This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft File: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json) Hash identifier: NuB99j78+TZwoxYTVzPa1//xaCjTEhVExzknl6WAe3k= Subject key identifier: D5:F8:FB:DB:DE:2B:48:C5:8C:63:32:E2:70:43:26:9D:44:AD:6C:7D Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 Certificate issuer: /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Certificate serial: 4829F2E791D1E2844A523CB0C7CBA6FF5B1BFB1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft Manifest number: 034A Signing time: Mon 22 Dec 2025 19:25:40 +0000 Manifest this update: Mon 22 Dec 2025 19:20:40 +0000 Manifest next update: Tue 23 Dec 2025 22:16:40 +0000 Files and hashes: 1: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: hj9RMfB4C40JkTSTGnUrql/c6ZLlUMHKDwLgbtwmlik=) 2: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: 2dadztaER+9gyBL5gmUFWVyA0Rshw1nGZx22j2sUlE8=) 3: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: CvPt6i/FKK2bJ2KHKaQ02WILQwDUCCrNQlOgIBapYng=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 22:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:29:f2:e7:91:d1:e2:84:4a:52:3c:b0:c7:cb:a6:ff:5b:1b:fb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Validity Not Before: Dec 22 19:20:40 2025 GMT Not After : Dec 23 22:16:40 2025 GMT Subject: CN=D5F8FBDBDE2B48C58C6332E27043269D44AD6C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:f8:39:d5:58:21:b6:c5:d0:f1:ae:08:50: 66:77:73:64:de:7c:b5:cf:3d:d0:0d:a1:5c:d5:11: 23:cc:93:fd:de:b8:a1:ca:14:67:e9:ee:3d:e2:97: 36:29:85:ee:58:69:8b:b1:ea:1c:a7:08:b9:21:cf: 34:5d:32:84:8f:44:7b:d5:47:3e:72:97:54:dc:e6: bb:b6:c3:8b:70:e4:d8:03:29:ee:f9:d1:f2:69:5b: 27:32:f6:d0:83:02:42:8e:73:a6:47:49:cb:e5:9d: 85:16:0b:cf:f8:89:37:88:2c:88:91:4a:72:98:d0: dd:b9:88:e7:5c:da:85:c9:b1:1a:9a:36:1b:f0:48: 20:9b:e0:58:b9:2c:8f:c0:bf:49:a9:8d:46:b7:3e: ce:3c:fd:d6:75:f7:91:7f:18:73:5a:c7:8b:ba:3b: 93:63:98:f5:c5:e0:6d:a7:77:51:c6:d5:18:05:17: 45:8b:29:29:72:aa:40:08:62:b1:a6:bc:1f:8c:ed: 85:4c:ca:c5:96:f2:e3:c4:b2:ce:0c:49:58:b5:18: d1:5a:f0:b6:36:ac:34:54:32:d5:0a:68:85:5e:ce: b3:2e:61:8a:d1:04:3b:f9:70:9f:01:fc:3b:5c:80: ef:32:05:0b:57:92:4d:ca:2a:a7:e8:99:8c:b5:9f: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F8:FB:DB:DE:2B:48:C5:8C:63:32:E2:70:43:26:9D:44:AD:6C:7D X509v3 Authority Key Identifier: keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d6:07:c2:db:83:aa:cd:72:b9:d0:88:c4:19:60:ac:71:d9: 30:fb:9d:f6:07:5c:15:93:ed:a0:a9:8e:e9:a9:68:5c:58:00: c7:06:07:d8:f9:3f:c0:67:f1:c1:e4:a4:ba:ce:c0:92:00:27: 35:c3:76:81:83:2b:2c:14:17:06:3c:b5:23:f9:e4:47:e1:a7: c5:07:ed:85:d2:44:d6:7d:88:dd:6e:bd:6f:a2:f1:f1:89:7f: f7:98:3c:b3:9d:d0:fd:85:22:a2:06:6b:e7:71:61:50:3b:21: 6c:7e:f4:f1:0b:f5:f6:de:13:42:f1:2b:9f:64:c8:34:00:d6: 3d:f3:1c:43:1c:4f:6e:fb:5c:f4:38:46:97:39:06:51:b5:c3: fe:5d:e6:42:2f:b9:99:69:f9:ed:26:80:da:7b:88:b4:56:ca: 0a:97:07:bf:84:79:72:af:c8:b9:dc:f3:e5:ca:51:9d:26:c8: 98:73:62:f8:ac:9c:97:a2:e1:50:40:b8:a6:ba:c9:d6:c2:71: 3d:e6:22:b8:45:69:28:bc:31:65:66:de:b2:d4:21:4e:06:5c: 14:77:ab:85:1a:40:d8:6c:c7:a5:70:57:33:91:84:50:ee:f7: 9a:80:b9:dc:cd:62:6c:db:47:ef:2f:4f:3e:df:82:a4:0b:81: 21:bc:a3:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSCny55HR4oRKUjywx8um/1sb+x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE1QkZDNDQ5QkMwQUU5NEYyNjBDNTBBMzFEQ0JGQkMz MTgzOTFFODAeFw0yNTEyMjIxOTIwNDBaFw0yNTEyMjMyMjE2NDBaMDMxMTAvBgNV BAMTKEQ1RjhGQkRCREUyQjQ4QzU4QzYzMzJFMjcwNDMyNjlENDRBRDZDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi8vg51VghtsXQ8a4IUGZ3c2Te fLXPPdANoVzVESPMk/3euKHKFGfp7j3ilzYphe5YaYux6hynCLkhzzRdMoSPRHvV Rz5yl1Tc5ru2w4tw5NgDKe750fJpWycy9tCDAkKOc6ZHScvlnYUWC8/4iTeILIiR SnKY0N25iOdc2oXJsRqaNhvwSCCb4Fi5LI/Av0mpjUa3Ps48/dZ195F/GHNax4u6 O5NjmPXF4G2nd1HG1RgFF0WLKSlyqkAIYrGmvB+M7YVMysWW8uPEss4MSVi1GNFa 8LY2rDRUMtUKaIVezrMuYYrRBDv5cJ8B/DtcgO8yBQtXkk3KKqfomYy1n1rlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1fj7294rSMWMYzLicEMmnUStbH0wHwYDVR0j BBgwFoAUClv8RJvArpTyYMUKMdy/vDGDkegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu THgvMS8wQTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNUJGQzQ0OUJDMEFFOTRG MjYwQzUwQTMxRENCRkJDMzE4MzkxRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2huTHgvMS8w QTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArNYHwtuDqs1yudCIxBlgrHHZMPud9gdcFZPtoKmO6aloXFgAxwYH2Pk/wGfx weSkus7AkgAnNcN2gYMrLBQXBjy1I/nkR+GnxQfthdJE1n2I3W69b6Lx8Yl/95g8 s53Q/YUiogZr53FhUDshbH708Qv19t4TQvErn2TINADWPfMcQxxPbvtc9DhGlzkG UbXD/l3mQi+5mWn57SaA2nuItFbKCpcHv4R5cq/Iudzz5cpRnSbImHNi+Kycl6Lh UEC4prrJ1sJxPeYiuEVpKLwxZWbestQhTgZcFHerhRpA2GzHpXBXM5GEUO73moC5 3M1ibNtH7y9PPt+CpAuBIbyjcg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:22:49 2025 by rpki-client