This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft File: 724E697E1673A7C11A6F50E51FCE489942BAAA02.mft (raw, json) Hash identifier: ze27WO+2jJwB05SYjmgMPb/+H2oTucJODDVU0MweTCA= Subject key identifier: A2:FC:80:06:2C:99:A2:95:83:A7:47:E5:3A:5B:01:78:DE:10:8D:F1 Authority key identifier: 72:4E:69:7E:16:73:A7:C1:1A:6F:50:E5:1F:CE:48:99:42:BA:AA:02 Certificate issuer: /CN=724E697E1673A7C11A6F50E51FCE489942BAAA02 Certificate serial: 5DE21AAB660F39C39A06276A5F89CFE029A1BCAA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer Subject info access: rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft Manifest number: 0142 Signing time: Fri 19 Dec 2025 16:17:14 +0000 Manifest this update: Fri 19 Dec 2025 16:12:14 +0000 Manifest next update: Sat 20 Dec 2025 16:21:14 +0000 Files and hashes: 1: 724E697E1673A7C11A6F50E51FCE489942BAAA02.crl (hash: A6ljYX1o8li/UbWPYT3MilwErbdrtEAnpqn9NlO+NK0=) 2: 34352e3136322e3132302e302f32322d3332203d3e20323638353034.roa (hash: HdYccR/va0xtom45Sen1UL4IC6Ew3wa64FV+vV/ilu0=) 3: 323830343a353233633a3a2f33322d313238203d3e20323638353034.roa (hash: 2uJh51doWua4yEA01q3Dt0lrA414PdaSs+li9o5Cdb0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.crl rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e2:1a:ab:66:0f:39:c3:9a:06:27:6a:5f:89:cf:e0:29:a1:bc:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724E697E1673A7C11A6F50E51FCE489942BAAA02 Validity Not Before: Dec 19 16:12:14 2025 GMT Not After : Dec 20 16:21:14 2025 GMT Subject: CN=A2FC80062C99A29583A747E53A5B0178DE108DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:d1:27:98:ea:d9:ab:d5:bb:a1:39:d7:d1: 65:12:90:52:96:62:ba:e5:b4:00:01:d5:10:9b:91: 74:f8:27:fd:cd:2d:ce:e9:1a:89:b8:13:0d:93:e0: cf:2d:ec:65:f1:ba:f4:ef:51:99:e8:10:b8:c2:07: fd:a1:e1:6c:77:eb:67:b8:ba:82:6e:d7:ec:1a:a0: 8a:58:fb:42:08:ff:0b:45:37:9c:0c:75:e8:67:bc: e6:32:8d:ae:02:13:ae:e0:10:29:37:eb:f9:8c:b9: 81:2b:e7:e0:c0:4c:d4:1c:2d:32:6f:43:c9:72:b6: f6:04:fa:23:f4:32:15:8d:3d:36:eb:78:f1:e7:01: c5:dc:b6:66:32:e1:ef:74:27:01:79:e9:92:34:56: 75:89:03:28:7a:7e:ee:c3:8b:9b:29:7f:76:a4:92: 7f:2c:4a:2d:24:17:7b:15:95:ef:41:85:a7:92:0d: e9:01:50:ab:0e:9d:6b:82:66:fe:40:03:d2:01:6c: c4:23:5d:22:5e:99:7c:e0:e1:53:e4:90:71:9a:4b: ad:25:8a:87:e0:e3:a4:54:72:94:42:85:28:47:d6: 36:0d:1c:50:fb:a7:0a:b5:fb:85:a4:2d:bd:eb:04: 77:83:6a:a1:1c:b9:b9:01:7e:f9:13:60:ae:89:9e: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:80:06:2C:99:A2:95:83:A7:47:E5:3A:5B:01:78:DE:10:8D:F1 X509v3 Authority Key Identifier: