This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json) Hash identifier: 8GLBO6iPJTm0A6IAjFgQTk2SPaTxVIinJc8F07VeuFw= Subject key identifier: 38:BF:4B:BB:DA:02:B1:95:4B:2B:89:F6:8E:C8:4F:9F:31:80:9B:62 Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Certificate issuer: /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Certificate serial: 1E340CCB920C364EE2563F17A03BCA7964948A81 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft Manifest number: 03B1 Signing time: Mon 22 Dec 2025 22:40:00 +0000 Manifest this update: Mon 22 Dec 2025 22:35:00 +0000 Manifest next update: Tue 23 Dec 2025 22:40:00 +0000 Files and hashes: 1: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: RGX+L64iTn1m3PbID4M+o4GdDuSbhVaiieOt3qzcDsQ=) 2: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=) 3: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 22:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:34:0c:cb:92:0c:36:4e:e2:56:3f:17:a0:3b:ca:79:64:94:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Validity Not Before: Dec 22 22:35:00 2025 GMT Not After : Dec 23 22:40:00 2025 GMT Subject: CN=3082010A0282010100C20797C3FC2102123E0DCD0B3F44A3AC61F197EBB5F3AE06F2165F8264E781B592BE0236198DCA8BE2C742AA4E7E85704E7C712B54121A9A2AE5B72663C8DC707EDE7220B5F2CF28E7E59AA799AEB6B5AB1D33C526B912C5359A35792B4CCF51CA335C7C11055D086D59C1CBA02791DDBCE7DAC2C5EA133BDD4BEE87F2CC209A5EE2FF9A9B76D4A3DBAE67472AEE5FF80600DB57AB9F05E3B97C23F21B03714B4DFAE9597679EE5A66EED72F7A7182DCEAB0C4D63DD2B1B7BAD1DF4EF0669F9CAD3D78B938F7494968BFD266DC0D02C4E02E6FDC231D982ACE14A7F4215E2E1746A2DD894AA13C78AD51F2EB2CC0633012C4995F47A31F6A88D45C961154EEAD0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:97:c3:fc:21:02:12:3e:0d:cd:0b:3f:44: a3:ac:61:f1:97:eb:b5:f3:ae:06:f2:16:5f:82:64: e7:81:b5:92:be:02:36:19:8d:ca:8b:e2:c7:42:aa: 4e:7e:85:70:4e:7c:71:2b:54:12:1a:9a:2a:e5:b7: 26:63:c8:dc:70:7e:de:72:20:b5:f2:cf:28:e7:e5: 9a:a7:99:ae:b6:b5:ab:1d:33:c5:26:b9:12:c5:35: 9a:35:79:2b:4c:cf:51:ca:33:5c:7c:11:05:5d:08: 6d:59:c1:cb:a0:27:91:dd:bc:e7:da:c2:c5:ea:13: 3b:dd:4b:ee:87:f2:cc:20:9a:5e:e2:ff:9a:9b:76: d4:a3:db:ae:67:47:2a:ee:5f:f8:06:00:db:57:ab: 9f:05:e3:b9:7c:23:f2:1b:03:71:4b:4d:fa:e9:59: 76:79:ee:5a:66:ee:d7:2f:7a:71:82:dc:ea:b0:c4: d6:3d:d2:b1:b7:ba:d1:df:4e:f0:66:9f:9c:ad:3d: 78:b9:38:f7:49:49:68:bf:d2:66:dc:0d:02:c4:e0: 2e:6f:dc:23:1d:98:2a:ce:14:a7:f4:21:5e:2e:17: 46:a2:dd:89:4a:a1:3c:78:ad:51:f2:eb:2c:c0:63: 30:12:c4:99:5f:47:a3:1f:6a:88:d4:5c:96:11:54: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BF:4B:BB:DA:02:B1:95:4B:2B:89:F6:8E:C8:4F:9F:31:80:9B:62 X509v3 Authority Key Identifier: keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c7:64:3c:01:78:42:61:5c:50:ff:5e:f8:3a:a6:6a:d6:0f: 4c:b1:b6:6d:0f:a8:9c:82:43:bf:fd:d5:41:3a:d0:40:2c:33: 8b:c4:6e:d3:cf:87:9e:1c:c2:14:91:05:a1:dc:a2:f9:63:09: 81:8c:3f:c3:56:98:3e:83:96:9f:59:78:08:7c:94:38:76:78: 