This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft File: A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft (raw, json) Hash identifier: 52LfoLeGcpzV/qQAT4Ph9HKkOjPWuxmiTs5SmGvJrKU= Subject key identifier: 42:6B:70:AF:18:CB:32:40:24:0B:0B:3D:2C:F2:87:F5:AF:B6:A1:8E Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C Certificate issuer: /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C Certificate serial: 4938FAF6E6215633D0C5F850E4544B651381CC98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer Subject info access: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft Manifest number: 02D1 Signing time: Fri 19 Dec 2025 00:17:11 +0000 Manifest this update: Fri 19 Dec 2025 00:12:11 +0000 Manifest next update: Sat 20 Dec 2025 02:36:11 +0000 Files and hashes: 1: A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl (hash: 4l3Xf8ZHrzrZYE92CoHYd4Jq1eHUAgtt9wNScMfsdEk=) 2: 3136382e302e3139322e302f32322d3332203d3e20323733353137.roa (hash: 8qdsPI5x8CVH/mlrFVkkCVAnvbqWmU1D/2gHHda3qig=) 3: 323830343a386664633a3a2f33322d313238203d3e20323733353137.roa (hash: 4l2CtiYgrvBy/A92kVg7Hm+FkGGTJkGXYmtPO4rSlHg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 02:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:38:fa:f6:e6:21:56:33:d0:c5:f8:50:e4:54:4b:65:13:81:cc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C Validity Not Before: Dec 19 00:12:11 2025 GMT Not After : Dec 20 02:36:11 2025 GMT Subject: CN=426B70AF18CB3240240B0B3D2CF287F5AFB6A18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:da:fb:55:5d:85:d9:67:3a:d7:8b:3d:62: 6b:66:87:ca:bd:e9:16:c1:a2:45:e9:52:eb:23:8a: 3d:17:49:70:33:96:79:e3:4e:a1:43:8b:70:79:c5: e8:94:e3:78:28:49:5f:94:24:e3:f9:50:50:76:21: 41:17:60:19:29:8b:7d:fc:19:95:be:f8:d0:55:82: f5:13:dd:30:8e:44:c2:25:9d:e9:c2:11:84:94:a3: 28:e0:d5:8c:3a:52:ce:37:b0:0c:c8:3e:19:27:10: 93:11:2c:86:f9:84:59:16:99:c3:56:68:41:b3:3f: 82:98:b6:a0:06:0f:ee:de:17:2b:4f:13:f3:9e:6d: 1d:cb:15:c7:99:0d:4d:60:af:79:d8:6a:3e:c6:34: 90:2f:b6:bd:c3:d7:59:d7:0b:1b:ee:1b:7f:83:49: 65:61:4c:c0:1c:ff:76:72:2c:99:b2:96:d1:89:f3: 13:74:5e:61:56:d2:95:41:5f:6e:1f:3c:1a:cd:26: 00:24:db:20:ea:b2:98:46:82:b8:15:a4:e2:2a:cf: 27:fc:42:a0:85:dc:d0:34:af:ff:b9:de:49:01:09: 66:f5:06:ef:65:6d:83:e1:9b:f0:9f:11:8e:8f:a9: cb:38:c9:db:c5:12:53:8a:31:94:b2:7a:3e:c6:2e: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:70:AF:18:CB:32:40:24:0B:0B:3D:2C:F2:87:F5:AF:B6:A1:8E X509v3 Authority Key Identifier: keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:05:ca:01:fe:e6:93:59:57:7e:f9:32:97:24:20:26:09:28: 