This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft File: D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft (raw, json) Hash identifier: rQCEewFGDXo3O7gzYbEcPnSwLt/Lfme9slo/3QIBR1U= Subject key identifier: 9F:EA:CB:A0:E4:D8:C1:36:A7:FA:54:2D:BF:43:75:84:01:64:7B:82 Authority key identifier: D5:60:95:B4:5E:4F:49:E2:04:C6:1E:BA:E3:40:48:F1:2C:CE:AE:85 Certificate issuer: /CN=D56095B45E4F49E204C61EBAE34048F12CCEAE85 Certificate serial: 023CAE86051F70586595246EA42467D46464CD38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft Manifest number: F5 Signing time: Mon 22 Dec 2025 14:36:14 +0000 Manifest this update: Mon 22 Dec 2025 14:31:14 +0000 Manifest next update: Tue 23 Dec 2025 18:11:14 +0000 Files and hashes: 1: D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl (hash: lugsZO/Ekk+1PTHoKu4pmUqrnu1j5SkRdQj7R8Hs7uU=) 2: 3133312e3139362e342e302f32322d3332203d3e20323635383930.roa (hash: Py5mI5u1K2w7G+TkR6KDVHUmgz6dxGcXcVJ7IUaJs4g=) 3: 323830343a336636343a3a2f33322d313238203d3e20323635383930.roa (hash: lD2GQXNbJaRrn/f+7wHjltV+D7kuLBO+0cpBnFn1/Lc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 18:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3c:ae:86:05:1f:70:58:65:95:24:6e:a4:24:67:d4:64:64:cd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D56095B45E4F49E204C61EBAE34048F12CCEAE85 Validity Not Before: Dec 22 14:31:14 2025 GMT Not After : Dec 23 18:11:14 2025 GMT Subject: CN=9FEACBA0E4D8C136A7FA542DBF43758401647B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:97:5b:87:03:1d:1c:08:39:0b:af:f0:c7: f9:2f:0f:4d:db:af:be:ba:89:e7:85:fe:88:55:89: 46:1a:6d:7a:cd:52:a7:69:6d:0b:57:ee:0d:cb:91: 8b:2c:9f:be:f4:4e:5d:a5:3c:04:00:ad:c2:1b:f2: ac:18:ad:78:87:69:6b:74:4e:50:49:e8:fa:1d:b5: 48:e6:8b:b8:50:8a:71:09:5d:7f:85:89:6c:fc:1a: cd:fe:49:9f:ea:a0:da:df:fb:06:b2:33:e7:42:99: 30:3e:d7:9e:3b:f1:c8:9e:5d:e7:62:a7:68:5b:ec: 99:ab:ed:1d:5a:d3:ad:da:77:ed:d6:c1:8c:f5:6f: 24:78:8c:f4:53:0d:54:2f:58:ad:69:71:48:d8:2e: 36:e0:9d:5d:e6:ce:17:91:2a:c4:2d:4b:5e:54:ef: fa:15:87:f6:bd:4e:51:5e:56:5d:7e:fe:ff:d9:80: d4:51:30:e7:a1:0c:f4:0a:8b:c3:05:ae:5b:1c:98: 0b:6d:97:42:60:46:e2:1c:fa:11:2e:62:56:8d:62: 64:bc:20:d0:84:f0:f4:08:dd:69:4a:68:69:0b:be: 81:2a:5e:d7:de:10:98:25:27:6f:7a:50:da:17:3e: bb:56:81:e0:82:88:28:b2:1f:90:e7:4d:e2:6e:c5: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:CB:A0:E4:D8:C1:36:A7:FA:54:2D:BF:43:75:84:01:64:7B:82 X509v3 Authority Key Identifier: keyid:D5:60:95:B4:5E:4F:49:E2:04:C6:1E:BA:E3:40:48:F1:2C:CE:AE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56095B45E4F49E204C61EBAE34048F12CCEAE85.