This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.mft File: C494F91B923201E47C2C51FA711C2E14EE4DBD75.mft (raw, json) Hash identifier: FHADc6KWikBWFhD2ccM49rGoOqS5Sbqw2sVZHNBScVc= Subject key identifier: DF:EA:3F:88:A5:FB:0E:3B:A9:BB:CA:05:B2:C5:56:69:47:33:80:00 Authority key identifier: C4:94:F9:1B:92:32:01:E4:7C:2C:51:FA:71:1C:2E:14:EE:4D:BD:75 Certificate issuer: /CN=C494F91B923201E47C2C51FA711C2E14EE4DBD75 Certificate serial: 6114468B587AD240F1B8F82D4AF01BF518857E62 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C494F91B923201E47C2C51FA711C2E14EE4DBD75.cer Subject info access: rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.mft Manifest number: 0F Signing time: Fri 19 Dec 2025 01:06:48 +0000 Manifest this update: Fri 19 Dec 2025 01:01:48 +0000 Manifest next update: Sat 20 Dec 2025 03:41:48 +0000 Files and hashes: 1: C494F91B923201E47C2C51FA711C2E14EE4DBD75.crl (hash: r6tG+lkEWgCEPvZuS6NFnxXJFsGY3MTwuOaAFQEWXDo=) 2: 323830343a323361633a3a2f33322d313238203d3e20323634313737.roa (hash: UUFxwz0tHYBSyB2ofYfZDb7ZeUE3wV6z8DYjPFS7TPo=) 3: 3133382e39342e3233362e302f32322d3332203d3e20323634313737.roa (hash: sn6t/143+1N6m05a5gSRRwuAEK1bk9snV8UKYtOzP7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.crl rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C494F91B923201E47C2C51FA711C2E14EE4DBD75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 03:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:14:46:8b:58:7a:d2:40:f1:b8:f8:2d:4a:f0:1b:f5:18:85:7e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C494F91B923201E47C2C51FA711C2E14EE4DBD75 Validity Not Before: Dec 19 01:01:48 2025 GMT Not After : Dec 20 03:41:48 2025 GMT Subject: CN=DFEA3F88A5FB0E3BA9BBCA05B2C5566947338000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:d1:93:0b:12:1c:3b:38:2e:67:6e:a7:5a: d7:88:a3:6b:71:d6:00:34:4b:63:18:87:69:11:a4: 86:a0:b2:44:43:11:b9:17:12:e1:c3:bf:a2:e9:e1: 5b:dc:f3:5d:4c:df:e9:60:4a:8d:91:f5:e9:15:46: 9c:63:43:f6:d1:62:75:3d:49:f0:d4:e9:29:d0:43: f7:63:7f:fb:b9:5e:21:46:d4:69:a9:5b:5d:d1:e2: d5:69:b6:0a:e1:1e:58:46:94:22:56:a7:0e:bd:2d: 7b:81:96:03:fd:cf:fb:9b:1f:de:97:98:8c:c8:2d: a7:e2:91:6f:dd:c5:33:1d:b7:dd:8a:41:53:cb:e3: c2:9f:cf:72:09:d3:cb:42:6f:ec:0c:90:cf:af:da: a0:1c:44:11:d7:0f:81:53:e9:ea:3f:4f:90:11:1f: 8c:b2:f8:b1:5f:8c:78:da:b5:96:fb:cc:16:bf:29: d6:59:f4:46:f2:dc:45:f5:65:d1:80:dd:40:dc:50: 2b:e1:f7:45:ca:99:fa:79:36:71:49:8c:57:e6:a0: 98:8c:4d:91:6f:2e:f7:00:d4:0c:91:8b:71:c9:83: 7c:42:ee:19:3e:20:2d:c8:56:13:bd:12:39:af:20: b2:f0:65:76:59:1b:e8:3e:75:05:b3:5c:65:06:87: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EA:3F:88:A5:FB:0E:3B:A9:BB:CA:05:B2:C5:56:69:47:33:80:00 X509v3 Authority Key Identifier: