This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft File: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json) Hash identifier: yZNfDV26oKMNlXSS9kf5O5zCVblIjkwdxp0iS9Frpzo= Subject key identifier: 4A:FE:97:C6:28:00:92:58:71:CC:A9:3A:C8:3D:9E:E0:06:B4:34:8E Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0 Certificate issuer: /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0 Certificate serial: 326D89959BED9AC8B08D879C275A1898B09FC5EB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft Manifest number: 01CC Signing time: Sat 20 Dec 2025 03:27:39 +0000 Manifest this update: Sat 20 Dec 2025 03:22:39 +0000 Manifest next update: Sun 21 Dec 2025 03:58:39 +0000 Files and hashes: 1: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: xVcxNYqKybbN/Ps4xlecaMMazfKtFl+FisOE5h/ALPs=) 2: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: 9OxL8ydihq/rGdC3Oxfyl6eSKqtOJHZFiKhUYEnvb9U=) 3: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: kRX8Q1kSjYURwtsybXX1/m7t+80afkiNHBqf4aBcx/w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 03:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6d:89:95:9b:ed:9a:c8:b0:8d:87:9c:27:5a:18:98:b0:9f:c5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0 Validity Not Before: Dec 20 03:22:39 2025 GMT Not After : Dec 21 03:58:39 2025 GMT Subject: CN=4AFE97C62800925871CCA93AC83D9EE006B4348E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:db:6c:fd:2f:9c:2c:b7:ab:88:14:f0:1e:b8: 69:4c:ed:94:18:f2:1d:99:16:0d:86:80:dc:47:df: e3:c9:e7:08:10:68:18:42:36:6a:a9:cc:55:56:b7: 11:da:42:ee:db:17:5f:65:02:d6:0b:13:f7:31:1d: 85:29:e5:c6:24:98:b6:75:14:d0:85:f4:5b:5b:70: 66:b7:f4:88:0f:1e:62:4d:c7:9a:be:15:46:54:27: 6f:aa:30:89:f7:ec:03:ef:55:30:ab:6a:3c:6f:a2: 4c:14:78:94:0a:b9:c3:c3:85:66:ca:64:d8:63:f9: 8b:37:fa:96:13:17:ad:81:ba:0b:80:43:94:93:21: 0e:82:68:18:4d:60:f6:f5:d9:3a:15:da:9b:37:fe: f8:ed:d7:db:4b:8d:ff:d7:3d:b7:38:58:80:fa:c4: 0d:e8:0c:13:43:c8:96:c9:d6:35:9a:b3:34:ec:63: 82:1a:16:71:05:ff:75:ff:25:0a:19:60:47:c3:e6: 3a:38:8d:d7:5d:0d:73:f1:09:6b:3b:ff:d8:70:95: 15:73:9d:5b:d1:72:2f:c3:fb:f7:83:a7:19:02:48: ab:bf:9c:33:1b:0c:90:f3:a1:48:ac:36:ff:4b:2c: 7b:58:a7:95:b8:c0:89:98:29:bc:a8:f8:ee:54:a1: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FE:97:C6:28:00:92:58:71:CC:A9:3A:C8:3D:9E:E0:06:B4:34:8E X509v3 Authority Key Identifier: keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ae:f2:7d:22:0b:27:2a:2d:68:39:ab:95:9f:8e:b0:cd:bd: e6:4a:9c:61:a1:64:c7:d5:36:b5:a2:dc:c4:d1:2a:1f:fa:0c: 56:11:54:90:9e:90:57:ce:4f:4d:d2:0a:6a:79:47:28:b6:cb: 59:ea:1b:c1:53:53:46:14:08:fa:dc:08:5e:c3:f8:4f:11:60: 9e:ee:dd:bf:e4:0e:17:03:13:4d:2e:43:d0:da:d5:1c:1b:ba: 6f:fa:8c:bd:d7:7a:21:bf:bd:03:4e:71:9c:84:d1:de:03:af: a4:a5:3e:49:9f:f2:6d:7e:0d:73:cb:90:c0:30:2b:29:ee:05: ca:ad:c1:f5:d3:8d:ae:de:b0:94:7a:e4:2e:1a:f6:92:65:23: 2c:a5:1c:e6:5c:1d:ea:8f:c5:23:99:91:61:7c:00:9f:a2:a6: 88:9e:ee:f0:51:0e:b1:e9:d9:c9:a9:92:94:72:f0:04:33:c7: e8:7f:45:80:41:d9:a6:ea:ab:cc:58:c2:ca:8e:1c:e5:a1:0b: 5f:27:36:aa:e4:fa:02:c6:c8:ed:79:89:89:01:69:08:4a:30: 33:51:fd:b8:b4:76:f8:ba:94:5a:1b:ff:1a:6c:2a:21:b9:64: 1a:07:ba:c0:79:e0:72:60:9c:f9:fe:fd:ff:f9:d5:e4:c8:e2: 5d:53:e6:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMm2JlZvtmsiwjYecJ1oYmLCfxeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBMDRBODdFQUEzNTgzNEUxMTcyQzVCQjk2RDVEQjBE MEIyM0RDMDAeFw0yNTEyMjAwMzIyMzlaFw0yNTEyMjEwMzU4MzlaMDMxMTAvBgNV BAMTKDRBRkU5N0M2MjgwMDkyNTg3MUNDQTkzQUM4M0Q5RUUwMDZCNDM0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD022z9L5wst6uIFPAeuGlM7ZQY 8h2ZFg2GgNxH3+PJ5wgQaBhCNmqpzFVWtxHaQu7bF19lAtYLE/cxHYUp5cYkmLZ1 FNCF9FtbcGa39IgPHmJNx5q+FUZUJ2+qMIn37APvVTCrajxvokwUeJQKucPDhWbK ZNhj+Ys3+pYTF62BuguAQ5STIQ6CaBhNYPb12ToV2ps3/vjt19tLjf/XPbc4WID6 xA3oDBNDyJbJ1jWaszTsY4IaFnEF/3X/JQoZYEfD5jo4jdddDXPxCWs7/9hwlRVz nVvRci/D+/eDpxkCSKu/nDMbDJDzoUisNv9LLHtYp5W4wImYKbyo+O5UoWwrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSv6XxigAklhxzKk6yD2e4Aa0NI4wHwYDVR0j BBgwFoAUfKBKh+qjWDThFyxbuW1dsNCyPcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjN4cEFQOHBOeVN0VEFBVEZrck11SjhVZ01zZkVhbnRNVFN0alFrQWhH ekIvMC83Q0EwNEE4N0VBQTM1ODM0RTExNzJDNUJCOTZENURCMEQwQjIzREMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQTA0QTg3RUFBMzU4MzRF MTE3MkM1QkI5NkQ1REIwRDBCMjNEQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjN4cEFQOHBOeVN0VEFBVEZrck11SjhVZ01zZkVhbnRNVFN0alFrQWhHekIvMC83 Q0EwNEE4N0VBQTM1ODM0RTExNzJDNUJCOTZENURCMEQwQjIzREMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnK7yfSILJyotaDmrlZ+OsM295kqcYaFkx9U2taLcxNEqH/oMVhFUkJ6QV85P TdIKanlHKLbLWeobwVNTRhQI+twIXsP4TxFgnu7dv+QOFwMTTS5D0NrVHBu6b/qM vdd6Ib+9A05xnITR3gOvpKU+SZ/ybX4Nc8uQwDArKe4Fyq3B9dONrt6wlHrkLhr2 kmUjLKUc5lwd6o/FI5mRYXwAn6KmiJ7u8FEOsenZyamSlHLwBDPH6H9FgEHZpuqr zFjCyo4c5aELXyc2quT6AsbI7XmJiQFpCEowM1H9uLR2+LqUWhv/GmwqIblkGge6 wHngcmCc+f79//nV5MjiXVPmAA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:54:53 2025 by rpki-client