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/D56095B45E4F49E204C61EBAE34048F12CCEAE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a4:81:7b:ba:b2:e7:82:5a:16:fb:5a:55:e8:bc:32:c2:f4: e1:d9:e7:e2:ed:1c:91:dd:6c:bc:16:3b:08:6d:4c:c9:3a:2c: 75:bb:9c:1c:73:58:ff:5e:25:9c:b4:f3:93:a1:c4:6c:90:49: 1d:47:ea:a0:29:8e:6d:09:64:4d:1d:9e:6c:0a:5e:08:49:b8: 4f:93:16:f3:69:a1:aa:7a:81:36:d2:7b:11:5a:5e:14:77:28: 5d:b9:e0:c2:2e:a2:31:26:06:16:16:eb:ba:14:ed:78:38:b8: fc:c3:db:8a:59:c0:32:3d:16:5b:31:31:a2:55:d8:0a:d4:4a: 87:c2:88:5d:e0:13:fd:2c:9d:49:91:3b:85:b9:97:bc:c5:85: 66:f8:ee:2d:d0:8f:83:2a:d5:23:14:2c:a4:ec:70:9d:61:33: 73:4c:37:53:9d:f6:7e:99:bd:f4:47:ea:f7:cc:f3:b4:1d:6e: 48:81:29:52:51:e2:9c:b9:0d:e9:d6:e0:ae:3a:5a:4c:d6:94: b6:3d:d5:80:d4:93:09:a2:a4:9e:b7:7f:1f:b7:02:8f:ac:56: b6:a3:a5:f4:de:68:a7:73:7f:f6:b8:8e:a6:33:2d:a6:89:8e: c9:11:2f:c4:6b:c4:9d:df:8d:5c:b9:d2:b7:1c:82:fc:10:28: 40:0b:34:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAjyuhgUfcFhllSRupCRn1GRkzTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2MDk1QjQ1RTRGNDlFMjA0QzYxRUJBRTM0MDQ4RjEy Q0NFQUU4NTAeFw0yNTEyMjIxNDMxMTRaFw0yNTEyMjMxODExMTRaMDMxMTAvBgNV BAMTKDlGRUFDQkEwRTREOEMxMzZBN0ZBNTQyREJGNDM3NTg0MDE2NDdCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzppdbhwMdHAg5C6/wx/kvD03b r766ieeF/ohViUYabXrNUqdpbQtX7g3LkYssn770Tl2lPAQArcIb8qwYrXiHaWt0 TlBJ6PodtUjmi7hQinEJXX+FiWz8Gs3+SZ/qoNrf+wayM+dCmTA+15478cieXedi p2hb7Jmr7R1a063ad+3WwYz1byR4jPRTDVQvWK1pcUjYLjbgnV3mzheRKsQtS15U 7/oVh/a9TlFeVl1+/v/ZgNRRMOehDPQKi8MFrlscmAttl0JgRuIc+hEuYlaNYmS8 INCE8PQI3WlKaGkLvoEqXtfeEJglJ296UNoXPrtWgeCCiCiyH5DnTeJuxTwdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn+rLoOTYwTan+lQtv0N1hAFke4IwHwYDVR0j BBgwFoAU1WCVtF5PSeIExh6640BI8SzOroUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpZeUZDOURCcEhRRE5aY2ttZ0dqVDN5UVRMS3ZGYlNzQ3phM004V1E4 cUEvMC9ENTYwOTVCNDVFNEY0OUUyMDRDNjFFQkFFMzQwNDhGMTJDQ0VBRTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NjA5NUI0NUU0RjQ5RTIw NEM2MUVCQUUzNDA0OEYxMkNDRUFFODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGpZeUZDOURCcEhRRE5aY2ttZ0dqVDN5UVRMS3ZGYlNzQ3phM004V1E4cUEvMC9E NTYwOTVCNDVFNEY0OUUyMDRDNjFFQkFFMzQwNDhGMTJDQ0VBRTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcqSBe7qy54JaFvtaVei8MsL04dnn4u0ckd1svBY7CG1MyTosdbucHHNY/14l nLTzk6HEbJBJHUfqoCmObQlkTR2ebApeCEm4T5MW82mhqnqBNtJ7EVpeFHcoXbng wi6iMSYGFhbruhTteDi4/MPbilnAMj0WWzExolXYCtRKh8KIXeAT/SydSZE7hbmX vMWFZvjuLdCPgyrVIxQspOxwnWEzc0w3U532fpm99Efq98zztB1uSIEpUlHinLkN 6dbgrjpaTNaUtj3VgNSTCaKknrd/H7cCj6xWtqOl9N5op3N/9riOpjMtpomOyREv xGvEnd+NXLnStxyC/BAoQAs0og== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:03 2025 by rpki-client