This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft File: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft (raw, json) Hash identifier: 9oLCZPkzH1VCoJWNfN+cNHIzDtM7IzgL8RPb3FhKvXk= Subject key identifier: AE:FF:90:C7:13:28:CC:FA:60:D4:A9:3C:71:D4:D2:9E:CB:40:BD:B0 Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 Certificate issuer: /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Certificate serial: 30C25F350D53FC4C30D051C6B93FEB5CC32BEF44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject info access: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft Manifest number: CF Signing time: Wed 24 Dec 2025 06:20:41 +0000 Manifest this update: Wed 24 Dec 2025 06:15:41 +0000 Manifest next update: Thu 25 Dec 2025 10:16:41 +0000 Files and hashes: 1: 323830343a376363303a3a2f33322d3438203d3e20323731353136.roa (hash: Y/bFQxEmatak+WdOEDmNCXV81gJbtzwfxCaukWu+JC8=) 2: 3139312e3234322e34342e302f32322d3234203d3e20323731353136.roa (hash: C5MjkKI8WR8yW/gmqOUvb7uzWMbYZ7XJCuts3sWaP28=) 3: 3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa (hash: +mkXeaWBvETVR9EqVxiUxNimAV0s2kSfzpDbh9PMIJU=) 4: 3139312e3234322e34322e302f32332d3234203d3e20323731353136.roa (hash: GWBpEjifIF3zr0IPEjZ4U9RGMhXuCxOIRrwP6DNm48E=) 5: 8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl (hash: Rez3XKfIUG+z+fuLBQ4w2Odw5y71fh92ZAS45pc6pf0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 10:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c2:5f:35:0d:53:fc:4c:30:d0:51:c6:b9:3f:eb:5c:c3:2b:ef:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100 Validity Not Before: Dec 24 06:15:41 2025 GMT Not After : Dec 25 10:16:41 2025 GMT Subject: CN=AEFF90C71328CCFA60D4A93C71D4D29ECB40BDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:3b:69:8d:99:78:69:e7:fc:9f:6d:2d:85: c9:70:67:1a:61:47:df:a3:33:08:92:d1:4e:a7:c2: c1:b4:5c:14:3e:17:07:a6:04:59:c0:62:1a:32:22: cf:cd:51:e5:ea:7a:c5:9e:34:2b:ed:e4:da:77:41: e6:37:5c:9b:73:f8:20:c3:95:1b:e5:bf:70:89:c9: 61:c8:3a:ee:4b:84:05:14:71:3f:88:5f:1b:7f:c2: b4:2a:e7:2b:d1:3a:1b:b4:cc:ab:53:49:35:79:f5: 09:bf:4b:c0:fa:a2:bf:5f:b1:29:79:bc:b2:57:26: ec:c7:4c:e4:8e:2e:82:3f:65:39:fc:76:92:f5:7e: fb:f8:6c:dc:8f:7f:f6:97:42:30:88:5e:a7:ce:da: 5f:90:79:7d:ad:dc:5c:f5:d9:2e:27:f9:5b:6c:93: 7b:63:01:2b:8b:05:a9:26:c8:bf:38:80:78:25:7a: 62:04:b3:45:21:a2:39:e9:f1:1b:a1:9e:b5:47:b9: a2:59:e4:a0:c2:ff:ff:ec:d7:d2:81:91:a1:9b:39: 9c:ba:c1:e4:13:5d:ff:3f:2c:2e:39:c0:f6:18:ba: 80:72:20:fa:c3:ff:5b:70:9b:6d:3e:ed:87:a4:e0: