This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: tdz2GhPnjuTujjhH2ZRb1Pt47cVBg6Smu1wv/bLd/7s= Subject key identifier: BE:37:6D:E2:D6:90:70:E8:92:B2:97:CA:C1:4C:E4:9B:5B:1F:27:C2 Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 186CC5EF39F58810FC68EA2EFD712A2C041D994C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 032B Signing time: Tue 23 Dec 2025 05:21:47 +0000 Manifest this update: Tue 23 Dec 2025 05:16:47 +0000 Manifest next update: Wed 24 Dec 2025 07:01:47 +0000 Files and hashes: 1: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) 2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: 2lhiCkq/3gwY6qybFVCnplIf/TE2MlbdV8xR+HyZq+E=) 3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6c:c5:ef:39:f5:88:10:fc:68:ea:2e:fd:71:2a:2c:04:1d:99:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Dec 23 05:16:47 2025 GMT Not After : Dec 24 07:01:47 2025 GMT Subject: CN=BE376DE2D69070E892B297CAC14CE49B5B1F27C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:81:23:1c:34:74:d3:f6:96:f9:ce:ba:d2: 4c:80:96:2c:19:76:2a:8e:57:65:14:b8:dc:35:72: dc:b8:98:eb:e8:09:78:10:12:3b:89:7e:0e:33:51: 32:a3:ab:bf:60:5b:3b:78:88:85:58:31:eb:62:3c: 20:dc:e5:97:f4:e8:d1:7b:d4:b7:d0:6e:9f:2c:09: 1e:0a:24:8f:dd:2b:60:fb:56:e6:3e:0e:61:fe:5a: e6:bc:7b:be:11:9c:40:08:b1:9d:47:c0:69:18:14: ee:cb:f5:e6:66:8f:60:c9:65:b6:98:b3:7a:30:89: 92:1a:9a:f8:86:42:c0:bd:32:78:ec:c9:d0:48:c5: dd:5d:b7:a6:07:d2:5e:77:9c:9a:81:35:cd:bc:37: 2c:a9:83:58:18:fc:69:b4:5c:29:03:b0:87:d8:4a: 36:02:2f:60:d3:69:f3:70:53:a8:af:4d:30:e4:47: 1d:ff:38:71:17:03:6b:d3:0b:76:4d:2d:3c:52:f4: 0c:b6:d8:92:03:0c:1f:76:54:db:ce:b2:19:7a:ac: 84:b2:f4:32:c7:bf:89:a9:17:a2:0b:c0:0c:d3:a9: eb:18:39:f5:ca:d8:53:e6:f1:13:8c:4f:8a:52:ab: 4a:a3:2e:b0:2e:a4:19:bd:49:54:39:90:39:8a:3c: 9f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:6D:E2:D6:90:70:E8:92:B2:97:CA:C1:4C:E4:9B:5B:1F:27:C2 X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:fe:36:62:70:f9:c4:6b:fe:77:b0:02:30:06:ca:7a:65:6a: c1:62:42:61:99:e2:7d:67:75:e4:74:0f:14:72:8d:e9:04:41: 9d:35:81:4b:21:c1:ab:95:69:4b:8a:98:7d:02:df:27:4e:4d: 97:eb:1e:df:2c:f6:12:cb:46:f7:fd:fa:d9:71:ae:8a:d1:80: 3a:36:b9:a8:ea:1a:e9:21:6a:89:0d:e0:bc:36:0d:70:21:57: e0:84:ab:ab:68:d2:0d:aa:23:00:eb:c2:8d:5d:f5:e7:ec:b6: a1:f9:1e:6d:5e:81:cc:14:52:d3:c1:6d:50:44:92:86:65:ce: 16:17:51:d4:99:2e:ed:f9:18:95:51:59:5d:1d:6a:2b:a9:8e: fa:00:80:f9:e5:af:82:ac:dd:f9:b6:07:e0:5f:1a:05:b6:7e: 98:2d:fd:de:81:3c:ed:21:2a:55:a7:69:6e:b1:a8:44:0a:93: 01:88:97:5f:26:0c:2f:dc:88:9e:d9:25:c1:ef:88:fb:30:7c: 5c:e9:7e:fb:13:fb:cc:94:03:ab:91:6d:be:9b:d1:54:d3:b1: d5:53:9d:f0:95:71:f7:0c:b9:d9:d1:08:42:d9:13:5b:e0:39: 80:73:d1:ba:86:07:ce:8c:84:ee:d6:55:d3:72:ca:1d:4d:7b: 34:3e:6f:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGGzF7zn1iBD8aOou/XEqLAQdmUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTEyMjMwNTE2NDdaFw0yNTEyMjQwNzAxNDdaMDMxMTAvBgNV BAMTKEJFMzc2REUyRDY5MDcwRTg5MkIyOTdDQUMxNENFNDlCNUIxRjI3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MoEjHDR00/aW+c660kyAliwZ diqOV2UUuNw1cty4mOvoCXgQEjuJfg4zUTKjq79gWzt4iIVYMetiPCDc5Zf06NF7 1LfQbp8sCR4KJI/dK2D7VuY+DmH+Wua8e74RnEAIsZ1HwGkYFO7L9eZmj2DJZbaY s3owiZIamviGQsC9MnjsydBIxd1dt6YH0l53nJqBNc28Nyypg1gY/Gm0XCkDsIfY SjYCL2DTafNwU6ivTTDkRx3/OHEXA2vTC3ZNLTxS9Ay22JIDDB92VNvOshl6rISy 9DLHv4mpF6ILwAzTqesYOfXK2FPm8ROMT4pSq0qjLrAupBm9SVQ5kDmKPJ/JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvjdt4taQcOiSspfKwUzkm1sfJ8IwHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ/42YnD5xGv+d7ACMAbKemVqwWJCYZnifWd15HQPFHKN6QRBnTWBSyHBq5Vp S4qYfQLfJ05Nl+se3yz2EstG9/362XGuitGAOja5qOoa6SFqiQ3gvDYNcCFX4ISr q2jSDaojAOvCjV315+y2ofkebV6BzBRS08FtUESShmXOFhdR1Jku7fkYlVFZXR1q K6mO+gCA+eWvgqzd+bYH4F8aBbZ+mC393oE87SEqVadpbrGoRAqTAYiXXyYML9yI ntklwe+I+zB8XOl++xP7zJQDq5FtvpvRVNOx1VOd8JVx9wy52dEIQtkTW+A5gHPR uoYHzoyE7tZV03LKHU17ND5vzA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:46 2025 by rpki-client