This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft File: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft (raw, json) Hash identifier: SPw004cNIWQSY6cOQBdhZpTYp6w1A1DSR3skPPzgbGQ= Subject key identifier: 0A:60:E9:87:35:53:4E:00:27:09:81:4A:1C:DB:1C:B3:D9:D5:F0:EE Authority key identifier: 71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 Certificate issuer: /CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Certificate serial: 033C71F648C721B6D738F2483F7620F32ADA113F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft Manifest number: D8 Signing time: Mon 22 Dec 2025 21:25:34 +0000 Manifest this update: Mon 22 Dec 2025 21:20:34 +0000 Manifest next update: Tue 23 Dec 2025 22:21:34 +0000 Files and hashes: 1: 323830343a393363343a3a2f33322d3332203d3e20323734373939.roa (hash: Lg2xMCDUflfzYLEqDuILPmwVidL9vHQP1G7+KLc+SfE=) 2: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl (hash: 0qMudyQZS5tYaPf/uJ9K7e1gDtn7F6RhGpiM7OkFJ+A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 22:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3c:71:f6:48:c7:21:b6:d7:38:f2:48:3f:76:20:f3:2a:da:11:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Validity Not Before: Dec 22 21:20:34 2025 GMT Not After : Dec 23 22:21:34 2025 GMT Subject: CN=0A60E98735534E002709814A1CDB1CB3D9D5F0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:37:a6:16:ee:49:da:c7:e9:55:df:66:b9: 4b:3b:ae:0e:d6:5f:0a:a2:d1:13:c8:ab:4b:18:09: fe:c6:40:c2:cf:21:19:c7:0a:28:31:ea:fa:5b:18: e5:1d:ba:7f:cf:18:5c:61:83:7c:7f:42:79:61:6a: f7:69:be:cd:5a:44:07:bf:b5:a1:73:64:4b:d2:78: 4a:48:73:c5:58:d9:f3:3a:ab:78:4b:49:a7:7b:d4: 50:c1:38:69:b9:ff:de:eb:82:98:bf:18:b5:25:0d: 03:ad:a6:11:44:c9:6e:ca:88:38:00:a2:69:d9:c5: b1:f6:4f:5c:c6:5d:2d:17:11:3b:b0:f9:61:1a:7b: 6c:a2:0f:13:b1:0c:12:2e:f3:2d:bc:1b:cf:73:55: 4a:37:4a:89:c2:20:47:f9:42:bd:46:75:86:26:38: e9:d7:8b:ae:75:86:11:e6:b4:12:68:5e:23:a5:be: f8:77:4e:5d:26:00:1e:e9:92:fb:19:db:f6:84:fd: dd:b1:ae:63:1c:8e:4e:be:a8:a4:bd:3c:53:09:db: ba:63:60:41:1b:ed:9d:c9:7b:a9:17:28:45:de:3b: 67:24:3d:d5:1d:a9:09:8f:a9:11:79:d5:d1:e6:c7: 9e:88:e8:24:66:a3:79:9a:d3:e5:e8:ed:d1:b9:53: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:60:E9:87:35:53:4E:00:27:09:81:4A:1C:DB:1C:B3:D9:D5:F0:EE X509v3 Authority Key Identifier: keyid:71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a9:a4:9a:12:14:63:05:e7:b7:66:75:56:6b:f6:38:d1:44: 27:34:7f:e3:d2:02:2b:e4:f9:84:3b:8c:a8:ee:cf:f2:2f:a7: de:f3:b1:0d:66:4d:ed:a0:b4:b1:03:91:37:38:b8:98:c2:1c: ab:10:3b:45:12:a1:26:ea:d8:b9:bb:67:85:4e:fb:40:8f:4b: c5:ab:34:dc:76:ed:a9:93:eb:71:45:66:cc:6f:ec:c4:10:72: fe:9b:2a:b8:b3:ca:23:62:98:1c:32:63:2d:47:88:e7:42:29: 16:19:05:38:34:36:f5:be:3f:12:f3:51:b8:6b:71:7a:0a:6d: 24:e2:b7:12:a7:30:c5:e2:02:ba:f9:95:71:be:67:c7:c6:c3: 0e:a4:ef:7d:97:93:3a:c5:79:f7:9d:cd:7c:84:7f:1d:68:ea: 28:2e:cc:5d:08:da:dc:01:f4:57:59:eb:d4:c5:f7:e4:98:82: a7:d4:87:5e:f0:be:60:c5:5a:d7:12:87:60:5e:f3:20:df:a2: 88:82:30:bc:e1:d4:ef:e1:8d:10:96:c2:74:37:b2:79:23:76: de:38:a5:09:a0:78:2c:33:22:08:c3:d0:11:87:40:ec:7d:53: 67:34:46:83:ee:13:f6:4d:ca:36:e8:d8:89:e4:8b:cf:0c:1a: 5a:4c:29:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAzxx9kjHIbbXOPJIP3Yg8yraET8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFEM0EyREVDOEJBRTY2NzVEQkJCQUIzRkI3NzNFNkRD RjRBNkZCOTAeFw0yNTEyMjIyMTIwMzRaFw0yNTEyMjMyMjIxMzRaMDMxMTAvBgNV BAMTKDBBNjBFOTg3MzU1MzRFMDAyNzA5ODE0QTFDREIxQ0IzRDlENUYwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDadjemFu5J2sfpVd9muUs7rg7W Xwqi0RPIq0sYCf7GQMLPIRnHCigx6vpbGOUdun/PGFxhg3x/Qnlhavdpvs1aRAe/ taFzZEvSeEpIc8VY2fM6q3hLSad71FDBOGm5/97rgpi/GLUlDQOtphFEyW7KiDgA omnZxbH2T1zGXS0XETuw+WEae2yiDxOxDBIu8y28G89zVUo3SonCIEf5Qr1GdYYm OOnXi651hhHmtBJoXiOlvvh3Tl0mAB7pkvsZ2/aE/d2xrmMcjk6+qKS9PFMJ27pj YEEb7Z3Je6kXKEXeO2ckPdUdqQmPqRF51dHmx56I6CRmo3ma0+Xo7dG5U3c3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCmDphzVTTgAnCYFKHNscs9nV8O4wHwYDVR0j BBgwFoAUcdOi3si65mddu7qz+3c+bc9Kb7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy c1kvMC83MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDNBMkRFQzhCQUU2Njc1 REJCQkFCM0ZCNzczRTZEQ0Y0QTZGQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC83 MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVKmkmhIUYwXnt2Z1Vmv2ONFEJzR/49ICK+T5hDuMqO7P8i+n3vOxDWZN7aC0 sQORNzi4mMIcqxA7RRKhJurYubtnhU77QI9Lxas03HbtqZPrcUVmzG/sxBBy/psq uLPKI2KYHDJjLUeI50IpFhkFODQ29b4/EvNRuGtxegptJOK3EqcwxeICuvmVcb5n x8bDDqTvfZeTOsV5953NfIR/HWjqKC7MXQja3AH0V1nr1MX35JiCp9SHXvC+YMVa 1xKHYF7zIN+iiIIwvOHU7+GNEJbCdDeyeSN23jilCaB4LDMiCMPQEYdA7H1TZzRG g+4T9k3KNujYieSLzwwaWkwpfQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:53:30 2025 by rpki-client