:01:a1:a0:a4:23:bd:0e:9b:73:7f:d5:ca:23: 52:c4:64:4f:b9:4b:10:1f:28:52:ef:79:3d:45:fa:54:0c:fb: f5:1c:13:e3:a4:27:bf:19:22:8c:1e:89:ed:83:92:32:c4:86: 83:dc:cd:28:90:f8:b0:d4:54:07:3b:8f:ff:77:48:56:67:db: 6c:77:84:19:43:6a:09:60:10:f5:8f:e2:b9:94:72:78:d5:1c: ef:99:50:d3:57:55:43:25:35:27:91:cc:dd:9f:41:c3:a3:dc: 80:8e:ca:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCsUGVAFMzKvqh9Lkh7+Kcv/xM9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNTEyMjQwODQ2NDJaFw0yNTEyMjUwOTQ1NDJaMDMxMTAvBgNV BAMTKDM4OEQ1QUIxRTE2MDg2RTRGRUE3RjUzRjJGQzM3NzZDNkM4MThCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojUCCcamHKmk7mRbCYyGKepTk 7RU5G/JOJ4EA4Rw2k85X36BaptOURwI4tmVtCnzGWwdQQO6cyzHaQaVfCYHrx5KC /xupY8aXBpdXE81krFfQWFkAG/i7/ZZEc66nnLmrg2qP0YKrpBFcm3UEF0Pe0lVy p3jdprsSW2dX0Ai5MxvfIISHmLT2FQcKtnKrVXvuCnTpGnqMp2SjN5TlPYoSINTn 5Z5xwhEu/j0E58SeJroD0s2+ijHD+Eis6XL1hHwJ72qRRxWJC1y+LM4KKbiVmQCP IlkCVRrALaoytiu7G/RGAp+57yhBnSfLLPGitjRyM9I/xPzS94+opObLhzx5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOI1aseFghuT+p/U/L8N3bGyBi1owHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZrddmFjUZ3+wWZ3IcL+KsLDuTzFFA94UUvHr/o2WSahzIjjg+REleqrCEoVZ kB+BUeqznHJtxf1u50kmX8s1/+UEv4AKgxVV/Jrmen6RTb5w5+4DGE1z9A8xzRbC 9rjwxJ2JB6Tul5NsmrVV3EXPjCjaKs/lqs/arTl6R+8cyXuDGTtTMV99omIQ+SjV wPMjwAzjjaQBoaCkI70Om3N/1cojUsRkT7lLEB8oUu95PUX6VAz79RwT46Qnvxki jB6J7YOSMsSGg9zNKJD4sNRUBzuP/3dIVmfbbHeEGUNqCWAQ9Y/iuZRyeNUc75lQ 01dVQyU1J5HM3Z9Bw6PcgI7K9Q== -----END CERTIFICATE-----Generated at Wed Dec 24 14:27:24 2025 by rpki-client