This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json) Hash identifier: NOoJ/gbNW4AcsC1yg0n43y/t/bJmDVidfYDsUbXsmSA= Subject key identifier: 31:15:E0:9E:CF:6B:C3:4C:CB:80:EE:2F:CB:FF:C2:AE:8D:20:D3:6E Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Certificate serial: 4CB91E5ECC2C44C42F896B21FE2F3946A9B5F0E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft Manifest number: 016A Signing time: Mon 22 Dec 2025 17:07:06 +0000 Manifest this update: Mon 22 Dec 2025 17:02:06 +0000 Manifest next update: Tue 23 Dec 2025 19:50:06 +0000 Files and hashes: 1: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=) 2: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: TRoZpwea/I/GmPbZe+xSdOZvtnJSwX4mCN1NOTQ72A0=) 3: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=) 4: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=) 5: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 19:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b9:1e:5e:cc:2c:44:c4:2f:89:6b:21:fe:2f:39:46:a9:b5:f0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Validity Not Before: Dec 22 17:02:06 2025 GMT Not After : Dec 23 19:50:06 2025 GMT Subject: CN=3115E09ECF6BC34CCB80EE2FCBFFC2AE8D20D36E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:54:9c:48:ad:0c:72:b3:ff:e6:c9:82:24: c3:1e:d1:29:02:b1:81:38:d8:08:67:b5:a5:cf:a0: 6d:3c:f4:5b:53:4a:6b:19:3e:07:0d:1e:c2:65:4a: 39:51:19:20:00:88:e4:67:1b:7e:00:00:5e:ce:39: 0e:6c:07:1b:1f:3e:fe:f9:30:c1:fa:be:8a:33:bf: 9a:61:c1:f9:03:1f:0c:05:1e:ae:b8:9d:0f:c6:74: 02:78:c2:d7:3d:d6:88:cc:be:81:f0:ee:0e:13:d8: 77:a4:1c:f5:ab:ef:16:0d:fb:7c:41:e6:94:f9:66: e0:8a:af:a5:47:35:50:79:a0:91:53:08:c8:69:3d: d7:7c:fe:4f:fb:b1:9f:e3:32:26:74:ff:17:3d:65: d9:c3:44:03:3e:45:57:36:69:3d:0e:24:14:18:fc: 23:94:09:4f:4f:a0:6d:09:42:11:82:72:af:51:4b: 13:6f:87:c8:1c:ea:ae:6d:8b:08:23:13:cb:74:95: 7a:49:17:06:ba:b0:2b:35:7c:26:63:2f:42:0a:3c: e6:a8:34:10:08:6b:4b:62:08:6f:3e:36:e2:da:b9: 65:68:ed:a7:96:79:9c:9a:63:54:a0:0b:1b:8c:75: 7c:37:00:a7:fa:88:76:e0:35:9d:65:36:ac:2e:00: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:15:E0:9E:CF:6B:C3:4C:CB:80:EE:2F:CB:FF:C2:AE:8D:20:D3:6E X509v3 Authority Key Identifier: keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:43:10:30:1f:2f:e9:a6:1c:f7:62:aa:74:5f:e3:8e:cb:41: 28:92:ea:af:22:05:2a:3a:36:16:47:5c:88:fc:bc:aa:c4:60: 74:d5:35:9c:f8:7e:62:f4:dc:08:7b:62:7d:83:a0:6f:ca:c0: ae:0d:8a:81:a8:15:f4:59:6a:69:5e:7f:3c:76:42:bf:95:8d: 0b:83:b2:ab:28:f0:ab:04:32:0b:45:ba:1b:74:52:ef:95:39: 9c:b9:7d:9a:9c:16:61:76:8f:fc:5e:05:6c:ce:e8:3f:09:c1: 68:f3:19:20:b6:8c:fa:0e:15:6c:4e:e2:a0:3c:16:cb:3a:05: 22:5e:2b:7a:8c:c0:10:7c:45:1a:61:9c:05:57:2a:b2:10:9b: ae:e4:b1:4f:84:2d:b0:50:55:55:c1:c3:f8:08:80:89:1c:e7: 46:20:b7:75:2c:e6:02:69:6a:1d:c8:c9:4b:52:ab:36:38:d0: 87:81:62:0b:9b:07:2a:37:cd:52:a0:ef:e6:ff:73:15:54:f8: ad:3d:78:39:59:11:f2:7c:50:d6:ce:0f:46:bd:0e:79:2a:d4: 88:3f:54:39:72:40:e4:c2:88:72:cb:d6:03:1d:22:bf:a6:04: ef:cc:7c:97:13:2d:c4:b6:a3:ac:6e:11:a1:68:73:1a:0b:44: e3:05:53:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTLkeXswsRMQviWsh/i85Rqm18OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD ODlENDlGMzAeFw0yNTEyMjIxNzAyMDZaFw0yNTEyMjMxOTUwMDZaMDMxMTAvBgNV BAMTKDMxMTVFMDlFQ0Y2QkMzNENDQjgwRUUyRkNCRkZDMkFFOEQyMEQzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwlScSK0McrP/5smCJMMe0SkC sYE42AhntaXPoG089FtTSmsZPgcNHsJlSjlRGSAAiORnG34AAF7OOQ5sBxsfPv75 MMH6voozv5phwfkDHwwFHq64nQ/GdAJ4wtc91ojMvoHw7g4T2HekHPWr7xYN+3xB 5pT5ZuCKr6VHNVB5oJFTCMhpPdd8/k/7sZ/jMiZ0/xc9ZdnDRAM+RVc2aT0OJBQY /COUCU9PoG0JQhGCcq9RSxNvh8gc6q5tiwgjE8t0lXpJFwa6sCs1fCZjL0IKPOao NBAIa0tiCG8+NuLauWVo7aeWeZyaY1SgCxuMdXw3AKf6iHbgNZ1lNqwuANSlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMRXgns9rw0zLgO4vy//Cro0g024wHwYDVR0j BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8y MERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANkMQMB8v6aYc92KqdF/jjstBKJLqryIFKjo2FkdciPy8qsRgdNU1nPh+YvTc CHtifYOgb8rArg2KgagV9FlqaV5/PHZCv5WNC4OyqyjwqwQyC0W6G3RS75U5nLl9 mpwWYXaP/F4FbM7oPwnBaPMZILaM+g4VbE7ioDwWyzoFIl4reozAEHxFGmGcBVcq shCbruSxT4QtsFBVVcHD+AiAiRznRiC3dSzmAmlqHcjJS1KrNjjQh4FiC5sHKjfN UqDv5v9zFVT4rT14OVkR8nxQ1s4PRr0OeSrUiD9UOXJA5MKIcsvWAx0iv6YE78x8 lxMtxLajrG4RoWhzGgtE4wVTtw== -----END CERTIFICATE-----Generated at Tue Dec 23 01:57:01 2025 by rpki-client