2c:bf:75:6d:7c:b8:2e:42:69:9b:38:5b:a0:59:44:f8:31:17: 9d:af:3e:cc:df:1b:0d:32:85:fc:75:55:f2:ee:bf:fc:b4:82: 37:3c:d5:a6:6b:8f:61:71:09:98:48:1d:53:a8:b5:8e:f1:0e: 08:2f:90:c0:5d:d6:39:7c:00:0f:a5:1c:72:9a:31:04:74:b8: 66:d6:80:e8:c2:23:6d:04:4e:49:06:ee:8c:a4:40:68:87:27: a9:94:42:31:28:58:7a:10:59:95:86:83:3c:d0:d4:2e:24:77: 2a:3e:f3:38:5f:84:fa:2c:97:7b:54:89:0a:9f:06:39:7f:81: f1:0a:be:49:ff:c3:5a:00:f6:55:11:5e:12:57:8a:d5:fe:08: a8:5f:8d:ae:a5:c7:02:85:5d:22:6f:76:bb:16:a0:7a:12:2e: ed:e3:dc:e5:32:e5:2b:93:e8:38:43:fd:04:d4:fb:f1:3f:f5: 7f:3c:87:09 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUHjQMy5IMNk7iVj8XoDvKeWSUioEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RGNkRGODdGQzc2Q0Mx NTdBMDdDMTAeFw0yNTEyMjIyMjM1MDBaFw0yNTEyMjMyMjQwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzIwNzk3QzNGQzIxMDIxMjNF MERDRDBCM0Y0NEEzQUM2MUYxOTdFQkI1RjNBRTA2RjIxNjVGODI2NEU3ODFCNTky QkUwMjM2MTk4RENBOEJFMkM3NDJBQTRFN0U4NTcwNEU3QzcxMkI1NDEyMUE5QTJB RTVCNzI2NjNDOERDNzA3RURFNzIyMEI1RjJDRjI4RTdFNTlBQTc5OUFFQjZCNUFC MUQzM0M1MjZCOTEyQzUzNTlBMzU3OTJCNENDRjUxQ0EzMzVDN0MxMTA1NUQwODZE NTlDMUNCQTAyNzkxRERCQ0U3REFDMkM1RUExMzNCREQ0QkVFODdGMkNDMjA5QTVF RTJGRjlBOUI3NkQ0QTNEQkFFNjc0NzJBRUU1RkY4MDYwMERCNTdBQjlGMDVFM0I5 N0MyM0YyMUIwMzcxNEI0REZBRTk1OTc2NzlFRTVBNjZFRUQ3MkY3QTcxODJEQ0VB QjBDNEQ2M0REMkIxQjdCQUQxREY0RUYwNjY5RjlDQUQzRDc4QjkzOEY3NDk0OTY4 QkZEMjY2REMwRDAyQzRFMDJFNkZEQzIzMUQ5ODJBQ0UxNEE3RjQyMTVFMkUxNzQ2 QTJERDg5NEFBMTNDNzhBRDUxRjJFQjJDQzA2MzMwMTJDNDk5NUY0N0EzMUY2QTg4 RDQ1Qzk2MTE1NEVFQUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAwgeXw/whAhI+Dc0LP0SjrGHxl+u1864G8hZfgmTngbWSvgI2GY3K i+LHQqpOfoVwTnxxK1QSGpoq5bcmY8jccH7eciC18s8o5+Wap5mutrWrHTPFJrkS xTWaNXkrTM9RyjNcfBEFXQhtWcHLoCeR3bzn2sLF6hM73Uvuh/LMIJpe4v+am3bU o9uuZ0cq7l/4BgDbV6ufBeO5fCPyGwNxS0366Vl2ee5aZu7XL3pxgtzqsMTWPdKx t7rR307wZp+crT14uTj3SUlov9Jm3A0CxOAub9wjHZgqzhSn9CFeLhdGot2JSqE8 eK1R8usswGMwEsSZX0ejH2qI1FyWEVTurQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FDi/S7vaArGVSyuJ9o7IT58xgJtiMB8GA1UdIwQYMBaAFCPs1NGviM4uGz3234f8 dswVegfBMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2 NndQSE5wYnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0Uy RTFCM0RGNkRGODdGQzc2Q0MxNTdBMDdDMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8yM0VDRDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0Ew N0MxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2NndQSE5w YnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RG NkRGODdGQzc2Q0MxNTdBMDdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF/HZDwBeEJhXFD/Xvg6pmrW D0yxtm0PqJyCQ7/91UE60EAsM4vEbtPPh54cwhSRBaHcovljCYGMP8NWmD6Dlp9Z eAh8lDh2eCy/dW18uC5CaZs4W6BZRPgxF52vPszfGw0yhfx1VfLuv/y0gjc81aZr j2FxCZhIHVOotY7xDggvkMBd1jl8AA+lHHKaMQR0uGbWgOjCI20ETkkG7oykQGiH J6mUQjEoWHoQWZWGgzzQ1C4kdyo+8zhfhPosl3tUiQqfBjl/gfEKvkn/w1oA9lUR XhJXitX+CKhfja6lxwKFXSJvdrsWoHoSLu3j3OUy5SuT6DhD/QTU+/E/9X88hwk= -----END CERTIFICATE-----Generated at Tue Dec 23 10:53:22 2025 by rpki-client