This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft File: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft (raw, json) Hash identifier: B7Pb+TRqCak2A/+RbYigiaJlM0Rj3UauhUMPn3XwBTI= Subject key identifier: 4C:45:EC:42:D5:A2:CE:6C:FE:F0:7A:2C:F2:CC:41:7E:7D:2A:D4:1D Authority key identifier: 71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 Certificate issuer: /CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Certificate serial: 0C39789248C844B7C301373D76B3C3ED6FFBA6A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft Manifest number: D4 Signing time: Fri 19 Dec 2025 21:38:14 +0000 Manifest this update: Fri 19 Dec 2025 21:33:14 +0000 Manifest next update: Sat 20 Dec 2025 23:29:14 +0000 Files and hashes: 1: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl (hash: uDeuqJEW8j1Cgswra6FlcJsJTlefBr71oBQVJOQfPp0=) 2: 323830343a393363343a3a2f33322d3332203d3e20323734373939.roa (hash: Lg2xMCDUflfzYLEqDuILPmwVidL9vHQP1G7+KLc+SfE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 23:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:39:78:92:48:c8:44:b7:c3:01:37:3d:76:b3:c3:ed:6f:fb:a6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Validity Not Before: Dec 19 21:33:14 2025 GMT Not After : Dec 20 23:29:14 2025 GMT Subject: CN=4C45EC42D5A2CE6CFEF07A2CF2CC417E7D2AD41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:e5:c5:52:e7:41:84:da:6a:7d:70:db:7d: 61:49:e8:92:95:38:7b:9d:ae:52:8e:2e:fb:9e:86: 7b:f0:31:e7:45:90:bf:7a:40:52:b7:3f:21:7d:af: 80:24:ae:6f:15:ce:b4:2c:a4:91:34:f6:0a:1c:f8: 86:93:3b:cf:03:3a:07:fe:4e:b9:bd:6d:9f:85:22: f7:0d:9f:97:51:fa:d6:36:06:02:de:84:3a:bd:d9: 0c:b5:8c:1a:d9:60:56:93:63:ac:80:0c:a2:4f:95: f8:0d:44:b8:ef:36:8d:8e:a6:e9:94:d4:43:03:55: 35:a5:9e:d7:46:50:d4:8a:8d:5a:8e:d8:c5:33:2c: 71:cc:ae:5a:b0:e3:d0:81:a1:1a:f7:cf:67:2f:6e: c7:2e:de:1b:45:4b:5f:c0:4d:59:3b:2c:83:48:05: 9e:af:a6:bc:1d:bc:fd:eb:f1:0f:69:b6:d8:ee:b3: 75:0c:62:46:3e:67:e6:60:c2:68:05:d5:80:d4:3c: e5:e3:8e:e9:02:0b:c7:53:79:c2:6b:a4:5e:14:a1: 99:f7:31:c0:85:2e:52:20:5d:47:73:17:e9:ae:c8: 1a:d8:51:ca:85:f0:a2:24:ed:bd:d0:c3:b2:43:8c: 4d:2f:a9:b8:71:c1:bb:6c:99:7c:da:10:50:db:2f: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:EC:42:D5:A2:CE:6C:FE:F0:7A:2C:F2:CC:41:7E:7D:2A:D4:1D X509v3 Authority Key Identifier: keyid:71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:85:a1:22:80:18:92:a0:0c:5f:63:50:75:37:d5:0a:a7:8d: 9c:0c:57:60:42:f9:02:7f:61:56:df:41:cb:1d:c6:7b:90:c6: 47:c1:d0:84:ba:e1:41:55:d5:4b:cc:87:89:c2:87:c7:a3:f0: 6a:d4:6a:ed:48:b7:ba:42:ad:ad:80:4f:33:d9:cd:ac:81:ab: d1:69:86:11:01:e4:12:16:8c:2a:a8:ff:65:52:42:35:dd:69: ea:49:d5:d1:03:0c:49:2f:71:34:8d:9a:22:bd:c5:54:b3:db: 52:b7:33:fa:26:aa:95:fb:7a:4f:ce:e3:eb:0f:0c:2c:ac:af: af:9a:d2:96:37:2b:91:cd:a0:80:7b:9a:e5:de:2d:7f:1c:81: aa:d3:05:ae:4b:74:24:92:06:8c:1f:43:87:c2:80:34:09:a2: 48:87:9f:4f:b1:b2:45:2a:66:12:b5:b4:8b:11:5e:3b:22:ed: ae:6d:da:8c:da:18:31:21:13:aa:ab:f7:19:a8:57:5e:1a:bf: 90:61:23:e8:dc:81:bf:22:50:93:39:bd:df:21:af:2e:84:6f: 14:02:59:0b:0e:3d:1e:b7:d3:95:04:27:07:7b:c4:2d:0c:6a: ee:a8:3b:dd:63:f1:6d:b6:b4:1f:a3:d7:4e:65:b7:f2:3b:38: fa:a9:8f:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDDl4kkjIRLfDATc9drPD7W/7pqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFEM0EyREVDOEJBRTY2NzVEQkJCQUIzRkI3NzNFNkRD RjRBNkZCOTAeFw0yNTEyMTkyMTMzMTRaFw0yNTEyMjAyMzI5MTRaMDMxMTAvBgNV BAMTKDRDNDVFQzQyRDVBMkNFNkNGRUYwN0EyQ0YyQ0M0MTdFN0QyQUQ0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0uXFUudBhNpqfXDbfWFJ6JKV OHudrlKOLvuehnvwMedFkL96QFK3PyF9r4Akrm8VzrQspJE09goc+IaTO88DOgf+ Trm9bZ+FIvcNn5dR+tY2BgLehDq92Qy1jBrZYFaTY6yADKJPlfgNRLjvNo2OpumU 1EMDVTWlntdGUNSKjVqO2MUzLHHMrlqw49CBoRr3z2cvbscu3htFS1/ATVk7LINI BZ6vprwdvP3r8Q9pttjus3UMYkY+Z+ZgwmgF1YDUPOXjjukCC8dTecJrpF4UoZn3 McCFLlIgXUdzF+muyBrYUcqF8KIk7b3Qw7JDjE0vqbhxwbtsmXzaEFDbL6FRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTEXsQtWizmz+8Hos8sxBfn0q1B0wHwYDVR0j BBgwFoAUcdOi3si65mddu7qz+3c+bc9Kb7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy c1kvMC83MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDNBMkRFQzhCQUU2Njc1 REJCQkFCM0ZCNzczRTZEQ0Y0QTZGQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC83 MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZYWhIoAYkqAMX2NQdTfVCqeNnAxXYEL5An9hVt9Byx3Ge5DGR8HQhLrhQVXV S8yHicKHx6PwatRq7Ui3ukKtrYBPM9nNrIGr0WmGEQHkEhaMKqj/ZVJCNd1p6knV 0QMMSS9xNI2aIr3FVLPbUrcz+iaqlft6T87j6w8MLKyvr5rSljcrkc2ggHua5d4t fxyBqtMFrkt0JJIGjB9Dh8KANAmiSIefT7GyRSpmErW0ixFeOyLtrm3ajNoYMSET qqv3GahXXhq/kGEj6NyBvyJQkzm93yGvLoRvFAJZCw49HrfTlQQnB3vELQxq7qg7 3WPxbba0H6PXTmW38js4+qmP+w== -----END CERTIFICATE-----Generated at Sat Dec 20 11:17:16 2025 by rpki-client