This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: uPDZEcjB2XHyURxuiqg8YpwLfBd0TGprte85J5poqEg= Subject key identifier: DA:3A:AA:37:12:1A:47:6B:6E:EF:4A:2D:EC:C7:1C:FA:C1:2A:FF:60 Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 1C57450739972342555A47B800A87C9B02E017C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 0321 Signing time: Fri 05 Dec 2025 21:23:56 +0000 Manifest this update: Fri 05 Dec 2025 21:18:56 +0000 Manifest next update: Sun 07 Dec 2025 00:55:56 +0000 Files and hashes: 1: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: WNoVP9g5pzNlGwblMvL69VBypgfKXYmhm2WvYgHMTvg=) 2: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=) 3: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:57:45:07:39:97:23:42:55:5a:47:b8:00:a8:7c:9b:02:e0:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Dec 5 21:18:56 2025 GMT Not After : Dec 7 00:55:56 2025 GMT Subject: CN=DA3AAA37121A476B6EEF4A2DECC71CFAC12AFF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:db:cb:9f:b8:16:e6:8f:1e:98:bf:1e:7f: 1d:8b:87:06:79:03:a4:eb:be:5a:c7:c5:18:3d:5b: 20:d2:2f:e6:93:99:04:a1:4a:a0:f7:6e:c0:76:aa: 7a:f8:1a:f8:d3:c9:0d:d5:21:63:57:2e:fe:8e:33: c0:d8:24:7c:08:d3:6f:3d:a7:18:e6:bf:32:33:2d: 5a:36:d2:6a:ec:26:0a:16:48:6f:88:02:1b:e8:3c: c6:49:65:8a:ca:29:9c:f5:1c:a5:d5:90:e9:21:ba: 16:96:95:1b:38:f6:a3:a5:43:c9:17:34:af:f1:6c: ef:bc:6e:83:c8:f1:77:c5:c6:57:2c:bb:b9:85:07: 49:5c:83:ab:aa:cf:9a:4d:26:f3:cb:9f:c8:81:83: 4c:e5:b9:3c:3d:35:71:92:4d:7c:e8:4e:f4:d5:d6: df:96:1f:8e:ee:7f:da:5f:f5:ab:bb:53:e1:63:21: 92:18:3d:6f:d0:e5:5e:09:8b:40:64:fd:eb:eb:6f: be:91:43:e6:eb:05:70:7d:b2:49:9a:fb:aa:d0:a6: b9:49:40:00:3a:2d:d4:5d:d4:2e:34:c5:dd:bb:35: 25:7e:7f:d8:26:b9:20:57:de:ca:cb:36:6b:77:ed: ab:44:5c:73:d8:1b:b9:37:2d:73:a3:ec:25:fe:1e: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:AA:37:12:1A:47:6B:6E:EF:4A:2D:EC:C7:1C:FA:C1:2A:FF:60 X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:b3:a9:37:14:9e:ef:11:f1:0d:e3:de:79:dc:d9:cb:e8: 44:b2:97:ba:48:ce:83:73:da:8f:5c:06:3b:24:94:0c:ba:a0: 7a:94:4b:b6:10:1d:98:f5:e6:36:d1:84:c7:32:72:be:33:16: 3d:b4:ec:53:cc:6b:ad:02:72:5c:25:b8:9e:4f:dd:72:80:97: f3:b2:e1:9d:73:ba:2d:bc:85:36:14:79:25:68:d6:56:57:d6: 5f:dc:31:36:07:4c:2a:23:e2:f3:21:0b:ba:c0:93:b0:13:d7: 49:08:2e:22:95:87:92:81:d5:64:76:4e:3f:09:94:44:aa:32: 1b:6c:59:3a:a5:6d:54:f9:9d:bd:53:b9:c1:cb:3a:52:5d:ff: 0f:1e:11:d8:7c:b6:58:52:d8:92:8c:8b:bd:67:be:df:b1:f5: 73:c6:c2:d3:25:93:65:b7:b2:dd:ca:13:22:67:75:6b:09:bf: 6c:e6:1e:8e:9f:ea:65:7c:8d:f1:07:39:6f:c1:97:73:7e:47: 69:78:ff:d9:e5:39:a6:ba:b9:47:ca:d8:28:ce:34:06:98:76: d1:96:82:f3:b6:a8:af:ac:2e:4e:af:c8:ce:3c:01:38:34:14: b7:7c:c3:73:e6:23:bf:e9:7f:14:96:30:82:05:db:92:5c:ea: bf:b4:3f:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHFdFBzmXI0JVWke4AKh8mwLgF8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNTEyMDUyMTE4NTZaFw0yNTEyMDcwMDU1NTZaMDMxMTAvBgNV BAMTKERBM0FBQTM3MTIxQTQ3NkI2RUVGNEEyREVDQzcxQ0ZBQzEyQUZGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHetvLn7gW5o8emL8efx2LhwZ5 A6TrvlrHxRg9WyDSL+aTmQShSqD3bsB2qnr4GvjTyQ3VIWNXLv6OM8DYJHwI0289 pxjmvzIzLVo20mrsJgoWSG+IAhvoPMZJZYrKKZz1HKXVkOkhuhaWlRs49qOlQ8kX NK/xbO+8boPI8XfFxlcsu7mFB0lcg6uqz5pNJvPLn8iBg0zluTw9NXGSTXzoTvTV 1t+WH47uf9pf9au7U+FjIZIYPW/Q5V4Ji0Bk/evrb76RQ+brBXB9skma+6rQprlJ QAA6LdRd1C40xd27NSV+f9gmuSBX3srLNmt37atEXHPYG7k3LXOj7CX+HsrpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2jqqNxIaR2tu70ot7Mcc+sEq/2AwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAouyzqTcUnu8R8Q3j3nnc2cvoRLKXukjOg3Paj1wGOySUDLqgepRLthAdmPXm NtGExzJyvjMWPbTsU8xrrQJyXCW4nk/dcoCX87LhnXO6LbyFNhR5JWjWVlfWX9wx NgdMKiPi8yELusCTsBPXSQguIpWHkoHVZHZOPwmURKoyG2xZOqVtVPmdvVO5wcs6 Ul3/Dx4R2Hy2WFLYkoyLvWe+37H1c8bC0yWTZbey3coTImd1awm/bOYejp/qZXyN 8Qc5b8GXc35HaXj/2eU5prq5R8rYKM40Bph20ZaC87aor6wuTq/IzjwBODQUt3zD c+Yjv+l/FJYwggXbklzqv7Q/iA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:32 2025 by rpki-client