keyid:72:4E:69:7E:16:73:A7:C1:1A:6F:50:E5:1F:CE:48:99:42:BA:AA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/724E697E1673A7C11A6F50E51FCE489942BAAA02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3w7rh7r94tNhE51b1U3eW8hUhBUDeFsS7f31BFDT8oBL/0/724E697E1673A7C11A6F50E51FCE489942BAAA02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8a:e9:9a:8c:c0:af:73:2b:85:08:35:52:8b:2b:f8:aa:3c: 3a:fa:ac:c9:d7:61:2c:bb:c9:5c:4e:cf:34:1a:a6:e6:b2:89: 14:2b:83:a5:d7:7d:52:d2:1d:2a:a3:23:bd:8b:15:18:5f:f6: a1:7e:d8:03:4f:f0:7b:61:e8:36:30:88:44:82:c9:1c:ee:b7: 3a:cd:bb:d3:b2:57:92:ee:6a:d7:b3:f5:e8:ba:07:60:52:88: 7f:ac:46:c6:27:6d:b7:01:8b:98:56:d8:de:9b:25:38:7d:fc: ca:2b:d0:c6:bf:a8:02:9b:73:df:8b:c4:79:55:77:8a:67:f5: 56:ad:03:9d:07:d6:c1:f2:0c:7b:2d:73:3f:28:5d:b7:3f:c2: eb:28:13:79:86:6d:91:e0:49:36:db:ce:f5:87:97:28:82:e2: e0:e2:6a:3d:40:80:1e:e3:24:b1:06:13:3e:53:d3:11:64:81: 61:9e:79:bd:aa:dd:de:aa:bd:46:53:5b:3a:e6:72:bd:64:9f: 15:98:9d:3f:6c:be:fb:8e:12:75:34:98:45:f0:6e:de:37:53: bc:80:00:21:2a:52:03:fd:20:e1:65:60:96:e4:46:25:b5:a2: a4:96:66:27:3b:dd:dc:e5:48:7d:a1:ee:fb:d6:19:9b:8e:43: ce:96:4d:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXeIaq2YPOcOaBidqX4nP4CmhvKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0RTY5N0UxNjczQTdDMTFBNkY1MEU1MUZDRTQ4OTk0 MkJBQUEwMjAeFw0yNTEyMTkxNjEyMTRaFw0yNTEyMjAxNjIxMTRaMDMxMTAvBgNV BAMTKEEyRkM4MDA2MkM5OUEyOTU4M0E3NDdFNTNBNUIwMTc4REUxMDhERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LNEnmOrZq9W7oTnX0WUSkFKW YrrltAAB1RCbkXT4J/3NLc7pGom4Ew2T4M8t7GXxuvTvUZnoELjCB/2h4Wx362e4 uoJu1+waoIpY+0II/wtFN5wMdehnvOYyja4CE67gECk36/mMuYEr5+DATNQcLTJv Q8lytvYE+iP0MhWNPTbrePHnAcXctmYy4e90JwF56ZI0VnWJAyh6fu7Di5spf3ak kn8sSi0kF3sVle9BhaeSDekBUKsOnWuCZv5AA9IBbMQjXSJemXzg4VPkkHGaS60l iofg46RUcpRChShH1jYNHFD7pwq1+4WkLb3rBHeDaqEcubkBfvkTYK6JnllhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUovyABiyZopWDp0flOlsBeN4QjfEwHwYDVR0j BBgwFoAUck5pfhZzp8Eab1DlH85ImUK6qgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3c3cmg3cjk0dE5oRTUxYjFVM2VXOGhVaEJVRGVGc1M3ZjMxQkZEVDhv QkwvMC83MjRFNjk3RTE2NzNBN0MxMUE2RjUwRTUxRkNFNDg5OTQyQkFBQTAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNEU2OTdFMTY3M0E3QzEx QTZGNTBFNTFGQ0U0ODk5NDJCQUFBMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3c3cmg3cjk0dE5oRTUxYjFVM2VXOGhVaEJVRGVGc1M3ZjMxQkZEVDhvQkwvMC83 MjRFNjk3RTE2NzNBN0MxMUE2RjUwRTUxRkNFNDg5OTQyQkFBQTAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVIrpmozAr3MrhQg1Uosr+Ko8OvqsyddhLLvJXE7PNBqm5rKJFCuDpdd9UtId KqMjvYsVGF/2oX7YA0/we2HoNjCIRILJHO63Os2707JXku5q17P16LoHYFKIf6xG xidttwGLmFbY3pslOH38yivQxr+oAptz34vEeVV3imf1Vq0DnQfWwfIMey1zPyhd tz/C6ygTeYZtkeBJNtvO9YeXKILi4OJqPUCAHuMksQYTPlPTEWSBYZ55vard3qq9 RlNbOuZyvWSfFZidP2y++44SdTSYRfBu3jdTvIAAISpSA/0g4WVgluRGJbWipJZm Jzvd3OVIfaHu+9YZm45DzpZNmg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:21:12 2025 by rpki-client