This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: EhIa87onCPgxAiwg2agrHNDLF80qJ2/ND6KleqT4Wd4= Subject key identifier: 62:0D:DD:FD:E7:85:70:38:DF:18:40:4A:CC:4C:EC:A0:E9:C8:55:B2 Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 0EEB56B5116CC7143487B2BFE8437B470725C138 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 02A3 Signing time: Sat 20 Dec 2025 05:30:10 +0000 Manifest this update: Sat 20 Dec 2025 05:25:10 +0000 Manifest next update: Sun 21 Dec 2025 08:47:10 +0000 Files and hashes: 1: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) 2: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: wdx2Pa6JEew5iVIqEBCsxaneMsM3W6Xpu4KWtIMO7H4=) 3: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: PMpXdMUlCp4Q+HwwLd4ysJ8VQ/NQRUOFxlCc29bb4nI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:eb:56:b5:11:6c:c7:14:34:87:b2:bf:e8:43:7b:47:07:25:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Dec 20 05:25:10 2025 GMT Not After : Dec 21 08:47:10 2025 GMT Subject: CN=620DDDFDE7857038DF18404ACC4CECA0E9C855B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:c2:54:33:dc:f8:59:ce:4f:9f:78:19:26: 58:4b:76:f8:b8:37:6e:b6:28:3b:f3:27:4f:d6:df: fe:34:32:75:39:f1:9c:6c:e6:db:36:80:44:c0:86: 0d:53:57:5c:e5:02:50:60:90:bc:58:e3:36:38:44: a2:5e:c3:88:a8:84:42:88:0b:40:e8:c9:4a:00:7c: 1a:f8:dc:58:d5:f2:cb:d6:46:bd:45:4d:e0:bf:17: 3a:d9:30:0a:dc:34:ab:f3:31:2a:c7:16:52:bc:02: 17:2a:96:c2:36:2f:36:8f:25:74:35:b7:e5:17:65: ad:58:0a:e7:93:ec:bf:2f:99:01:fe:5a:72:c1:4b: 98:33:ea:96:5e:5a:ad:e6:ae:92:a4:9b:79:68:37: 85:c2:5d:30:74:92:6c:68:3e:8e:f9:36:16:a1:eb: bd:a4:6e:78:bd:55:72:fd:71:08:4c:01:47:38:ab: 8b:8c:fe:fa:ab:fd:1e:32:d6:7d:b1:b2:12:89:1a: 07:1c:6b:96:b0:8f:88:0f:31:b5:38:c7:6b:2c:90: 97:08:e4:cf:96:85:06:c1:d0:f5:96:10:ca:ce:c5: 99:4e:d5:69:b3:f7:38:a4:6d:32:9e:ed:f3:02:35: b4:11:55:54:cb:65:ad:07:68:0b:3e:b3:e3:f0:4e: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0D:DD:FD:E7:85:70:38:DF:18:40:4A:CC:4C:EC:A0:E9:C8:55:B2 X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:35:ef:a1:8e:d3:8e:41:bc:94:c0:6c:b7:17:63:74:b2:f9: 6e:c8:b7:fd:a3:d8:a5:0e:a4:69:e9:aa:6e:d7:19:5c:bd:43: 46:68:23:9c:0b:e6:1c:47:7a:85:24:06:20:4b:20:20:ef:62: 15:92:a8:38:e0:94:f6:78:f3:62:2a:ba:c9:18:07:58:fb:4c: d6:47:34:a0:4c:2e:5e:a4:f8:a0:7b:04:93:8f:8b:1b:1a:1f: 2e:45:25:e0:ac:46:2f:50:f3:ed:90:b0:7f:69:4d:ca:bb:c1: bf:d5:7a:eb:78:33:af:11:cc:0d:fa:aa:08:1e:c1:bb:ec:a8: 31:69:a8:91:1b:de:25:be:96:32:e1:7e:13:8e:66:59:56:19: 5c:fa:d3:2f:f7:44:a1:22:7c:3f:a4:7e:02:b2:87:fa:97:ac: 3f:00:e0:83:33:5b:08:b5:ed:5a:f3:8d:98:ca:59:cd:eb:92: 24:e3:bf:20:a8:79:7b:0f:1d:62:27:b3:a7:43:35:ed:f3:5f: dc:7b:cc:04:c0:01:56:12:b7:5e:8f:d8:89:81:a0:8c:f9:e0: 71:2c:b7:8f:b9:1e:32:95:e8:36:52:71:2c:e2:52:2e:e2:fb: 5c:df:47:1d:a0:54:05:94:f3:e4:03:92:ab:d9:47:10:66:1e: 04:5e:e9:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDutWtRFsxxQ0h7K/6EN7RwclwTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTEyMjAwNTI1MTBaFw0yNTEyMjEwODQ3MTBaMDMxMTAvBgNV BAMTKDYyMEREREZERTc4NTcwMzhERjE4NDA0QUNDNENFQ0EwRTlDODU1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCg8JUM9z4Wc5Pn3gZJlhLdvi4 N262KDvzJ0/W3/40MnU58Zxs5ts2gETAhg1TV1zlAlBgkLxY4zY4RKJew4iohEKI C0DoyUoAfBr43FjV8svWRr1FTeC/FzrZMArcNKvzMSrHFlK8AhcqlsI2LzaPJXQ1 t+UXZa1YCueT7L8vmQH+WnLBS5gz6pZeWq3mrpKkm3loN4XCXTB0kmxoPo75Nhah 672kbni9VXL9cQhMAUc4q4uM/vqr/R4y1n2xshKJGgcca5awj4gPMbU4x2sskJcI 5M+WhQbB0PWWEMrOxZlO1Wmz9zikbTKe7fMCNbQRVVTLZa0HaAs+s+PwThu9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYg3d/eeFcDjfGEBKzEzsoOnIVbIwHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6TXvoY7TjkG8lMBstxdjdLL5bsi3/aPYpQ6kaemqbtcZXL1DRmgjnAvmHEd6 hSQGIEsgIO9iFZKoOOCU9njzYiq6yRgHWPtM1kc0oEwuXqT4oHsEk4+LGxofLkUl 4KxGL1Dz7ZCwf2lNyrvBv9V663gzrxHMDfqqCB7Bu+yoMWmokRveJb6WMuF+E45m WVYZXPrTL/dEoSJ8P6R+ArKH+pesPwDggzNbCLXtWvONmMpZzeuSJOO/IKh5ew8d Yiezp0M17fNf3HvMBMABVhK3Xo/YiYGgjPngcSy3j7keMpXoNlJxLOJSLuL7XN9H HaBUBZTz5AOSq9lHEGYeBF7pfw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:05:58 2025 by rpki-client