bd:1a:8f:d6:92:01:32:61:4d:43:4e:ad:81:9d:0a: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:90:C7:13:28:CC:FA:60:D4:A9:3C:71:D4:D2:9E:CB:40:BD:B0 X509v3 Authority Key Identifier: keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:be:46:3d:94:37:ff:9d:a7:4d:d1:99:04:95:33:1b:48:13: 57:6c:7d:d2:09:11:90:28:51:45:c4:2f:fd:18:df:d2:1d:f7: 86:bc:f3:1e:24:9d:55:93:86:02:92:72:39:23:10:78:91:52: f7:96:94:8a:19:d8:43:cd:15:08:0a:ca:33:39:b0:62:b6:26: 7b:f7:6d:d1:93:d2:28:d9:b7:23:99:99:d1:ac:44:c4:a2:fb: af:b9:03:6d:a7:19:fd:55:3f:9a:34:93:58:66:e5:f6:83:fc: cb:30:77:9d:df:1a:3c:59:c9:4e:f7:67:f9:58:8d:0c:fe:1a: 5f:6a:39:f0:4b:70:23:77:aa:6e:2d:80:fa:26:20:30:b9:5d: 8f:6b:13:5f:c9:05:e0:31:0a:58:10:c2:d6:90:08:da:2b:11: 25:3d:ef:1b:4a:f2:db:46:4c:ee:f1:40:e5:c5:2c:ea:46:a5: 80:93:59:a2:1b:bf:da:4e:c1:f4:5f:99:0c:77:c8:87:54:73: 7d:cb:5f:fd:f3:2b:20:98:11:d7:14:58:f5:88:3f:1b:39:a8: f4:93:47:a6:15:ca:35:7b:24:87:71:c6:02:e4:43:ba:d3:08: c1:54:93:b1:5c:0e:ef:52:07:e4:f2:c9:84:2a:dc:24:49:d2: 99:3c:70:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMMJfNQ1T/Eww0FHGuT/rXMMr70QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMDMwNDVGOUNCN0I2MTI5RkZEOEQ2QTI0RjJFOUUw NjcyRDEwMDAeFw0yNTEyMjQwNjE1NDFaFw0yNTEyMjUxMDE2NDFaMDMxMTAvBgNV BAMTKEFFRkY5MEM3MTMyOENDRkE2MEQ0QTkzQzcxRDREMjlFQ0I0MEJEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLDtpjZl4aef8n20thclwZxph R9+jMwiS0U6nwsG0XBQ+FwemBFnAYhoyIs/NUeXqesWeNCvt5Np3QeY3XJtz+CDD lRvlv3CJyWHIOu5LhAUUcT+IXxt/wrQq5yvROhu0zKtTSTV59Qm/S8D6or9fsSl5 vLJXJuzHTOSOLoI/ZTn8dpL1fvv4bNyPf/aXQjCIXqfO2l+QeX2t3Fz12S4n+Vts k3tjASuLBakmyL84gHglemIEs0Uhojnp8RuhnrVHuaJZ5KDC///s19KBkaGbOZy6 weQTXf8/LC45wPYYuoByIPrD/1twm20+7Yek4L0aj9aSATJhTUNOrYGdCijRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrv+QxxMozPpg1Kk8cdTSnstAvbAwHwYDVR0j BBgwFoAUivAwRfnLe2Ep/9jWok8ungZy0QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3Rx bmIvMC84QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRjAzMDQ1RjlDQjdCNjEy OUZGRDhENkEyNEYyRTlFMDY3MkQxMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3RxbmIvMC84 QUYwMzA0NUY5Q0I3QjYxMjlGRkQ4RDZBMjRGMkU5RTA2NzJEMTAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALb5GPZQ3/52nTdGZBJUzG0gTV2x90gkRkChRRcQv/Rjf0h33hrzzHiSdVZOG ApJyOSMQeJFS95aUihnYQ80VCArKMzmwYrYme/dt0ZPSKNm3I5mZ0axExKL7r7kD bacZ/VU/mjSTWGbl9oP8yzB3nd8aPFnJTvdn+ViNDP4aX2o58EtwI3eqbi2A+iYg MLldj2sTX8kF4DEKWBDC1pAI2isRJT3vG0ry20ZM7vFA5cUs6kalgJNZohu/2k7B 9F+ZDHfIh1Rzfctf/fMrIJgR1xRY9Yg/Gzmo9JNHphXKNXskh3HGAuRDutMIwVST sVwO71IH5PLJhCrcJEnSmTxwTw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:22:18 2025 by rpki-client