This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json) Hash identifier: QKPpjgUl4NobDKWWrjya748u9BFIT9RB5PXAGdTHkQ4= Subject key identifier: 32:DB:36:C0:B1:AC:1E:A1:7C:05:85:87:57:3C:A7:6B:19:B3:78:26 Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Certificate serial: 477F695F57A48F5B3148B0F3AE844C3FDD547317 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft Manifest number: 0340 Signing time: Wed 24 Dec 2025 05:18:18 +0000 Manifest this update: Wed 24 Dec 2025 05:13:18 +0000 Manifest next update: Thu 25 Dec 2025 06:13:18 +0000 Files and hashes: 1: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=) 2: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=) 3: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: jpwb0sKJkN69ky7lNBSG/QFQ+JC4qYLekfs3JcPr15k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 06:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7f:69:5f:57:a4:8f:5b:31:48:b0:f3:ae:84:4c:3f:dd:54:73:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Validity Not Before: Dec 24 05:13:18 2025 GMT Not After : Dec 25 06:13:18 2025 GMT Subject: CN=32DB36C0B1AC1EA17C058587573CA76B19B37826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:7a:b2:f1:59:65:c8:0e:af:b9:d7:41:5d: 28:e9:58:2f:9f:b0:5d:b6:02:fc:22:dc:2c:7e:27: b3:01:b1:df:05:4c:5c:fc:8b:d5:72:96:4d:42:d3: 9c:85:89:66:5f:2e:95:4d:6f:27:17:1b:bf:25:1e: 23:c8:95:1c:ea:31:31:a3:39:fe:a7:8e:29:ae:21: 22:0e:50:7e:6c:5c:39:41:e0:28:ec:c8:23:b9:a7: fc:a5:0c:94:e4:cf:0f:eb:8a:76:c8:95:c2:05:0c: cc:87:79:64:3f:f4:52:93:63:0c:21:89:3e:03:2b: f8:55:e2:8b:20:69:ad:ce:34:84:59:16:af:06:f7: b0:d2:8a:c1:8a:0c:7d:3e:c7:85:ad:e5:31:b7:b8: 2e:f7:db:eb:0c:bb:6b:5a:2b:a4:09:e4:c3:19:a5: 22:18:de:9f:d6:ee:ba:d1:36:05:b1:a6:1d:e3:10: b1:2b:ed:2c:a1:46:e0:bd:46:e0:0f:b3:5e:f8:94: a8:eb:56:bf:da:42:e9:8d:03:05:7e:77:ed:00:5d: 62:47:ac:77:12:72:05:9c:0b:8f:a2:19:ec:52:3f: 3a:65:f7:30:c7:ff:af:0e:73:16:5b:e4:09:7b:53: 86:50:e8:f3:93:df:77:18:2b:04:8b:96:53:de:57: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DB:36:C0:B1:AC:1E:A1:7C:05:85:87:57:3C:A7:6B:19:B3:78:26 X509v3 Authority Key Identifier: keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e7:6a:89:63:9e:c3:dd:86:77:78:27:42:10:60:0f:a8:78: db:d4:a6:54:66:16:33:17:1c:65:fd:2f:19:1f:5f:e0:ba:ac: 65:ea:e6:34:86:6f:e9:98:40:a4:40:6a:30:e6:ea:ef:7f:01: b2:3e:0c:4b:85:4f:0d:4b:dd:31:60:7b:99:05:46:70:b1:a3: bf:17:e4:95:cf:b1:89:0a:3d:14:49:d4:d5:25:76:79:8b:a9: 4e:55:09:c8:a2:a8:7f:8f:48:7a:86:47:ee:eb:3e:aa:d1:5d: 1e:8a:d2:5f:f2:0e:ce:6c:45:83:14:49:cc:3d:2b:53:d0:84: 16:df:52:f4:55:a0:77:10:58:0f:cd:b3:f8:a5:cd:f0:b1:b3: f8:ab:b3:26:3a:15:ba:73:1b:68:75:84:8a:54:29:42:96:f4: fd:7b:dd:0a:df:2d:04:95:b5:ad:10:93:49:00:a4:e3:60:34: 45:47:81:82:f1:df:7e:cd:1b:f9:cc:f0:d4:66:7b:bf:a8:e4: ee:d1:6f:46:b0:03:83:ac:d5:e7:69:be:80:eb:8c:5d:1e:ae: cd:68:0d:9c:fb:ef:47:9c:a2:86:20:9e:2f:cd:79:cd:1a:bf: ff:c4:14:ab:ef:11:81:da:18:2f:27:11:00:a4:f2:a8:a7:ab: 5c:e7:2a:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR39pX1ekj1sxSLDzroRMP91UcxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC MkI0MjJERjAeFw0yNTEyMjQwNTEzMThaFw0yNTEyMjUwNjEzMThaMDMxMTAvBgNV BAMTKDMyREIzNkMwQjFBQzFFQTE3QzA1ODU4NzU3M0NBNzZCMTlCMzc4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPHqy8VllyA6vuddBXSjpWC+f sF22Avwi3Cx+J7MBsd8FTFz8i9Vylk1C05yFiWZfLpVNbycXG78lHiPIlRzqMTGj Of6njimuISIOUH5sXDlB4CjsyCO5p/ylDJTkzw/rinbIlcIFDMyHeWQ/9FKTYwwh iT4DK/hV4osgaa3ONIRZFq8G97DSisGKDH0+x4Wt5TG3uC732+sMu2taK6QJ5MMZ pSIY3p/W7rrRNgWxph3jELEr7SyhRuC9RuAPs174lKjrVr/aQumNAwV+d+0AXWJH rHcScgWcC4+iGexSPzpl9zDH/68OcxZb5Al7U4ZQ6POT33cYKwSLllPeVz55AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMts2wLGsHqF8BYWHVzynaxmzeCYwHwYDVR0j BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4 QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGedqiWOew92Gd3gnQhBgD6h429SmVGYWMxccZf0vGR9f4LqsZermNIZv6ZhA pEBqMObq738Bsj4MS4VPDUvdMWB7mQVGcLGjvxfklc+xiQo9FEnU1SV2eYupTlUJ yKKof49IeoZH7us+qtFdHorSX/IOzmxFgxRJzD0rU9CEFt9S9FWgdxBYD82z+KXN 8LGz+KuzJjoVunMbaHWEilQpQpb0/XvdCt8tBJW1rRCTSQCk42A0RUeBgvHffs0b +czw1GZ7v6jk7tFvRrADg6zV52m+gOuMXR6uzWgNnPvvR5yihiCeL815zRq//8QU q+8RgdoYLycRAKTyqKerXOcqmw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:16:27 2025 by rpki-client