This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.mft File: 923B6DB37A61C15E688585893A0E787B6D40E8CC.mft (raw, json) Hash identifier: NOhSVwkI343bmikURjYVa066vkP7YPTKtqIpt0VQvgo= Subject key identifier: 42:4E:62:F2:70:37:E6:F2:94:D9:19:18:48:4A:78:45:28:EC:8D:FA Authority key identifier: 92:3B:6D:B3:7A:61:C1:5E:68:85:85:89:3A:0E:78:7B:6D:40:E8:CC Certificate issuer: /CN=923B6DB37A61C15E688585893A0E787B6D40E8CC Certificate serial: 61D4449F1278A443A5CF38FA17211090778054C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/923B6DB37A61C15E688585893A0E787B6D40E8CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.mft Manifest number: 0B Signing time: Wed 24 Dec 2025 17:18:33 +0000 Manifest this update: Wed 24 Dec 2025 17:13:33 +0000 Manifest next update: Thu 25 Dec 2025 17:43:33 +0000 Files and hashes: 1: 3136382e3139362e3232382e302f32322d3234203d3e20323730393431.roa (hash: IOKoqYXu/LO+0MRdFAkfUpiT9p02rebcabHGuV6ASBY=) 2: 323830343a373364383a3a2f33322d3438203d3e20323730393431.roa (hash: /81klN2kR5hOEiWi54AV2tb1lAexD2zYIqAnaQoIRXE=) 3: 923B6DB37A61C15E688585893A0E787B6D40E8CC.crl (hash: ES5b4pJkoMoBLjasbVEPbzp9lgv283FPVo5ed4edpBc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.crl rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/923B6DB37A61C15E688585893A0E787B6D40E8CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 17:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d4:44:9f:12:78:a4:43:a5:cf:38:fa:17:21:10:90:77:80:54:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923B6DB37A61C15E688585893A0E787B6D40E8CC Validity Not Before: Dec 24 17:13:33 2025 GMT Not After : Dec 25 17:43:33 2025 GMT Subject: CN=424E62F27037E6F294D91918484A784528EC8DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:77:d8:06:7c:d1:05:16:60:f5:62:6a:56: b2:96:d6:36:ec:ac:62:3b:5e:ed:3d:35:f1:eb:6d: cf:1a:7f:49:83:50:7d:a6:9e:3a:b9:d3:ae:c7:61: 21:36:1b:00:d5:4b:75:b7:d0:e3:9e:1e:4c:d2:d1: b4:9a:9b:26:1b:29:44:cd:f0:cc:2f:35:af:5c:3b: de:a7:d1:a8:21:c9:c2:ad:a9:7f:04:30:27:02:3c: 28:89:4a:af:71:a8:9c:74:0b:e3:e3:51:22:6c:6e: 4d:53:64:e8:54:da:09:d1:cc:2a:67:d1:08:86:73: 99:bf:71:a5:32:b4:46:bc:57:3e:7d:bd:cf:0b:60: 5b:88:47:06:d0:24:e8:9a:71:9a:5f:3b:77:5f:01: 06:ca:91:b0:e3:55:43:dc:02:be:70:1b:00:6e:32: 69:92:26:eb:1e:45:56:53:bd:13:6c:fc:71:eb:fb: de:f6:66:e0:00:63:0a:d0:8c:3e:60:18:b5:26:62: 69:8e:76:90:11:66:83:5c:68:77:6c:c1:eb:10:3e: da:46:40:65:1e:4b:31:29:7a:fa:fc:38:56:12:6c: cd:91:0d:56:f6:67:de:46:01:f2:86:09:e4:f3:5c: 4e:a8:12:04:e2:ac:2d:d2:7f:4b:ea:ce:7b:10:4d: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:62:F2:70:37:E6:F2:94:D9:19:18:48:4A:78:45:28:EC:8D:FA X509v3 Authority Key Identifier: