This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: Zg4a2M8dTffgLNcKQl0g0xWWlvj+VZKmGHbMq027r5g= Subject key identifier: EC:D4:1B:7A:FD:41:20:5C:9E:E3:32:A2:AB:29:20:F1:E2:A5:2F:CC Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 62A33C970069D9718CDE2F3865048B5DA31C0F2D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 01A6 Signing time: Tue 23 Dec 2025 00:28:22 +0000 Manifest this update: Tue 23 Dec 2025 00:23:22 +0000 Manifest next update: Wed 24 Dec 2025 03:06:22 +0000 Files and hashes: 1: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 2: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: AT1o4CGvs2pC7LIZYQSDVaUnD6g9EV/MTM8xQztmu6E=) 3: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) 4: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 03:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a3:3c:97:00:69:d9:71:8c:de:2f:38:65:04:8b:5d:a3:1c:0f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Dec 23 00:23:22 2025 GMT Not After : Dec 24 03:06:22 2025 GMT Subject: CN=ECD41B7AFD41205C9EE332A2AB2920F1E2A52FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:ed:3e:a3:17:90:e9:ed:4b:62:aa:25:38: 75:d0:26:fd:5c:46:6a:25:fe:dd:6a:6f:0c:c6:52: 8a:2a:2f:a7:41:0c:91:0b:80:cb:66:d2:39:b6:62: 2e:21:c6:d9:d1:aa:45:c9:4b:59:13:42:aa:fc:11: 18:b0:50:9c:c6:aa:b2:3a:70:13:18:35:89:af:f5: a7:03:bd:8c:49:4e:0d:8a:a9:75:5f:1f:f0:03:b9: 22:cc:7b:63:e0:20:10:1f:e6:48:14:43:a5:93:49: b2:e9:57:86:45:c4:96:08:12:91:6d:c6:3c:10:63: f3:39:7d:5b:f3:6e:21:5c:5e:e1:93:f4:e0:f3:f3: 63:e5:86:49:1d:0f:1b:4d:6f:de:5c:c9:84:bd:ab: e6:16:63:42:2e:d0:2a:f7:ad:e0:27:d2:24:06:00: 25:89:39:e1:c9:78:56:52:24:96:bb:69:09:29:23: 6a:50:48:da:98:9a:f2:92:ba:a8:cc:d0:1c:35:d6: 4f:14:d2:93:e1:b0:c7:eb:d3:ef:d1:c4:84:64:af: 6b:3d:4a:62:f5:68:0b:62:d7:aa:12:e5:d2:34:95: cb:42:30:6f:58:f8:bc:d7:51:10:5a:c7:1a:9e:1b: 6d:5d:7d:80:78:f7:6f:ec:1d:c3:07:89:28:a7:fa: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D4:1B:7A:FD:41:20:5C:9E:E3:32:A2:AB:29:20:F1:E2:A5:2F:CC X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:85:3a:b2:8b:43:fb:fd:e7:b4:ee:24:c0:62:38:ad:97:ac: a0:d7:32:7f:ab:7a:30:15:ae:25:b8:db:b2:ca:d0:75:ec:d0: 3b:5f:ae:92:e5:f2:ab:01:c0:70:e5:70:7b:c5:6b:7c:5e:c1: 92:c4:f9:dc:a5:42:98:b8:e9:b5:04:f1:8c:27:ab:8c:d8:9d: fd:6f:bb:f9:27:18:57:84:f6:86:fe:1e:55:56:5b:41:55:bd: b7:88:67:1b:af:d8:7b:4c:58:07:71:dc:37:7b:f5:c4:eb:bd: 73:6c:28:11:e8:a5:be:e7:c3:4e:f1:48:15:00:80:0b:dd:34: 53:60:09:a0:bc:cb:1c:7a:36:6b:f5:43:a4:55:69:44:93:c9: 8f:95:17:7e:a9:89:d6:05:50:ca:32:d8:55:ea:18:5f:eb:46: f7:f1:8a:13:d3:0b:4e:97:97:93:7a:d8:4c:f3:94:04:ab:74: c2:fe:b2:40:b3:4e:63:d3:34:f1:ed:74:b5:dd:75:94:fa:44: 63:10:b8:c2:e0:c6:a0:e5:6e:14:2f:11:aa:28:42:81:eb:7d: bd:69:07:86:25:42:d0:8a:8c:50:24:fb:53:18:82:76:41:62: 59:73:68:e0:67:96:f7:d6:90:8d:de:e1:a4:00:73:20:26:fb: 83:9e:f7:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYqM8lwBp2XGM3i84ZQSLXaMcDy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTEyMjMwMDIzMjJaFw0yNTEyMjQwMzA2MjJaMDMxMTAvBgNV BAMTKEVDRDQxQjdBRkQ0MTIwNUM5RUUzMzJBMkFCMjkyMEYxRTJBNTJGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcN+0+oxeQ6e1LYqolOHXQJv1c Rmol/t1qbwzGUooqL6dBDJELgMtm0jm2Yi4hxtnRqkXJS1kTQqr8ERiwUJzGqrI6 cBMYNYmv9acDvYxJTg2KqXVfH/ADuSLMe2PgIBAf5kgUQ6WTSbLpV4ZFxJYIEpFt xjwQY/M5fVvzbiFcXuGT9ODz82PlhkkdDxtNb95cyYS9q+YWY0Iu0Cr3reAn0iQG ACWJOeHJeFZSJJa7aQkpI2pQSNqYmvKSuqjM0Bw11k8U0pPhsMfr0+/RxIRkr2s9 SmL1aAti16oS5dI0lctCMG9Y+LzXURBaxxqeG21dfYB492/sHcMHiSin+mJXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7NQbev1BIFye4zKiqykg8eKlL8wwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqYU6sotD+/3ntO4kwGI4rZesoNcyf6t6MBWuJbjbssrQdezQO1+ukuXyqwHA cOVwe8VrfF7BksT53KVCmLjptQTxjCerjNid/W+7+ScYV4T2hv4eVVZbQVW9t4hn G6/Ye0xYB3HcN3v1xOu9c2woEeilvufDTvFIFQCAC900U2AJoLzLHHo2a/VDpFVp RJPJj5UXfqmJ1gVQyjLYVeoYX+tG9/GKE9MLTpeXk3rYTPOUBKt0wv6yQLNOY9M0 8e10td11lPpEYxC4wuDGoOVuFC8RqihCget9vWkHhiVC0IqMUCT7UxiCdkFiWXNo 4GeW99aQjd7hpABzICb7g5732w== -----END CERTIFICATE-----Generated at Tue Dec 23 07:56:28 2025 by rpki-client