This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: SwSUQkmHBneaHIU2xOgHUqv3NsNNrBOBdYNJYZmM34s= Subject key identifier: 05:7A:DD:69:AF:72:C5:A7:36:FD:1A:5E:77:29:30:0C:A3:9B:41:78 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 5A397E01E65576E5A3D772CFF6EC2BF9600F8575 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0332 Signing time: Fri 05 Dec 2025 19:23:01 +0000 Manifest this update: Fri 05 Dec 2025 19:18:01 +0000 Manifest next update: Sat 06 Dec 2025 21:55:01 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: oYhPgZ568xz1622TN8pOUsaCHwlQrzGqk+rS4mBnC0U=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:39:7e:01:e6:55:76:e5:a3:d7:72:cf:f6:ec:2b:f9:60:0f:85:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Dec 5 19:18:01 2025 GMT Not After : Dec 6 21:55:01 2025 GMT Subject: CN=057ADD69AF72C5A736FD1A5E7729300CA39B4178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:54:2f:46:af:b7:77:45:53:3a:4a:82:fd: a5:bf:df:ff:77:a8:b5:52:44:32:82:5d:d9:46:71: e8:59:66:0c:a0:d4:ee:7f:37:c7:dc:77:6a:43:c1: a2:e4:1c:15:ba:a5:b9:a1:c8:1e:80:ac:52:c3:e9: 53:e6:56:a4:16:eb:93:a5:6f:07:6b:0c:a4:23:c8: 1d:c5:ea:f0:c6:ad:97:fb:d6:4c:88:97:39:19:22: 33:71:cd:7c:65:0c:3b:bb:ab:97:3d:52:97:bc:b7: 97:34:74:64:c7:8f:d4:0a:95:e9:1a:38:8f:b2:b6: 38:b4:54:14:dc:48:e5:e7:ff:bb:d0:87:51:6f:87: 04:ae:5b:cf:89:b9:bf:a6:86:d5:3f:b9:fa:27:14: 59:8b:0a:07:07:8a:a8:40:cd:f3:e4:3e:72:c7:a4: 9b:20:f9:47:ba:a8:d6:de:dc:17:59:df:4d:2f:19: 2b:cb:52:ac:66:47:96:e5:0a:49:6b:30:17:e3:78: 28:24:90:80:4b:60:58:f9:39:a1:11:51:90:d8:ae: 17:ea:75:20:12:8c:8b:02:61:a4:f9:50:0c:d3:e9: 95:22:59:5d:83:00:e0:75:3b:06:1c:72:50:a9:33: de:15:68:4a:32:9e:e7:9c:9b:ef:98:b8:ca:0a:af: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7A:DD:69:AF:72:C5:A7:36:FD:1A:5E:77:29:30:0C:A3:9B:41:78 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cf:93:45:07:34:7b:ba:45:0c:d4:72:d9:23:98:4e:06:d6: 6e:38:b8:53:b5:86:4e:4b:71:43:9d:fc:65:ed:20:9c:e3:41: 5c:07:34:25:0e:f9:c8:38:84:36:78:23:61:6e:e9:e9:fb:23: 00:ee:32:33:ae:db:d2:7a:18:77:5a:50:7e:57:3c:ea:ea:32: 6f:e8:5a:bd:ea:87:a7:9d:bf:e0:fc:7a:cb:18:5f:25:32:98: f2:d2:36:1f:fa:06:63:de:e1:8f:5b:7e:e8:fc:2b:96:77:e8: e7:55:75:0a:bd:ad:3d:f7:ca:2c:10:9f:ab:2c:52:7c:bc:7f: 21:12:7f:73:58:16:4b:79:68:a4:01:3e:d7:2b:09:4a:4d:95: b9:e4:f6:90:1b:2f:01:36:a9:a1:7f:c1:2e:89:9b:4f:66:43: c8:90:88:ba:e6:3b:ab:f4:0d:52:8d:09:e9:8c:85:80:91:87: e9:ad:fc:a9:77:bd:f5:8b:e2:d7:b5:2a:20:7f:5e:0e:cd:02: b6:02:f8:82:1e:10:e0:7b:67:68:a7:aa:5d:07:d0:fa:01:d8: 91:9f:a8:98:51:06:3e:f7:73:11:d7:73:7d:a7:bb:52:90:df: b1:98:8a:4b:8f:9b:ee:a6:d3:ef:92:db:f1:b3:6a:21:7e:07: 0c:e1:39:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWjl+AeZVduWj13LP9uwr+WAPhXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTEyMDUxOTE4MDFaFw0yNTEyMDYyMTU1MDFaMDMxMTAvBgNV BAMTKDA1N0FERDY5QUY3MkM1QTczNkZEMUE1RTc3MjkzMDBDQTM5QjQxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsulQvRq+3d0VTOkqC/aW/3/93 qLVSRDKCXdlGcehZZgyg1O5/N8fcd2pDwaLkHBW6pbmhyB6ArFLD6VPmVqQW65Ol bwdrDKQjyB3F6vDGrZf71kyIlzkZIjNxzXxlDDu7q5c9Upe8t5c0dGTHj9QKleka OI+ytji0VBTcSOXn/7vQh1FvhwSuW8+Jub+mhtU/ufonFFmLCgcHiqhAzfPkPnLH pJsg+Ue6qNbe3BdZ300vGSvLUqxmR5blCklrMBfjeCgkkIBLYFj5OaERUZDYrhfq dSASjIsCYaT5UAzT6ZUiWV2DAOB1OwYcclCpM94VaEoynuecm++YuMoKr/3bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBXrdaa9yxac2/RpedykwDKObQXgwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvM+TRQc0e7pFDNRy2SOYTgbWbji4U7WGTktxQ538Ze0gnONBXAc0JQ75yDiE NngjYW7p6fsjAO4yM67b0noYd1pQflc86uoyb+haveqHp52/4Px6yxhfJTKY8tI2 H/oGY97hj1t+6Pwrlnfo51V1Cr2tPffKLBCfqyxSfLx/IRJ/c1gWS3lopAE+1ysJ Sk2VueT2kBsvATapoX/BLombT2ZDyJCIuuY7q/QNUo0J6YyFgJGH6a38qXe99Yvi 17UqIH9eDs0CtgL4gh4Q4HtnaKeqXQfQ+gHYkZ+omFEGPvdzEddzfae7UpDfsZiK S4+b7qbT75Lb8bNqIX4HDOE5lw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:36 2025 by rpki-client