This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: WBRoR60iW6dvCvSgEGtve0hYlII0RW53gFkFLWu5MmE= Subject key identifier: 8F:D3:8E:B8:9F:5A:C3:5A:B4:B0:33:84:89:9E:27:03:9F:D6:6A:B1 Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 35E8AA0EC350AACECFEE0AC1E79E7BD81B2FC872 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 033F Signing time: Mon 22 Dec 2025 19:25:40 +0000 Manifest this update: Mon 22 Dec 2025 19:20:40 +0000 Manifest next update: Tue 23 Dec 2025 20:35:40 +0000 Files and hashes: 1: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) 2: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) 3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: iPGgP3NeKvz25GyOyXUYEKNgoWhKyWLUeuEGr3k/4CA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e8:aa:0e:c3:50:aa:ce:cf:ee:0a:c1:e7:9e:7b:d8:1b:2f:c8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Dec 22 19:20:40 2025 GMT Not After : Dec 23 20:35:40 2025 GMT Subject: CN=8FD38EB89F5AC35AB4B03384899E27039FD66AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:bb:a4:cf:62:f9:fa:c6:de:3b:5c:1e:32: a1:bc:bb:54:b9:d0:8c:d2:08:90:fb:0e:0e:00:e0: db:60:59:aa:8a:ac:91:d3:0c:fb:98:50:5b:57:bb: 99:fb:90:71:76:32:5e:59:1a:d7:4c:15:0e:e5:23: 6c:a8:2f:4e:4d:ad:fd:f7:cf:8e:87:9b:f7:ad:4d: cc:e0:5f:67:58:66:9f:40:d6:c8:70:e6:ae:10:82: e7:1f:dd:b0:da:54:1a:a0:c1:21:c6:fe:e0:7f:b2: d9:21:d8:9b:6e:1c:2b:54:36:57:07:fd:3f:4e:0c: 58:55:d9:a1:63:57:90:43:a0:0c:2b:7f:c1:c0:0f: ef:1c:d0:83:fd:4b:bb:7d:d7:16:59:5f:6a:f4:ae: 33:33:5f:51:1f:ca:55:0b:e4:21:2d:8a:12:b3:fe: 94:13:a6:3e:78:74:fc:89:de:9c:83:99:f3:c0:f5: 02:9d:5b:51:8f:9a:ba:c9:b9:b4:f3:a2:92:d6:f8: 6b:cf:d6:ea:ce:74:5d:6c:df:53:19:fd:8e:d9:e3: a4:37:77:f8:44:64:83:25:d4:45:e9:42:34:b4:a5: 1a:eb:05:12:80:9a:02:1f:d2:92:c1:02:32:0b:a6: e8:f9:3a:d0:57:53:69:89:9c:67:db:b4:a0:fc:48: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:8E:B8:9F:5A:C3:5A:B4:B0:33:84:89:9E:27:03:9F:D6:6A:B1 X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d0:3d:a5:d6:81:f0:42:d6:89:b8:0c:9d:d9:32:2f:54:36: 4d:6e:e2:e6:38:a9:d0:83:cf:6d:97:ab:e0:6a:08:cf:b8:fe: 65:e3:b7:22:90:4c:cd:4e:df:f3:81:4d:8b:57:4f:5e:17:55: 76:0c:c3:66:ab:07:4b:88:c9:d3:7b:ca:96:04:e9:84:5f:41: 4e:d1:1a:7e:ef:20:77:06:8a:d6:34:17:db:10:6a:6e:e2:48: 09:6b:ab:b7:29:79:53:91:51:6d:f3:5c:d4:61:5f:49:25:5d: 68:65:d7:9d:2d:91:28:9d:53:fc:f9:19:4e:4c:9e:75:48:52: 51:05:5f:d2:1e:02:91:81:42:5c:64:b5:a1:c1:36:7b:ce:c9: 81:98:ec:f3:63:44:d7:68:da:5f:11:e7:79:2b:ec:38:c4:0f: 22:ec:1a:49:00:46:e2:90:81:fb:65:77:da:70:4a:9f:11:ba: 6a:f3:b7:66:b2:ee:d7:4f:5c:e2:2c:31:8d:51:48:82:0e:6d: 1b:77:c6:73:71:7b:9d:c2:f8:f7:0b:4d:c9:20:ea:01:22:8d: fe:f9:c9:0f:48:75:24:ef:bf:06:ba:73:e6:19:ac:c1:56:35: a5:74:7a:8e:2e:0c:56:d1:a3:2c:36:49:f4:1f:8d:0b:9f:4e: d3:0b:b4:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNeiqDsNQqs7P7grB55572BsvyHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTEyMjIxOTIwNDBaFw0yNTEyMjMyMDM1NDBaMDMxMTAvBgNV BAMTKDhGRDM4RUI4OUY1QUMzNUFCNEIwMzM4NDg5OUUyNzAzOUZENjZBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rbukz2L5+sbeO1weMqG8u1S5 0IzSCJD7Dg4A4NtgWaqKrJHTDPuYUFtXu5n7kHF2Ml5ZGtdMFQ7lI2yoL05Nrf33 z46Hm/etTczgX2dYZp9A1shw5q4Qgucf3bDaVBqgwSHG/uB/stkh2JtuHCtUNlcH /T9ODFhV2aFjV5BDoAwrf8HAD+8c0IP9S7t91xZZX2r0rjMzX1EfylUL5CEtihKz /pQTpj54dPyJ3pyDmfPA9QKdW1GPmrrJubTzopLW+GvP1urOdF1s31MZ/Y7Z46Q3 d/hEZIMl1EXpQjS0pRrrBRKAmgIf0pLBAjILpuj5OtBXU2mJnGfbtKD8SHgRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj9OOuJ9aw1q0sDOEiZ4nA5/WarEwHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfdA9pdaB8ELWibgMndkyL1Q2TW7i5jip0IPPbZer4GoIz7j+ZeO3IpBMzU7f 84FNi1dPXhdVdgzDZqsHS4jJ03vKlgTphF9BTtEafu8gdwaK1jQX2xBqbuJICWur tyl5U5FRbfNc1GFfSSVdaGXXnS2RKJ1T/PkZTkyedUhSUQVf0h4CkYFCXGS1ocE2 e87JgZjs82NE12jaXxHneSvsOMQPIuwaSQBG4pCB+2V32nBKnxG6avO3ZrLu109c 4iwxjVFIgg5tG3fGc3F7ncL49wtNySDqASKN/vnJD0h1JO+/Brpz5hmswVY1pXR6 ji4MVtGjLDZJ9B+NC59O0wu0Pg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:52 2025 by rpki-client