This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: 1oRCa/nFMf67tzqOy+87sBHKnuz3ORD3N26bSIsfoKw= Subject key identifier: 9F:97:FE:66:5F:4B:21:77:D6:99:71:D1:69:A8:9B:D7:5B:C2:23:23 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 7994348D5B4B6A259FF5EDEEA35A836F378C86F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 0152 Signing time: Fri 19 Dec 2025 23:03:07 +0000 Manifest this update: Fri 19 Dec 2025 22:58:07 +0000 Manifest next update: Sun 21 Dec 2025 02:30:07 +0000 Files and hashes: 1: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: TLXa3rTu6IH7Np1U4lA1xmabr/VMXJT270XVeeIToH0=) 2: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) 3: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) 4: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 02:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:94:34:8d:5b:4b:6a:25:9f:f5:ed:ee:a3:5a:83:6f:37:8c:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Dec 19 22:58:07 2025 GMT Not After : Dec 21 02:30:07 2025 GMT Subject: CN=9F97FE665F4B2177D69971D169A89BD75BC22323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:d8:19:f4:7b:a0:ee:30:4b:0e:2c:93:7f: 3a:8e:81:0b:63:7b:94:b5:4d:52:d2:db:99:3a:13: cd:a6:3b:ac:19:82:63:03:a7:4d:4c:60:ed:62:2c: 91:d9:cb:ff:20:d6:72:76:85:94:d4:9e:15:9d:a8: 25:c6:a9:7d:04:60:f9:70:6f:ba:24:0d:2c:5f:b8: c2:59:27:53:42:c8:1a:ef:ad:8f:43:97:93:9c:bd: 59:a2:80:11:60:66:40:5e:76:4d:c4:78:92:1b:89: ad:21:7a:9a:08:88:1d:f9:86:35:84:78:23:0e:0c: 9c:02:e2:bb:b5:52:f5:6c:0f:e5:be:32:b8:37:89: 94:2f:57:60:31:f1:d0:df:86:7c:10:7a:ab:35:73: 38:04:bb:f2:c9:a9:2f:43:bc:dc:03:41:78:48:bd: 82:39:56:c3:e4:92:e0:b2:43:1d:ac:72:63:3b:1e: 71:22:0e:de:0f:d6:79:c4:b4:9a:1d:92:b0:17:b3: 34:64:5b:c1:b3:23:89:1b:f2:3f:bd:cc:b8:56:06: f4:4d:59:8a:39:bc:76:b5:75:84:da:ab:d9:7f:a1: f0:0e:e2:f9:1f:53:c8:bf:e7:4d:6c:f9:d1:1a:70: 96:f8:32:7a:00:68:57:c7:f6:5a:70:ca:3f:f7:e9: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:97:FE:66:5F:4B:21:77:D6:99:71:D1:69:A8:9B:D7:5B:C2:23:23 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:10:42:89:e7:4e:59:47:95:87:12:7f:fd:5b:a9:b9:9b:23: 36:45:07:e9:da:31:65:a8:9b:46:89:ad:94:fc:d3:a4:6f:2d: 7f:d7:33:74:a5:ab:8e:e1:57:5c:d6:5f:8c:a5:89:e4:b3:de: 98:b1:f4:8d:d9:78:74:c0:af:d1:bd:3a:01:e8:35:f0:72:f1: f3:0b:6f:7d:79:28:e7:56:3f:28:30:32:0b:61:00:88:f4:be: 26:6f:fc:25:dd:48:69:4f:a4:25:93:8a:47:ec:ec:eb:a5:40: 35:28:3f:bc:2f:fe:ad:c8:a7:12:4f:a4:5e:7a:74:37:0c:7f: 4d:a5:b1:91:0c:a2:5b:43:03:2a:9f:a4:e6:d7:4d:87:ea:85: 37:5d:51:c7:b4:23:52:92:a8:94:73:b0:a9:94:1c:c8:82:00: 85:74:7d:05:4a:14:eb:29:1b:4e:db:95:e6:43:54:5c:5b:46: 36:75:54:4e:6b:76:e3:75:fd:e1:b2:c9:2a:69:ef:f2:09:e2: 7b:cb:33:dd:dc:2f:4e:86:d1:c2:2f:ce:79:9c:85:a3:17:f0: 55:ce:27:ba:2f:2e:6d:e1:72:11:38:41:53:b0:63:16:4f:8d: c9:99:9d:8e:89:cf:06:2c:5f:ad:9b:96:21:16:04:69:8b:1b: ef:c2:63:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeZQ0jVtLaiWf9e3uo1qDbzeMhvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTEyMTkyMjU4MDdaFw0yNTEyMjEwMjMwMDdaMDMxMTAvBgNV BAMTKDlGOTdGRTY2NUY0QjIxNzdENjk5NzFEMTY5QTg5QkQ3NUJDMjIzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4NgZ9Hug7jBLDiyTfzqOgQtj e5S1TVLS25k6E82mO6wZgmMDp01MYO1iLJHZy/8g1nJ2hZTUnhWdqCXGqX0EYPlw b7okDSxfuMJZJ1NCyBrvrY9Dl5OcvVmigBFgZkBedk3EeJIbia0hepoIiB35hjWE eCMODJwC4ru1UvVsD+W+Mrg3iZQvV2Ax8dDfhnwQeqs1czgEu/LJqS9DvNwDQXhI vYI5VsPkkuCyQx2scmM7HnEiDt4P1nnEtJodkrAXszRkW8GzI4kb8j+9zLhWBvRN WYo5vHa1dYTaq9l/ofAO4vkfU8i/501s+dEacJb4MnoAaFfH9lpwyj/36XUtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn5f+Zl9LIXfWmXHRaaib11vCIyMwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeRBCiedOWUeVhxJ//VupuZsjNkUH6doxZaibRomtlPzTpG8tf9czdKWrjuFX XNZfjKWJ5LPemLH0jdl4dMCv0b06Aeg18HLx8wtvfXko51Y/KDAyC2EAiPS+Jm/8 Jd1IaU+kJZOKR+zs66VANSg/vC/+rcinEk+kXnp0Nwx/TaWxkQyiW0MDKp+k5tdN h+qFN11Rx7QjUpKolHOwqZQcyIIAhXR9BUoU6ykbTtuV5kNUXFtGNnVUTmt243X9 4bLJKmnv8gnie8sz3dwvTobRwi/OeZyFoxfwVc4nui8ubeFyEThBU7BjFk+NyZmd jonPBixfrZuWIRYEaYsb78JjMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:12:53 2025 by rpki-client