This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: Pvrxx0ewkS/vMnltzziaR+r8Rx8bNLjmZneW0JVpRQ4= Subject key identifier: 6E:72:0D:9D:AD:E8:14:BF:32:13:1F:B5:BE:A8:5B:B6:69:E2:EA:A1 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 7E603BB989D2187F7F8CEB6F2F4960C01C4286B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 0331 Signing time: Fri 05 Dec 2025 16:23:55 +0000 Manifest this update: Fri 05 Dec 2025 16:18:55 +0000 Manifest next update: Sat 06 Dec 2025 17:21:55 +0000 Files and hashes: 1: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: ASA6tDQeAdVZoAXIO3R/Ad/Q30v3SJRRif/wrSBwW38=) 2: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=) 3: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=) 4: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:60:3b:b9:89:d2:18:7f:7f:8c:eb:6f:2f:49:60:c0:1c:42:86:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Dec 5 16:18:55 2025 GMT Not After : Dec 6 17:21:55 2025 GMT Subject: CN=6E720D9DADE814BF32131FB5BEA85BB669E2EAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:fa:9f:7b:a4:6e:ff:9d:e0:7d:0b:1a:17: 18:00:6c:cd:c3:d2:d1:d1:cc:3f:61:ca:5f:22:75: cb:ee:1c:00:06:d8:c3:6c:56:c3:95:b0:35:1a:59: 12:a6:d9:99:09:1c:25:ef:5c:58:7e:8d:49:09:46: 93:12:1d:02:98:cf:1d:2a:06:e1:cc:3f:03:2b:5e: fd:03:87:13:79:57:33:b8:4a:49:10:28:e1:70:0a: 17:ca:e8:34:46:c6:5c:6a:cf:75:2f:f6:12:9d:18: 5f:b9:9c:dd:16:8b:f5:d0:6c:d2:b4:3b:23:37:de: 87:f8:6f:19:1e:15:f7:02:bf:58:47:2b:6e:2f:74: a3:ba:cc:3f:e3:17:37:b9:94:dc:f7:9c:41:01:72: 82:77:db:6a:67:a4:e5:bd:98:ef:65:7a:64:84:1d: 42:19:44:78:67:63:4a:90:1d:f0:a0:9f:0e:35:85: 26:d3:91:f4:17:76:23:39:7d:8f:88:0a:48:81:15: 6c:5b:0d:78:03:7a:a1:28:b2:56:9a:09:c4:0d:f5: bf:ea:f6:85:38:2c:4d:c5:08:e7:31:14:3f:4d:cf: 59:77:7f:c4:13:0a:d0:79:75:7c:02:82:ba:60:02: fc:b8:61:33:7a:7e:13:2e:d0:cc:29:7a:01:df:c9: 05:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:72:0D:9D:AD:E8:14:BF:32:13:1F:B5:BE:A8:5B:B6:69:E2:EA:A1 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:61:89:62:ba:a3:a8:b3:64:4d:fc:98:e8:4a:93:53:7d:e3: 32:04:23:60:46:20:ba:66:38:7c:62:9b:41:d1:63:f7:7f:02: da:99:44:5e:b3:28:46:23:4d:32:e6:53:6d:35:88:33:56:d6: 0c:08:89:d5:79:19:d3:00:de:b1:44:6e:74:a9:c2:17:65:35: 08:88:ba:53:10:66:d6:12:6d:3f:63:50:05:39:a2:29:df:a5: 74:7a:f1:30:90:8a:05:78:29:2e:b6:75:b2:cf:fc:41:1d:0d: 98:d8:e8:f7:42:33:39:64:18:9a:fc:ce:b4:d3:5f:88:14:89: fb:c7:cf:d5:99:34:e8:c0:e8:bd:65:e1:fd:8e:4e:17:fb:5b: 6c:e2:17:11:60:31:b4:1a:5b:72:a0:d3:cf:d7:b1:86:77:4d: cf:86:32:27:ba:68:f9:89:3c:78:77:f9:39:f5:03:9f:2c:a8: 44:16:6e:78:a4:25:50:01:e0:dc:bf:9e:82:da:f6:45:a0:ab: 47:81:af:f6:e9:c9:ef:cb:25:c9:4d:38:70:b2:22:fd:b3:8f: c5:6d:b1:61:89:10:0f:2c:4e:b8:43:d8:32:5e:6d:76:e0:3d: 4f:8f:b6:11:98:1b:f4:3d:f3:89:23:88:2a:23:35:14:f9:26: 7f:da:68:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfmA7uYnSGH9/jOtvL0lgwBxChrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTEyMDUxNjE4NTVaFw0yNTEyMDYxNzIxNTVaMDMxMTAvBgNV BAMTKDZFNzIwRDlEQURFODE0QkYzMjEzMUZCNUJFQTg1QkI2NjlFMkVBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfLvqfe6Ru/53gfQsaFxgAbM3D 0tHRzD9hyl8idcvuHAAG2MNsVsOVsDUaWRKm2ZkJHCXvXFh+jUkJRpMSHQKYzx0q BuHMPwMrXv0DhxN5VzO4SkkQKOFwChfK6DRGxlxqz3Uv9hKdGF+5nN0Wi/XQbNK0 OyM33of4bxkeFfcCv1hHK24vdKO6zD/jFze5lNz3nEEBcoJ322pnpOW9mO9lemSE HUIZRHhnY0qQHfCgnw41hSbTkfQXdiM5fY+ICkiBFWxbDXgDeqEoslaaCcQN9b/q 9oU4LE3FCOcxFD9Nz1l3f8QTCtB5dXwCgrpgAvy4YTN6fhMu0MwpegHfyQUBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbnINna3oFL8yEx+1vqhbtmni6qEwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVGGJYrqjqLNkTfyY6EqTU33jMgQjYEYgumY4fGKbQdFj938C2plEXrMoRiNN MuZTbTWIM1bWDAiJ1XkZ0wDesURudKnCF2U1CIi6UxBm1hJtP2NQBTmiKd+ldHrx MJCKBXgpLrZ1ss/8QR0NmNjo90IzOWQYmvzOtNNfiBSJ+8fP1Zk06MDovWXh/Y5O F/tbbOIXEWAxtBpbcqDTz9exhndNz4YyJ7po+Yk8eHf5OfUDnyyoRBZueKQlUAHg 3L+egtr2RaCrR4Gv9unJ78slyU04cLIi/bOPxW2xYYkQDyxOuEPYMl5tduA9T4+2 EZgb9D3ziSOIKiM1FPkmf9popQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:15 2025 by rpki-client