This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: hmewCOKs7ccIcycRqA0LI2ilGppilrDcJyWpaF03Giw= Subject key identifier: 94:57:78:A4:1A:A0:23:88:1C:C9:B0:C1:6E:2E:97:FB:46:19:DF:DB Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 1036B12E6A54CB2155007328F97886B29CC7C10F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 0341 Signing time: Sat 20 Dec 2025 13:49:11 +0000 Manifest this update: Sat 20 Dec 2025 13:44:11 +0000 Manifest next update: Sun 21 Dec 2025 17:17:11 +0000 Files and hashes: 1: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: PRJvVQVEsSGIFhORi1pg5uAHE0cuj4Y4CNPKD4dp4Ms=) 2: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) 3: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 17:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:36:b1:2e:6a:54:cb:21:55:00:73:28:f9:78:86:b2:9c:c7:c1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Dec 20 13:44:11 2025 GMT Not After : Dec 21 17:17:11 2025 GMT Subject: CN=945778A41AA023881CC9B0C16E2E97FB4619DFDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:6e:8c:6f:2e:20:94:a1:2c:fc:e3:90:96: 97:5b:bc:53:b3:69:5d:09:d4:eb:19:c2:9f:66:9b: 0e:4d:a5:d0:ba:ef:65:df:1e:61:fc:02:03:b0:9d: 76:7e:ca:2e:8f:cc:74:03:c2:2b:7f:da:be:9a:17: 5f:94:1c:5e:ab:89:7b:38:8a:bc:66:90:a3:36:c1: dc:da:41:5f:5c:37:ff:24:be:11:8c:3f:cd:2e:ec: 9c:ff:aa:c3:7d:26:e0:eb:85:1f:3e:0a:b3:27:e7: 1b:e7:82:15:e9:a9:91:65:9a:ae:46:b2:1b:e0:95: 88:23:09:62:49:57:a6:69:e4:1c:13:34:d4:73:4a: 05:cc:db:a7:16:99:74:4c:dd:84:93:b1:e2:d4:94: 31:db:b2:18:8c:0c:db:a2:ae:18:ef:01:9f:56:27: 1c:da:a8:5d:65:88:b4:3f:a3:e1:1a:27:85:50:94: 83:61:e4:25:72:3a:5e:a2:92:fd:9e:1d:9e:5a:c5: fe:02:80:7f:eb:1c:83:cc:28:f6:21:e9:d2:a2:39: 7f:d4:3e:21:81:09:56:24:de:c9:17:55:53:1b:5d: 2d:78:7e:26:c4:41:69:ca:b4:86:50:41:35:a7:e8: 6d:1b:bd:b7:a8:4a:5c:82:c7:90:bc:48:03:d6:bb: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:78:A4:1A:A0:23:88:1C:C9:B0:C1:6E:2E:97:FB:46:19:DF:DB X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2f:88:f4:a6:44:22:b2:9e:f6:4d:b7:81:18:2c:ee:a3:d6: 68:5f:a1:63:68:c1:f1:6f:68:89:6d:eb:25:1b:9e:30:4c:5e: 6d:51:50:f0:91:b9:5a:f4:d5:a7:f0:ac:39:80:61:da:ee:e2: 17:fb:0c:98:3e:34:c5:6c:f2:0c:f7:4a:de:7e:22:08:35:96: b0:e6:16:3a:e4:b9:52:4e:f9:fc:da:5c:84:8c:66:e7:85:45: 5b:b2:f0:e3:b5:18:dd:4b:1c:99:e6:e2:35:1d:b9:75:37:11: 22:d9:89:89:20:dd:05:b2:31:c7:04:11:d4:dc:8c:06:ef:6a: e8:80:60:cb:69:33:6f:d9:43:db:63:23:b6:ca:d7:28:d2:0d: cd:52:5a:70:c8:25:bb:26:e1:3c:c5:43:b7:7f:95:b9:b2:de: ff:da:70:c3:93:3f:45:3b:1a:08:cc:87:be:93:92:2a:69:e2: 9d:2e:41:12:d7:cf:5c:47:5f:21:5b:ac:a6:c4:70:2f:4b:4f: 07:b4:36:7d:51:7e:0f:90:2a:ef:d8:26:fe:51:09:66:72:9c: 45:16:39:6e:06:35:ac:00:ab:4c:d3:55:ac:18:82:ec:bb:b5: 67:f6:c3:17:7a:b6:45:d8:ad:33:47:09:3e:51:d8:d7:6b:f8: c8:22:17:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEDaxLmpUyyFVAHMo+XiGspzHwQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTEyMjAxMzQ0MTFaFw0yNTEyMjExNzE3MTFaMDMxMTAvBgNV BAMTKDk0NTc3OEE0MUFBMDIzODgxQ0M5QjBDMTZFMkU5N0ZCNDYxOURGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLm6Mby4glKEs/OOQlpdbvFOz aV0J1OsZwp9mmw5NpdC672XfHmH8AgOwnXZ+yi6PzHQDwit/2r6aF1+UHF6riXs4 irxmkKM2wdzaQV9cN/8kvhGMP80u7Jz/qsN9JuDrhR8+CrMn5xvnghXpqZFlmq5G shvglYgjCWJJV6Zp5BwTNNRzSgXM26cWmXRM3YSTseLUlDHbshiMDNuirhjvAZ9W JxzaqF1liLQ/o+EaJ4VQlINh5CVyOl6ikv2eHZ5axf4CgH/rHIPMKPYh6dKiOX/U PiGBCVYk3skXVVMbXS14fibEQWnKtIZQQTWn6G0bvbeoSlyCx5C8SAPWuzuxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlFd4pBqgI4gcybDBbi6X+0YZ39swHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdC+I9KZEIrKe9k23gRgs7qPWaF+hY2jB8W9oiW3rJRueMExebVFQ8JG5WvTV p/CsOYBh2u7iF/sMmD40xWzyDPdK3n4iCDWWsOYWOuS5Uk75/NpchIxm54VFW7Lw 47UY3UscmebiNR25dTcRItmJiSDdBbIxxwQR1NyMBu9q6IBgy2kzb9lD22MjtsrX KNINzVJacMgluybhPMVDt3+VubLe/9pww5M/RTsaCMyHvpOSKmninS5BEtfPXEdf IVuspsRwL0tPB7Q2fVF+D5Aq79gm/lEJZnKcRRY5bgY1rACrTNNVrBiC7Lu1Z/bD F3q2RditM0cJPlHY12v4yCIX5g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:30 2025 by rpki-client