This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft File: 42361EAB494B759A64EFEB313189F9E2DF6603C8.mft (raw, json) Hash identifier: 1attRDkOiSckCQUZ2lXgL3VeLC2B11+/RVMdfnV3nS8= Subject key identifier: D0:E5:94:EB:42:C1:D1:45:12:21:3C:AD:5C:85:C8:EE:97:D0:2D:1B Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Certificate serial: 216B0605E63623D7BB1F818077CB1BAC707F5834 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft Manifest number: 0343 Signing time: Fri 19 Dec 2025 03:27:11 +0000 Manifest this update: Fri 19 Dec 2025 03:22:11 +0000 Manifest next update: Sat 20 Dec 2025 03:56:11 +0000 Files and hashes: 1: 42361EAB494B759A64EFEB313189F9E2DF6603C8.crl (hash: NQSNKk/pmDex180YabLUgedeqKI8rEBu2p5/HclMoyA=) 2: 323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (hash: ENkngCJgmku9h/YUGevS0xZQjyUztj3jNjafQ8PFgic=) 3: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (hash: IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 03:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6b:06:05:e6:36:23:d7:bb:1f:81:80:77:cb:1b:ac:70:7f:58:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Validity Not Before: Dec 19 03:22:11 2025 GMT Not After : Dec 20 03:56:11 2025 GMT Subject: CN=D0E594EB42C1D14512213CAD5C85C8EE97D02D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:6d:4e:a4:38:0f:f4:05:d4:49:5e:76:af: 4e:c8:0d:77:15:0a:d9:45:24:89:8e:b4:cf:42:9f: de:28:58:04:77:a6:f5:37:04:4f:e0:95:ab:ab:75: e5:b9:55:46:c9:29:50:20:1c:21:c4:a0:34:7e:cb: aa:80:87:0e:b4:92:3f:70:7e:41:2a:35:02:d0:1d: 54:be:a1:2d:7d:b0:1d:fd:36:e0:f3:9d:74:ed:37: cf:73:46:44:35:5b:c5:0b:69:34:59:9d:3c:23:37: d3:59:3b:dc:f1:8f:17:c1:92:9d:0b:0c:bd:01:42: 44:e7:33:4f:77:0e:f5:97:32:14:82:17:a5:03:e8: c0:d4:04:86:d7:f2:b5:f0:2d:5e:fa:84:fc:60:69: fd:23:4c:b4:27:f6:ee:fc:d7:2d:4b:6d:e2:ef:96: d3:4b:1f:23:a2:cf:be:d4:fd:a2:ae:19:9b:40:96: 5d:be:a7:ae:12:db:29:a1:ce:83:7a:3a:c6:d9:5c: d3:0c:74:b6:8e:2c:b6:01:9c:2f:49:cd:de:4b:3b: e8:7f:f8:2d:8d:ad:50:83:fd:1c:60:08:33:b0:79: 13:ac:47:ca:4f:0e:6e:f7:93:a4:52:51:f0:20:91: ec:68:d2:13:f3:ee:dd:dd:1c:da:b8:5b:f1:e9:5e: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:94:EB:42:C1:D1:45:12:21:3C:AD:5C:85:C8:EE:97:D0:2D:1B X509v3 Authority Key Identifier: keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:07:8c:07:68:78:7c:bc:46:a5:fe:fa:79:40:31:e5:c5:97: fb:e0:32:80:99:c6:61:dd:79:46:68:ff:21:c6:79:93:d1:d5: 2f:b1:79:a8:21:b0:bb:26:a0:74:64:e8:74:ea:54:f6:47:29: 29:f5:2c:b2:bb:62:8e:36:e3:ea:dc:24:82:d7:66:d9:f9:19: d2:eb:85:5d:78:42:80:3b:90:3e:d5:69:1c:b7:ea:a9:97:e8: 93:40:62:50:2a:6f:ba:f8:4f:9b:bd:51:f0:b9:a8:f7:79:de: 98:8d:e4:66:12:88:b8:bd:61:2d:fc:9f:a3:5f:f5:b0:41:2b: 34:67:c1:fc:4a:5c:29:fb:fd:2e:37:0b:e4:f9:7a:9b:00:29: 9e:63:18:ab:13:6f:cf:3a:5f:b1:6d:af:04:2b:22:6e:6e:31: bd:4a:61:af:2e:52:48:7d:0d:52:1f:2c:d9:bb:7b:d7:c6:ce: 54:4c:db:93:a0:ab:96:ab:5d:96:5d:1c:05:bf:12:28:52:f1: 2d:64:7f:8d:cd:8f:fb:69:57:0e:d2:18:41:85:ba:f6:f8:1d: db:de:fc:10:80:f1:5d:39:00:3c:e8:77:28:88:17:e1:96:25: e8:f9:c5:6b:1e:d5:c2:d8:1f:70:a9:ea:46:ef:81:12:4c:44: 1c:35:e2:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIWsGBeY2I9e7H4GAd8sbrHB/WDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzNjFFQUI0OTRCNzU5QTY0RUZFQjMxMzE4OUY5RTJE RjY2MDNDODAeFw0yNTEyMTkwMzIyMTFaFw0yNTEyMjAwMzU2MTFaMDMxMTAvBgNV BAMTKEQwRTU5NEVCNDJDMUQxNDUxMjIxM0NBRDVDODVDOEVFOTdEMDJEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP121OpDgP9AXUSV52r07IDXcV CtlFJImOtM9Cn94oWAR3pvU3BE/glaurdeW5VUbJKVAgHCHEoDR+y6qAhw60kj9w fkEqNQLQHVS+oS19sB39NuDznXTtN89zRkQ1W8ULaTRZnTwjN9NZO9zxjxfBkp0L DL0BQkTnM093DvWXMhSCF6UD6MDUBIbX8rXwLV76hPxgaf0jTLQn9u781y1LbeLv ltNLHyOiz77U/aKuGZtAll2+p64S2ymhzoN6OsbZXNMMdLaOLLYBnC9Jzd5LO+h/ +C2NrVCD/RxgCDOweROsR8pPDm73k6RSUfAgkexo0hPz7t3dHNq4W/HpXmiDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0OWU60LB0UUSITytXIXI7pfQLRswHwYDVR0j BBgwFoAUQjYeq0lLdZpk7+sxMYn54t9mA8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpD a2cvMS80MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMzYxRUFCNDk0Qjc1OUE2 NEVGRUIzMTMxODlGOUUyREY2NjAzQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpDa2cvMS80 MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiAeMB2h4fLxGpf76eUAx5cWX++AygJnGYd15Rmj/IcZ5k9HVL7F5qCGwuyag dGTodOpU9kcpKfUssrtijjbj6twkgtdm2fkZ0uuFXXhCgDuQPtVpHLfqqZfok0Bi UCpvuvhPm71R8Lmo93nemI3kZhKIuL1hLfyfo1/1sEErNGfB/EpcKfv9LjcL5Pl6 mwApnmMYqxNvzzpfsW2vBCsibm4xvUphry5SSH0NUh8s2bt718bOVEzbk6Crlqtd ll0cBb8SKFLxLWR/jc2P+2lXDtIYQYW69vgd2978EIDxXTkAPOh3KIgX4ZYl6PnF ax7VwtgfcKnqRu+BEkxEHDXiMg== -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:49 2025 by rpki-client