keyid:92:3B:6D:B3:7A:61:C1:5E:68:85:85:89:3A:0E:78:7B:6D:40:E8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/923B6DB37A61C15E688585893A0E787B6D40E8CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:be:84:e7:6a:71:3e:20:f9:b3:93:27:39:cf:6e:10:5e:a9: 24:b1:32:0c:24:9b:48:ee:33:83:f4:60:db:55:40:b9:c4:9b: bb:84:72:03:15:f1:4c:61:ab:43:28:4a:37:19:11:16:66:21: 48:da:39:17:52:0f:b6:96:59:a3:91:c9:bd:9e:df:85:fb:6c: d5:53:8d:da:a4:9f:11:6b:d5:5f:89:58:a3:6c:00:9b:dc:54: aa:7f:42:a7:47:3b:e7:fe:35:53:6e:d0:33:86:a2:5b:1a:fe: 33:56:2c:54:7b:41:db:72:b8:c9:87:74:a5:99:87:a1:f6:a6: 66:43:1d:68:4d:00:35:8c:b0:69:0e:cd:51:e9:54:ad:03:63: b5:05:0e:b4:0b:64:7d:0c:07:01:02:7f:68:71:46:3c:30:66: 9a:ae:89:8a:e1:f4:72:05:9a:e6:96:f2:68:c1:e2:b3:cf:b0: b4:10:0b:2a:38:d4:38:cd:c4:bb:60:e2:8e:98:44:61:87:09: e9:7c:ed:9b:af:87:86:25:df:9e:42:32:fa:7e:66:1c:2a:4f: f8:6f:c0:05:f3:dd:c6:f9:0d:cc:36:13:d4:28:c1:39:b1:a1: c5:1f:0a:e2:fe:64:a9:27:fd:7b:1f:41:36:5a:a2:79:44:50: cf:be:df:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYdREnxJ4pEOlzzj6FyEQkHeAVMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzQjZEQjM3QTYxQzE1RTY4ODU4NTg5M0EwRTc4N0I2 RDQwRThDQzAeFw0yNTEyMjQxNzEzMzNaFw0yNTEyMjUxNzQzMzNaMDMxMTAvBgNV BAMTKDQyNEU2MkYyNzAzN0U2RjI5NEQ5MTkxODQ4NEE3ODQ1MjhFQzhERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUnfYBnzRBRZg9WJqVrKW1jbs rGI7Xu09NfHrbc8af0mDUH2mnjq5067HYSE2GwDVS3W30OOeHkzS0bSamyYbKUTN 8MwvNa9cO96n0aghycKtqX8EMCcCPCiJSq9xqJx0C+PjUSJsbk1TZOhU2gnRzCpn 0QiGc5m/caUytEa8Vz59vc8LYFuIRwbQJOiacZpfO3dfAQbKkbDjVUPcAr5wGwBu MmmSJuseRVZTvRNs/HHr+972ZuAAYwrQjD5gGLUmYmmOdpARZoNcaHdswesQPtpG QGUeSzEpevr8OFYSbM2RDVb2Z95GAfKGCeTzXE6oEgTirC3Sf0vqznsQTVYDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQk5i8nA35vKU2RkYSEp4RSjsjfowHwYDVR0j BBgwFoAUkjtts3phwV5ohYWJOg54e21A6MwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREN0THZnMTRYeDdLSGFkbkpwcnlqdXF3ZEZxeFVBRGpkamo5eEFuWVM0 UEwvMC85MjNCNkRCMzdBNjFDMTVFNjg4NTg1ODkzQTBFNzg3QjZENDBFOENDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyM0I2REIzN0E2MUMxNUU2 ODg1ODU4OTNBMEU3ODdCNkQ0MEU4Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REN0THZnMTRYeDdLSGFkbkpwcnlqdXF3ZEZxeFVBRGpkamo5eEFuWVM0UEwvMC85 MjNCNkRCMzdBNjFDMTVFNjg4NTg1ODkzQTBFNzg3QjZENDBFOENDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAML6E52pxPiD5s5MnOc9uEF6pJLEyDCSbSO4zg/Rg21VAucSbu4RyAxXxTGGr QyhKNxkRFmYhSNo5F1IPtpZZo5HJvZ7fhfts1VON2qSfEWvVX4lYo2wAm9xUqn9C p0c75/41U27QM4aiWxr+M1YsVHtB23K4yYd0pZmHofamZkMdaE0ANYywaQ7NUelU rQNjtQUOtAtkfQwHAQJ/aHFGPDBmmq6JiuH0cgWa5pbyaMHis8+wtBALKjjUOM3E u2DijphEYYcJ6Xztm6+HhiXfnkIy+n5mHCpP+G/ABfPdxvkNzDYT1CjBObGhxR8K 4v5kqSf9ex9BNlqieURQz77fFA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:01:53 2025 by rpki-client