keyid:C4:94:F9:1B:92:32:01:E4:7C:2C:51:FA:71:1C:2E:14:EE:4D:BD:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C494F91B923201E47C2C51FA711C2E14EE4DBD75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:77:5f:7b:b1:3b:ab:2e:da:15:f8:42:d0:72:54:a6:73:93: 26:39:02:28:48:e1:89:c1:2d:ef:eb:cd:9d:46:46:56:8c:e8: 67:af:f2:a0:cb:f6:5a:d3:b3:fe:b5:b4:8c:c9:31:63:7a:c6: 16:19:a9:6f:26:06:10:c0:ba:2c:a5:8f:a1:0f:0b:6d:a3:c4: 43:d7:98:ad:93:97:d2:5c:08:eb:8e:1f:e5:3a:a7:2a:1a:6a: f0:02:3e:b7:20:7a:bb:77:40:4d:83:17:31:70:d5:d3:f5:16: 4a:0b:1f:e9:88:30:86:14:f6:b5:36:43:cb:c6:5a:8b:36:d8: 67:3d:b4:60:55:20:8a:2c:5a:4f:31:a6:62:9b:da:9a:15:81: b4:cc:85:e1:c6:ce:4f:70:61:74:9b:ad:22:0f:34:3b:d6:37: e1:a6:aa:b8:cc:76:2e:42:3b:9e:f4:56:b9:58:46:9b:96:b4: 5f:eb:bc:21:a9:4a:ec:dc:47:4d:85:0e:dd:28:cd:a3:96:c7: 64:8c:bd:3c:1a:cd:72:c2:42:66:cc:8d:09:b8:db:6d:38:e4: 1b:5c:dc:51:94:f5:30:44:fe:a2:04:e6:01:f1:18:9c:d8:86: ab:d8:26:bb:3d:44:3c:74:31:c5:1b:44:f9:12:1d:d8:e5:a2: a1:3e:5b:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYRRGi1h60kDxuPgtSvAb9RiFfmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ5NEY5MUI5MjMyMDFFNDdDMkM1MUZBNzExQzJFMTRF RTREQkQ3NTAeFw0yNTEyMTkwMTAxNDhaFw0yNTEyMjAwMzQxNDhaMDMxMTAvBgNV BAMTKERGRUEzRjg4QTVGQjBFM0JBOUJCQ0EwNUIyQzU1NjY5NDczMzgwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLtGTCxIcOzguZ26nWteIo2tx 1gA0S2MYh2kRpIagskRDEbkXEuHDv6Lp4Vvc811M3+lgSo2R9ekVRpxjQ/bRYnU9 SfDU6SnQQ/djf/u5XiFG1GmpW13R4tVptgrhHlhGlCJWpw69LXuBlgP9z/ubH96X mIzILafikW/dxTMdt92KQVPL48Kfz3IJ08tCb+wMkM+v2qAcRBHXD4FT6eo/T5AR H4yy+LFfjHjatZb7zBa/KdZZ9Eby3EX1ZdGA3UDcUCvh90XKmfp5NnFJjFfmoJiM TZFvLvcA1AyRi3HJg3xC7hk+IC3IVhO9EjmvILLwZXZZG+g+dQWzXGUGh/HjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3+o/iKX7Djupu8oFssVWaUczgAAwHwYDVR0j BBgwFoAUxJT5G5IyAeR8LFH6cRwuFO5NvXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODRNUVZMU3laWFpqTVk4UGpoNGdpTXR2QjdqR2J0dVlieUtwSE1IWkZ1 WXMvMC9DNDk0RjkxQjkyMzIwMUU0N0MyQzUxRkE3MTFDMkUxNEVFNERCRDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OTRGOTFCOTIzMjAxRTQ3 QzJDNTFGQTcxMUMyRTE0RUU0REJENzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODRNUVZMU3laWFpqTVk4UGpoNGdpTXR2QjdqR2J0dVlieUtwSE1IWkZ1WXMvMC9D NDk0RjkxQjkyMzIwMUU0N0MyQzUxRkE3MTFDMkUxNEVFNERCRDc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmXdfe7E7qy7aFfhC0HJUpnOTJjkCKEjhicEt7+vNnUZGVozoZ6/yoMv2WtOz /rW0jMkxY3rGFhmpbyYGEMC6LKWPoQ8LbaPEQ9eYrZOX0lwI644f5TqnKhpq8AI+ tyB6u3dATYMXMXDV0/UWSgsf6YgwhhT2tTZDy8ZaizbYZz20YFUgiixaTzGmYpva mhWBtMyF4cbOT3BhdJutIg80O9Y34aaquMx2LkI7nvRWuVhGm5a0X+u8IalK7NxH TYUO3SjNo5bHZIy9PBrNcsJCZsyNCbjbbTjkG1zcUZT1MET+ogTmAfEYnNiGq9gm uz1EPHQxxRtE+RId2OWioT5bdA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:18:39 2025 by rpki-client