This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft File: AD2E0D7D520E8493681B563F6D06D97221F301B2.mft (raw, json) Hash identifier: Wm3ZS1uD5Gm/Km4UgjrwZc+9rldu5Ifxm31Y1Whl16A= Subject key identifier: 10:C2:36:7E:52:B5:8D:12:74:66:30:8D:09:E8:5C:5B:BC:21:FF:D2 Authority key identifier: AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2 Certificate issuer: /CN=AD2E0D7D520E8493681B563F6D06D97221F301B2 Certificate serial: 2AFAD1AAD6AE2E3936BF0DB8E29841B15AE54DEC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft Manifest number: E3 Signing time: Mon 22 Dec 2025 03:29:46 +0000 Manifest this update: Mon 22 Dec 2025 03:24:46 +0000 Manifest next update: Tue 23 Dec 2025 07:00:46 +0000 Files and hashes: 1: 323830343a326437383a3a2f33322d3438203d3e20323635323835.roa (hash: KTEhQcU5NggrfcvmT19X/DnNXtyLtRRybFwFXG0zB1U=) 2: 3136382e39302e3134382e302f32322d3332203d3e20323635323835.roa (hash: WPQhACR9II7fFzwEctmqNMOWxb3w3dwSYjpMGsBdSaw=) 3: AD2E0D7D520E8493681B563F6D06D97221F301B2.crl (hash: pRZFmujOstlsL4xPPNZtDyUXUnmwFiPdIs/XeeIVYUw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fa:d1:aa:d6:ae:2e:39:36:bf:0d:b8:e2:98:41:b1:5a:e5:4d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2E0D7D520E8493681B563F6D06D97221F301B2 Validity Not Before: Dec 22 03:24:46 2025 GMT Not After : Dec 23 07:00:46 2025 GMT Subject: CN=10C2367E52B58D127466308D09E85C5BBC21FFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:55:fb:74:b1:29:92:1a:12:bd:ee:11:e0:39: a2:7c:28:03:b5:a2:dd:0f:1d:e0:74:1c:6c:a4:0c: 8f:17:35:d4:ec:ee:03:db:35:59:b6:37:e5:b4:ee: 62:01:7c:87:a6:ee:7d:f3:66:ca:f0:44:11:c0:0b: 73:ea:9f:36:62:0c:b8:bb:8a:7b:e5:ad:80:1c:9b: 04:af:7c:5d:df:49:63:00:0f:4e:6f:cb:9b:e6:ef: 9a:7f:30:e7:4d:30:15:b6:3b:bd:8e:5a:7d:f7:f7: 5d:bc:23:b0:35:ae:c4:a8:2c:c6:dd:e7:64:31:4d: 2f:b3:63:73:4b:c6:b6:f8:a1:d7:62:c8:25:dc:68: 1b:42:25:f3:97:0c:86:f8:4c:ab:c9:a6:e4:f1:23: 37:e4:35:7f:ba:40:fe:e3:69:66:c4:ec:88:63:16: f8:6b:54:25:5b:ef:bd:a4:f8:fc:12:10:ee:0b:ac: 2e:2f:99:4a:49:9b:2c:b2:6e:b9:2c:ba:ef:f1:df: 5a:b4:33:fb:ce:ff:3c:fa:68:7f:26:40:90:bb:39: 9d:04:e9:79:e6:97:04:66:5d:ae:0c:46:68:8a:39: 51:79:4d:3e:bd:d4:60:99:22:f0:3b:e7:1a:88:15: 16:4d:3a:8d:ea:e5:2c:df:41:5c:05:ef:7c:f2:31: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:36:7E:52:B5:8D:12:74:66:30:8D:09:E8:5C:5B:BC:21:FF:D2 X509v3 Authority Key Identifier: