This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: kXp+Q7+abl05//1dJ7N9kw4Ftv/9mTIFsu+5hSYFF0s= Subject key identifier: 22:33:73:07:6A:71:EB:03:97:EA:23:35:B9:EB:4A:F8:99:2C:20:E2 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 1931323E49D0DD4F47C146F5736DE4B0016CB190 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0347 Signing time: Sun 21 Dec 2025 12:49:15 +0000 Manifest this update: Sun 21 Dec 2025 12:44:15 +0000 Manifest next update: Mon 22 Dec 2025 14:10:15 +0000 Files and hashes: 1: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: 00u33tlFbGkJ4wZpWVydN+QtOq0rfS8g45UqbeBs+38=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 14:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:31:32:3e:49:d0:dd:4f:47:c1:46:f5:73:6d:e4:b0:01:6c:b1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Dec 21 12:44:15 2025 GMT Not After : Dec 22 14:10:15 2025 GMT Subject: CN=223373076A71EB0397EA2335B9EB4AF8992C20E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:95:f9:74:59:54:66:2b:ab:c0:33:0d:8f:8d: 8a:a4:d1:3b:83:65:4a:79:4f:c5:52:f7:1b:45:50: e4:b3:ed:50:2c:97:42:40:86:f6:59:78:b5:f9:a0: 30:bb:f2:bb:94:a5:15:da:7b:ea:09:f4:20:1e:ea: 61:c6:2f:f0:8f:fc:96:23:48:fa:13:bb:06:01:1a: 18:55:79:e8:43:9b:2c:5a:65:63:34:4d:d0:a4:8f: 8a:65:12:dc:fe:38:cd:70:d5:c0:b2:4b:3f:d0:97: 6e:8a:6d:3f:ac:e0:4a:a2:06:89:a7:8b:eb:cc:f9: 28:a2:5f:d4:88:1a:f2:4d:21:47:33:94:e4:98:b9: a9:3c:5e:17:fb:51:6f:32:bc:17:eb:42:53:1e:9e: 80:9b:b7:03:ea:84:27:ef:34:9c:07:c7:00:13:42: 49:72:77:96:e0:f5:ef:f3:ee:bd:e2:9c:92:91:03: 1f:3a:2a:de:43:0d:3b:07:c7:6f:97:c4:2f:f4:13: 57:14:46:b8:a6:f3:4d:a9:1d:ca:80:3e:78:b3:67: 16:60:93:f7:d5:36:7b:0b:c3:b7:2a:f3:88:7b:95: 31:05:27:b8:b9:b1:be:4b:1a:ae:95:ed:45:7d:6a: 10:f9:1d:31:8f:c9:1a:40:da:17:84:a6:cd:a3:11: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:73:07:6A:71:EB:03:97:EA:23:35:B9:EB:4A:F8:99:2C:20:E2 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:91:ae:6c:5b:ef:52:c7:b2:64:ba:1c:09:3e:19:95:95:68: 8a:32:48:3a:32:15:ee:7e:04:9a:5b:06:2f:fc:c3:b9:b1:bb: 10:28:ee:b1:ff:40:11:b4:2e:55:0f:38:ac:e7:9f:79:91:6a: c1:09:02:52:31:ed:41:d0:b2:71:14:d9:ba:19:bd:15:9f:28: 9c:7c:ec:0d:cd:9c:0d:4a:00:6f:14:d3:83:5b:e5:49:16:f9: 1a:b1:20:e7:76:dd:79:b5:89:3f:53:0e:96:6b:f1:b8:a2:9c: 66:dc:76:a3:c6:78:52:16:c0:88:e1:32:91:a7:36:3c:65:79: bc:de:90:a5:88:5c:87:8a:12:1f:21:cf:17:40:3c:27:6a:85: 08:68:66:b6:7f:20:64:8c:1b:a3:94:cf:6e:a2:d1:87:1a:df: 42:31:fc:d1:22:d2:6b:2f:5d:ed:98:46:7f:b0:3b:16:f5:46: c1:b6:e2:b6:21:4e:12:bd:9f:bc:d7:fa:92:55:14:c0:de:75: 6b:18:7b:ba:dd:06:61:eb:fc:c3:fe:ed:2b:09:39:2d:33:6e: 81:19:67:71:d3:5e:f8:22:75:fa:9c:6a:4d:8b:b3:da:a9:15: 78:5c:c6:b5:64:f5:80:27:a5:4c:9c:b7:5a:5e:6f:c2:02:46: 36:ed:31:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGTEyPknQ3U9HwUb1c23ksAFssZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTEyMjExMjQ0MTVaFw0yNTEyMjIxNDEwMTVaMDMxMTAvBgNV BAMTKDIyMzM3MzA3NkE3MUVCMDM5N0VBMjMzNUI5RUI0QUY4OTkyQzIwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0lfl0WVRmK6vAMw2PjYqk0TuD ZUp5T8VS9xtFUOSz7VAsl0JAhvZZeLX5oDC78ruUpRXae+oJ9CAe6mHGL/CP/JYj SPoTuwYBGhhVeehDmyxaZWM0TdCkj4plEtz+OM1w1cCySz/Ql26KbT+s4EqiBomn i+vM+SiiX9SIGvJNIUczlOSYuak8Xhf7UW8yvBfrQlMenoCbtwPqhCfvNJwHxwAT Qklyd5bg9e/z7r3inJKRAx86Kt5DDTsHx2+XxC/0E1cURrim802pHcqAPnizZxZg k/fVNnsLw7cq84h7lTEFJ7i5sb5LGq6V7UV9ahD5HTGPyRpA2heEps2jEb0TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIjNzB2px6wOX6iM1uetK+JksIOIwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgJGubFvvUseyZLocCT4ZlZVoijJIOjIV7n4EmlsGL/zDubG7ECjusf9AEbQu VQ84rOefeZFqwQkCUjHtQdCycRTZuhm9FZ8onHzsDc2cDUoAbxTTg1vlSRb5GrEg 53bdebWJP1MOlmvxuKKcZtx2o8Z4UhbAiOEykac2PGV5vN6QpYhch4oSHyHPF0A8 J2qFCGhmtn8gZIwbo5TPbqLRhxrfQjH80SLSay9d7ZhGf7A7FvVGwbbitiFOEr2f vNf6klUUwN51axh7ut0GYev8w/7tKwk5LTNugRlncdNe+CJ1+pxqTYuz2qkVeFzG tWT1gCelTJy3Wl5vwgJGNu0xcw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:35:46 2025 by rpki-client