This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json) Hash identifier: 9mHVdyid/kqTZVC57WfmjgflmjfnumQk9xd5FI3lZrU= Subject key identifier: D0:5F:1D:07:71:9F:F0:37:80:E0:17:97:D5:9C:E2:64:AF:E9:E7:CE Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Certificate issuer: /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Certificate serial: 1AAAC888407EC1A054AECCB2670B8CAA8638087F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft Manifest number: 02DF Signing time: Mon 22 Dec 2025 10:16:17 +0000 Manifest this update: Mon 22 Dec 2025 10:11:17 +0000 Manifest next update: Tue 23 Dec 2025 14:09:17 +0000 Files and hashes: 1: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=) 2: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: ENsvu7i0+LfslUp/A61xsUMsKULdU5iGoxGd+4t6ZwI=) 3: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 14:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:aa:c8:88:40:7e:c1:a0:54:ae:cc:b2:67:0b:8c:aa:86:38:08:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Validity Not Before: Dec 22 10:11:17 2025 GMT Not After : Dec 23 14:09:17 2025 GMT Subject: CN=D05F1D07719FF03780E01797D59CE264AFE9E7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:6f:4c:54:ce:4e:1f:ba:6f:c1:bb:69:54: e7:3b:d5:eb:8f:a5:8f:2d:aa:a6:95:62:3b:53:50: a9:86:24:50:26:b4:5b:f9:52:40:8a:03:0f:3a:26: 06:17:80:14:55:ad:eb:e6:b7:a8:cc:4a:a9:56:b7: f3:c7:ff:0a:cd:70:d7:f6:5e:97:a0:a0:ba:72:42: e1:d0:22:76:ce:09:50:31:ff:03:22:5c:a5:c6:08: fc:f6:bb:c8:37:3e:62:95:e4:9d:6d:71:ff:76:19: 5c:aa:04:8e:7f:c4:06:96:9b:15:cd:45:a1:36:79: a5:4b:28:06:cd:49:59:8c:2e:16:0e:68:aa:49:a4: 93:e0:1b:e1:bf:f1:13:27:2d:e7:3f:40:b5:b7:e4: b3:43:93:11:73:7e:77:00:c4:25:ce:a6:12:62:e3: 09:fe:44:51:10:2c:26:f7:9b:a2:dd:3b:eb:50:16: e5:8e:3e:f7:f6:54:7b:9c:21:a5:bc:23:8a:0b:2f: 4e:b5:e0:ea:fc:e8:93:2a:ee:be:e2:40:18:29:60: 3b:f9:9e:e9:8b:d3:d3:9e:ec:84:a0:b5:fc:c3:f4: 54:e4:0a:5d:49:97:9a:ba:e6:1a:22:c5:c8:a1:99: 57:34:a3:b6:b4:b5:40:34:54:0b:db:78:b7:37:2e: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:1D:07:71:9F:F0:37:80:E0:17:97:D5:9C:E2:64:AF:E9:E7:CE X509v3 Authority Key Identifier: keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f5:c2:6a:2b:c8:23:a0:5e:24:75:15:e0:ca:e1:4a:30:79: 35:a2:a0:41:03:34:7c:d4:e2:9a:aa:1a:65:a4:22:93:5a:f0: 54:48:27:43:eb:44:32:df:c8:fa:2d:9a:68:85:3d:78:b9:80: c2:9d:40:a2:e6:db:7b:49:22:99:3c:1c:b4:28:5f:d3:21:e7: bc:ba:0d:15:a5:6a:68:3a:9b:91:71:17:c1:c2:a7:04:a9:f7: c2:d9:f7:ea:19:3c:b8:9d:0a:8c:ab:2e:c5:c3:e2:f5:75:c9: dc:c8:2d:9f:8c:e6:57:eb:16:12:cf:f8:1d:b8:66:e1:4c:dd: 39:d7:2b:94:35:5d:8b:48:fa:bf:fb:54:cc:28:fb:81:10:33: df:83:94:4a:2d:14:45:e1:50:e3:33:b0:ad:cd:32:f7:5e:87: 95:72:ec:c3:2b:b4:bd:96:16:c8:3a:cc:70:6b:6c:30:db:d0: 89:33:b5:e3:73:42:f1:78:dd:7f:67:da:32:a6:e4:ce:65:a3: 25:6c:28:c2:ba:ab:87:79:c4:cc:14:7f:0a:87:eb:ef:c2:bb: 7f:06:25:7a:17:81:d6:d3:8a:de:f3:cf:4b:48:e8:41:e7:05: f1:5d:19:24:5f:ea:a3:19:bb:18:f8:08:71:41:ab:0b:8c:97: 10:4c:73:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGqrIiEB+waBUrsyyZwuMqoY4CH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4 RTgyNzdEQTAeFw0yNTEyMjIxMDExMTdaFw0yNTEyMjMxNDA5MTdaMDMxMTAvBgNV BAMTKEQwNUYxRDA3NzE5RkYwMzc4MEUwMTc5N0Q1OUNFMjY0QUZFOUU3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6m9MVM5OH7pvwbtpVOc71euP pY8tqqaVYjtTUKmGJFAmtFv5UkCKAw86JgYXgBRVrevmt6jMSqlWt/PH/wrNcNf2 XpegoLpyQuHQInbOCVAx/wMiXKXGCPz2u8g3PmKV5J1tcf92GVyqBI5/xAaWmxXN RaE2eaVLKAbNSVmMLhYOaKpJpJPgG+G/8RMnLec/QLW35LNDkxFzfncAxCXOphJi 4wn+RFEQLCb3m6LdO+tQFuWOPvf2VHucIaW8I4oLL0614Or86JMq7r7iQBgpYDv5 numL09Oe7ISgtfzD9FTkCl1Jl5q65hoixcihmVc0o7a0tUA0VAvbeLc3LmArAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0F8dB3Gf8DeA4BeX1ZziZK/p584wHwYDVR0j BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5 MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8y M0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm/XCaivII6BeJHUV4MrhSjB5NaKgQQM0fNTimqoaZaQik1rwVEgnQ+tEMt/I +i2aaIU9eLmAwp1Aoubbe0kimTwctChf0yHnvLoNFaVqaDqbkXEXwcKnBKn3wtn3 6hk8uJ0KjKsuxcPi9XXJ3Mgtn4zmV+sWEs/4Hbhm4UzdOdcrlDVdi0j6v/tUzCj7 gRAz34OUSi0UReFQ4zOwrc0y916HlXLswyu0vZYWyDrMcGtsMNvQiTO143NC8Xjd f2faMqbkzmWjJWwowrqrh3nEzBR/Cofr78K7fwYleheB1tOK3vPPS0joQecF8V0Z JF/qoxm7GPgIcUGrC4yXEExzHQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:39:23 2025 by rpki-client