keyid:AD:2E:0D:7D:52:0E:84:93:68:1B:56:3F:6D:06:D9:72:21:F3:01:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2E0D7D520E8493681B563F6D06D97221F301B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/AD2E0D7D520E8493681B563F6D06D97221F301B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ee:be:41:75:0a:15:53:fb:f0:b9:8d:3c:8f:82:51:0a:64: 96:60:f3:9c:51:61:f9:8b:c0:68:11:38:27:cf:15:e0:c5:6e: 30:cf:b6:e0:b9:27:26:95:af:de:ef:58:e5:5e:bb:1e:52:f8: 16:1e:4b:75:f6:d3:d2:41:5f:26:64:23:e6:34:2c:ad:e8:a5: c0:37:9a:95:80:0a:8f:39:a8:74:0d:c2:8e:f1:d0:53:2b:38: 34:46:9a:76:c7:44:f4:ac:7b:ce:48:49:60:91:e8:d7:71:6c: 5c:04:28:af:b5:a6:f3:ff:7d:2c:37:69:1f:d1:ca:eb:dd:bb: 19:c9:5c:2b:64:7d:e8:54:75:4a:f7:43:ab:b9:f3:a7:f0:0c: 8a:12:45:16:d9:73:df:f3:59:11:33:55:b1:f5:19:d1:ba:3d: 45:d2:0d:65:8e:e3:8d:e1:6e:ed:9a:c7:f3:9a:f2:78:07:e6: 3f:5a:3e:b9:42:af:96:a1:a3:ae:5c:b8:70:9b:8e:71:64:99: c8:43:a5:3b:8f:bd:28:de:ae:12:ea:33:4c:a1:28:12:a1:a7: 80:34:f6:e4:b3:51:48:87:55:6b:96:a2:b1:7c:44:24:02:67: 76:2b:fa:08:72:8e:36:44:29:87:8e:70:66:c9:4b:36:0e:a0: 9d:c0:1b:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKvrRqtauLjk2vw244phBsVrlTewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyRTBEN0Q1MjBFODQ5MzY4MUI1NjNGNkQwNkQ5NzIy MUYzMDFCMjAeFw0yNTEyMjIwMzI0NDZaFw0yNTEyMjMwNzAwNDZaMDMxMTAvBgNV BAMTKDEwQzIzNjdFNTJCNThEMTI3NDY2MzA4RDA5RTg1QzVCQkMyMUZGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVft0sSmSGhK97hHgOaJ8KAO1 ot0PHeB0HGykDI8XNdTs7gPbNVm2N+W07mIBfIem7n3zZsrwRBHAC3PqnzZiDLi7 invlrYAcmwSvfF3fSWMAD05vy5vm75p/MOdNMBW2O72OWn339128I7A1rsSoLMbd 52QxTS+zY3NLxrb4oddiyCXcaBtCJfOXDIb4TKvJpuTxIzfkNX+6QP7jaWbE7Ihj FvhrVCVb772k+PwSEO4LrC4vmUpJmyyybrksuu/x31q0M/vO/zz6aH8mQJC7OZ0E 6XnmlwRmXa4MRmiKOVF5TT691GCZIvA75xqIFRZNOo3q5SzfQVwF73zyMSBfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEMI2flK1jRJ0ZjCNCehcW7wh/9IwHwYDVR0j BBgwFoAUrS4NfVIOhJNoG1Y/bQbZciHzAbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN SzUvMC9BRDJFMEQ3RDUyMEU4NDkzNjgxQjU2M0Y2RDA2RDk3MjIxRjMwMUIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEMkUwRDdENTIwRTg0OTM2 ODFCNTYzRjZEMDZEOTcyMjFGMzAxQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRNSzUvMC9B RDJFMEQ3RDUyMEU4NDkzNjgxQjU2M0Y2RDA2RDk3MjIxRjMwMUIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD+6+QXUKFVP78LmNPI+CUQpklmDznFFh+YvAaBE4J88V4MVuMM+24LknJpWv 3u9Y5V67HlL4Fh5LdfbT0kFfJmQj5jQsreilwDealYAKjzmodA3CjvHQUys4NEaa dsdE9Kx7zkhJYJHo13FsXAQor7Wm8/99LDdpH9HK6927GclcK2R96FR1SvdDq7nz p/AMihJFFtlz3/NZETNVsfUZ0bo9RdINZY7jjeFu7ZrH85ryeAfmP1o+uUKvlqGj rly4cJuOcWSZyEOlO4+9KN6uEuozTKEoEqGngDT25LNRSIdVa5aisXxEJAJndiv6 CHKONkQph45wZslLNg6gncAbdA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:00 2025 by rpki-client