This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: ZhmngMNI/Ow2s9ftjaMNefLKpYaQ4cDs/fhRLyDCQbY= Subject key identifier: E9:1E:8A:34:9E:84:1F:9E:DE:C8:34:FC:25:16:A1:7D:ED:47:C5:F0 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 43BA6C86E2B63BBE6657A85955B58579BBC74361 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 034C Signing time: Sun 21 Dec 2025 20:20:00 +0000 Manifest this update: Sun 21 Dec 2025 20:15:00 +0000 Manifest next update: Mon 22 Dec 2025 23:26:00 +0000 Files and hashes: 1: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 2: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: McY91babYN0DioTxgVoQnOgIzBDmwqCqn+IZgvHIyjQ=) 3: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: XTvtebp7oM9owviERxilfDQ7pM/0nW6KsEuwtKryh3E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 22:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:6c:86:e2:b6:3b:be:66:57:a8:59:55:b5:85:79:bb:c7:43:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Dec 21 20:15:00 2025 GMT Not After : Dec 22 23:26:00 2025 GMT Subject: CN=E91E8A349E841F9EDEC834FC2516A17DED47C5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:13:fb:c5:7a:63:c2:de:ea:ec:7a:01:e0: 40:76:04:73:18:5d:5f:de:ee:c9:b1:9f:7e:f0:dc: a7:0f:1c:eb:15:70:8f:04:14:66:f2:b7:03:e7:f3: 72:7c:dc:bb:be:75:e5:0c:5e:ad:cb:0b:58:8a:2f: 2a:da:36:06:ce:79:30:38:a0:dd:1d:a2:5b:cd:51: 68:ee:25:b6:94:aa:23:28:fc:bf:c4:cd:5c:c2:c5: 7d:bd:ac:0e:2e:fa:00:9e:5f:42:5a:17:b8:b5:23: 43:52:0e:31:37:6f:2f:a7:36:5f:1d:aa:50:d9:2e: 05:54:a3:c8:f7:be:f5:04:d5:69:84:8c:7d:9e:a0: e5:f2:d9:38:28:64:7c:9a:3c:98:da:66:be:22:91: fc:4f:92:04:00:e8:a5:28:d3:b6:87:fe:d6:d5:41: d1:98:b2:68:c7:58:0c:8d:cb:2d:bb:da:ce:f7:9f: ab:2f:7b:56:0d:76:cd:f9:2e:7c:e4:53:6c:79:c6: bd:ff:c1:12:59:68:39:fb:e2:01:17:b9:60:cb:29: e3:c3:69:59:21:1b:7b:3b:ef:2c:93:3e:33:89:16: f6:40:ce:3b:e2:5e:d6:f9:8a:c9:df:16:c0:b5:eb: 05:b7:95:19:bf:4f:fd:5a:a8:ba:79:89:59:42:c2: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1E:8A:34:9E:84:1F:9E:DE:C8:34:FC:25:16:A1:7D:ED:47:C5:F0 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:22:55:0b:7c:09:15:c0:df:28:01:69:1f:ae:b5:bc:6b: ec:0f:3a:8e:31:59:b8:23:2a:30:94:fc:a1:52:20:05:62:5c: bd:30:95:68:d5:f7:52:46:57:a1:0f:7f:00:a0:0c:9c:31:3c: a6:91:e8:53:81:b6:c0:72:0c:03:ce:8d:e7:51:91:db:9b:b1: b1:78:dd:39:cd:56:46:9e:1d:ee:e8:46:68:27:24:bb:3f:4d: 4a:50:cf:2d:63:1d:8d:74:5d:76:97:5e:93:58:8f:0d:2d:63: 03:70:41:3c:05:8c:a8:f6:88:1f:5c:b7:d4:99:83:d6:f2:6a: 03:bf:60:f6:47:8e:e5:2f:63:b4:cc:2e:f1:b0:72:32:0f:8d: 58:6e:2e:c6:97:d6:89:a0:0a:a4:c6:29:06:29:35:9a:22:ec: 4e:13:f8:8d:89:6a:41:e4:12:8b:1c:77:9a:2e:50:50:30:b1: b8:be:13:0a:df:59:b5:72:1a:58:a2:c8:47:52:94:5e:ad:f0: 78:47:06:11:59:36:2e:40:8d:7f:93:0d:eb:fd:03:a1:45:9c: 38:47:b3:d1:3f:ac:0e:32:e2:e0:2c:bc:b6:dd:cf:47:0f:cb: 5e:8f:da:63:f3:1b:62:8d:83:46:41:06:7a:d9:41:e7:19:83: f6:d5:c5:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ7pshuK2O75mV6hZVbWFebvHQ2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNTEyMjEyMDE1MDBaFw0yNTEyMjIyMzI2MDBaMDMxMTAvBgNV BAMTKEU5MUU4QTM0OUU4NDFGOUVERUM4MzRGQzI1MTZBMTdERUQ0N0M1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrxP7xXpjwt7q7HoB4EB2BHMY XV/e7smxn37w3KcPHOsVcI8EFGbytwPn83J83Lu+deUMXq3LC1iKLyraNgbOeTA4 oN0dolvNUWjuJbaUqiMo/L/EzVzCxX29rA4u+gCeX0JaF7i1I0NSDjE3by+nNl8d qlDZLgVUo8j3vvUE1WmEjH2eoOXy2TgoZHyaPJjaZr4ikfxPkgQA6KUo07aH/tbV QdGYsmjHWAyNyy272s73n6sve1YNds35LnzkU2x5xr3/wRJZaDn74gEXuWDLKePD aVkhG3s77yyTPjOJFvZAzjviXtb5isnfFsC16wW3lRm/T/1aqLp5iVlCwkjFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6R6KNJ6EH57eyDT8JRahfe1HxfAwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgm4iVQt8CRXA3ygBaR+utbxr7A86jjFZuCMqMJT8oVIgBWJcvTCVaNX3UkZX oQ9/AKAMnDE8ppHoU4G2wHIMA86N51GR25uxsXjdOc1WRp4d7uhGaCckuz9NSlDP LWMdjXRddpdek1iPDS1jA3BBPAWMqPaIH1y31JmD1vJqA79g9keO5S9jtMwu8bBy Mg+NWG4uxpfWiaAKpMYpBik1miLsThP4jYlqQeQSixx3mi5QUDCxuL4TCt9ZtXIa WKLIR1KUXq3weEcGEVk2LkCNf5MN6/0DoUWcOEez0T+sDjLi4Cy8tt3PRw/LXo/a Y/MbYo2DRkEGetlB5xmD9tXF0g== -----END CERTIFICATE-----Generated at Sun Dec 21 22:32:00 2025 by rpki-client