61:5d:c0:5f:3a:b5:53:8b:5b:21:35:14:35:7f:1b:8e:1a:2a: 6e:15:f6:64:05:0e:23:a5:ea:2d:93:19:8f:a4:ec:60:b9:2e: 75:9f:fb:09:b1:37:f5:99:ad:61:1b:d3:10:dc:fb:5c:84:46: 66:29:60:ab:1c:26:19:4b:33:25:7c:6e:fc:0d:14:39:65:68: ef:fe:42:e5:f2:1c:7d:3b:49:81:fb:e7:f7:f3:26:84:d4:19: 7e:64:a0:f5:bd:08:2e:b7:69:ac:bf:42:96:02:be:ec:86:be: 4f:67:20:49:1b:73:d1:64:96:15:ae:a2:b0:c9:61:ff:7d:6f: ef:6d:cc:77:aa:80:43:22:f0:0b:82:59:db:cf:e0:23:63:98: bb:ba:a3:9e:4d:96:2a:ad:c0:39:57:a0:86:22:35:74:06:da: aa:87:0f:49:14:bc:16:08:de:33:fc:67:a8:64:a0:20:d1:c0: f7:ac:1e:8b:5d:ac:e7:1e:90:d4:74:51:a2:de:d4:8d:1e:7e: d4:8c:5f:76:c6:24:1b:89:a5:a3:c9:d8:2b:42:5d:b6:4e:bf: 4c:b8:36:47:a9:83:20:df:31:b0:89:62:00:25:7f:c4:07:c0: 18:6e:8e:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSTj69uYhVjPQxfhQ5FRLZROBzJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFMjhFOUY4NjQ0QjZGMjFGMDI2NjQ0QzE0QzM4MENE Q0E2QjExQzAeFw0yNTEyMTkwMDEyMTFaFw0yNTEyMjAwMjM2MTFaMDMxMTAvBgNV BAMTKDQyNkI3MEFGMThDQjMyNDAyNDBCMEIzRDJDRjI4N0Y1QUZCNkExOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRS9r7VV2F2Wc614s9Ymtmh8q9 6RbBokXpUusjij0XSXAzlnnjTqFDi3B5xeiU43goSV+UJOP5UFB2IUEXYBkpi338 GZW++NBVgvUT3TCORMIlnenCEYSUoyjg1Yw6Us43sAzIPhknEJMRLIb5hFkWmcNW aEGzP4KYtqAGD+7eFytPE/OebR3LFceZDU1gr3nYaj7GNJAvtr3D11nXCxvuG3+D SWVhTMAc/3ZyLJmyltGJ8xN0XmFW0pVBX24fPBrNJgAk2yDqsphGgrgVpOIqzyf8 QqCF3NA0r/+53kkBCWb1Bu9lbYPhm/CfEY6Pqcs4ydvFElOKMZSyej7GLuPhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQmtwrxjLMkAkCws9LPKH9a+2oY4wHwYDVR0j BBgwFoAUouKOn4ZEtvIfAmZEwUw4DNymsRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTg5YlNWRHdOeGllUE42TThCU0pESE1WSDNVcGdZakZ4Um5TRlppRTRr QlgvMC9BMkUyOEU5Rjg2NDRCNkYyMUYwMjY2NDRDMTRDMzgwQ0RDQTZCMTFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyRTI4RTlGODY0NEI2RjIx RjAyNjY0NEMxNEMzODBDRENBNkIxMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTg5YlNWRHdOeGllUE42TThCU0pESE1WSDNVcGdZakZ4Um5TRlppRTRrQlgvMC9B MkUyOEU5Rjg2NDRCNkYyMUYwMjY2NDRDMTRDMzgwQ0RDQTZCMTFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQXKAf7mk1lXfvkylyQgJgkoYV3AXzq1U4tbITUUNX8bjhoqbhX2ZAUOI6Xq LZMZj6TsYLkudZ/7CbE39ZmtYRvTENz7XIRGZilgqxwmGUszJXxu/A0UOWVo7/5C 5fIcfTtJgfvn9/MmhNQZfmSg9b0ILrdprL9ClgK+7Ia+T2cgSRtz0WSWFa6isMlh /31v723Md6qAQyLwC4JZ28/gI2OYu7qjnk2WKq3AOVeghiI1dAbaqocPSRS8Fgje M/xnqGSgINHA96wei12s5x6Q1HRRot7UjR5+1IxfdsYkG4mlo8nYK0Jdtk6/TLg2 R6mDIN8xsIliACV/xAfAGG6O/Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:24:42 2025 by rpki-client