This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: 86B3iuNSGSPC7k6jMKOPRSxBTCh6mZWOjRmzQFppx4I= Subject key identifier: A8:68:9E:42:63:EA:80:1F:1D:07:1A:01:AB:66:26:5F:EA:B4:41:3E Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 667E96838075F696AF3A4BC8C4C398240450ABD7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 0345 Signing time: Sat 20 Dec 2025 17:20:34 +0000 Manifest this update: Sat 20 Dec 2025 17:15:34 +0000 Manifest next update: Sun 21 Dec 2025 19:45:34 +0000 Files and hashes: 1: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=) 2: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=) 3: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: RvI2oNHKcalbLeCboNyzxAMzuSG3c9UVWpU3GG84Sp4=) 4: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 19:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7e:96:83:80:75:f6:96:af:3a:4b:c8:c4:c3:98:24:04:50:ab:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Dec 20 17:15:34 2025 GMT Not After : Dec 21 19:45:34 2025 GMT Subject: CN=A8689E4263EA801F1D071A01AB66265FEAB4413E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:c3:72:a9:ef:9d:40:9b:01:c6:d9:1b:53: c6:f7:1e:06:27:ec:1d:6d:e5:bf:ef:32:1c:eb:6b: 80:39:cd:7f:73:0d:1f:ad:09:6c:38:24:65:ae:32: cd:5b:e1:3d:39:47:d6:da:39:41:d5:7b:7a:51:f3: de:2e:48:a6:a4:fd:82:24:88:f9:2a:87:88:22:9a: d9:1a:5f:5a:f3:56:64:74:b9:59:f7:32:ff:04:b6: 68:83:2b:60:a4:3d:1f:ff:b0:3b:28:3b:95:a4:8d: 25:7d:65:c4:7c:48:1b:92:25:d7:64:73:2e:25:f8: 66:48:04:63:23:9b:c7:44:98:a7:87:98:13:df:15: 8d:3a:89:e7:ed:38:43:31:d7:bc:42:4b:97:d5:c0: a9:b9:2a:45:f2:d6:10:d5:ff:78:0f:4a:32:94:ad: 6d:c7:a7:50:9a:39:67:9b:31:27:de:02:c9:7f:49: 8d:41:e5:73:60:26:b7:04:ed:04:50:98:36:db:df: 17:5d:de:0c:cd:da:a5:93:5e:b6:84:89:a7:1b:f9: 87:75:8d:01:b1:12:4e:00:bb:68:6b:f4:01:d9:bc: 81:76:ca:05:ca:4d:7b:74:93:b2:01:91:d2:66:fb: 33:06:93:ce:0c:49:1b:47:00:d9:02:9d:2e:a0:2d: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:9E:42:63:EA:80:1F:1D:07:1A:01:AB:66:26:5F:EA:B4:41:3E X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:31:49:3e:ce:f7:f3:f4:aa:b0:08:f2:fb:32:4a:a2:b4: d7:cc:95:28:fd:52:f6:26:74:4b:7a:bc:a9:df:bb:b8:dd:13: 9e:6d:62:55:c7:48:45:e1:fb:12:8f:72:32:0a:d6:b0:b5:25: 59:bf:9c:ac:0f:7a:6a:d2:b2:e1:45:12:db:e8:91:3d:60:fb: 4b:c6:80:c9:e8:a1:8c:d0:06:99:13:41:b6:ab:3e:90:95:27: c8:35:50:70:9e:3c:85:fb:91:a6:9f:ef:e2:24:02:d5:de:0d: 55:07:38:8f:4e:a6:75:89:38:8c:9c:d3:ef:14:26:9d:c8:e5: 7b:0f:28:9e:8d:05:2c:81:de:ea:ee:e6:b1:75:38:18:e5:8f: 12:2e:12:03:c7:d6:f2:1a:94:cd:b6:3e:07:c0:29:be:21:59: 5f:24:91:18:57:23:0c:cb:54:01:5a:61:c5:2e:71:8a:22:bf: 81:cc:c2:72:08:46:8d:46:c4:d9:04:e9:24:1a:a9:6c:77:5e: 37:bd:47:45:35:ca:d5:3a:88:69:af:54:04:a9:ed:42:30:7e: f8:91:1c:75:00:be:c3:53:df:bc:e3:98:ed:b3:37:77:49:46: 6f:0c:03:16:52:c0:e1:46:49:f9:5e:e8:22:99:36:51:d7:4f: 03:56:a9:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZn6Wg4B19pavOkvIxMOYJARQq9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTEyMjAxNzE1MzRaFw0yNTEyMjExOTQ1MzRaMDMxMTAvBgNV BAMTKEE4Njg5RTQyNjNFQTgwMUYxRDA3MUEwMUFCNjYyNjVGRUFCNDQxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3MNyqe+dQJsBxtkbU8b3HgYn 7B1t5b/vMhzra4A5zX9zDR+tCWw4JGWuMs1b4T05R9baOUHVe3pR894uSKak/YIk iPkqh4gimtkaX1rzVmR0uVn3Mv8EtmiDK2CkPR//sDsoO5WkjSV9ZcR8SBuSJddk cy4l+GZIBGMjm8dEmKeHmBPfFY06ieftOEMx17xCS5fVwKm5KkXy1hDV/3gPSjKU rW3Hp1CaOWebMSfeAsl/SY1B5XNgJrcE7QRQmDbb3xdd3gzN2qWTXraEiacb+Yd1 jQGxEk4Au2hr9AHZvIF2ygXKTXt0k7IBkdJm+zMGk84MSRtHANkCnS6gLes/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqGieQmPqgB8dBxoBq2YmX+q0QT4wHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2cxST7O9/P0qrAI8vsySqK018yVKP1S9iZ0S3q8qd+7uN0Tnm1iVcdIReH7 Eo9yMgrWsLUlWb+crA96atKy4UUS2+iRPWD7S8aAyeihjNAGmRNBtqs+kJUnyDVQ cJ48hfuRpp/v4iQC1d4NVQc4j06mdYk4jJzT7xQmncjlew8ono0FLIHe6u7msXU4 GOWPEi4SA8fW8hqUzbY+B8ApviFZXySRGFcjDMtUAVphxS5xiiK/gczCcghGjUbE 2QTpJBqpbHdeN71HRTXK1TqIaa9UBKntQjB++JEcdQC+w1PfvOOY7bM3d0lGbwwD FlLA4UZJ+V7oIpk2UddPA1ap4g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:46:13 2025 by rpki-client