This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json) Hash identifier: armOVI3+FEV7Ss+uwweuNVf6zAhbWamKWF/v5T3tbfw= Subject key identifier: 9E:62:EC:E9:D2:F8:89:20:49:5D:E1:0A:51:0C:46:1E:0D:1F:6F:EE Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Certificate issuer: /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Certificate serial: 12EDD22C75228EEB208F67564B7FA3141378B5D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft Manifest number: 0398 Signing time: Sat 06 Dec 2025 06:10:00 +0000 Manifest this update: Sat 06 Dec 2025 06:05:00 +0000 Manifest next update: Sun 07 Dec 2025 06:10:00 +0000 Files and hashes: 1: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=) 2: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: QW0e4TJ8XiXtbznA+rPsLYk1WNJ2O22WdzGtasn5BBA=) 3: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ed:d2:2c:75:22:8e:eb:20:8f:67:56:4b:7f:a3:14:13:78:b5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Validity Not Before: Dec 6 06:05:00 2025 GMT Not After : Dec 7 06:10:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:f4:93:d5:95:dc:a7:cb:10:3c:e1:28:18: 92:2f:1f:44:50:86:02:75:95:3f:76:c0:c1:af:40: 08:d5:c2:d8:ed:16:3f:b4:1f:fe:f6:36:4c:3f:90: 4d:b8:3d:5b:0a:af:46:cb:8d:28:c2:82:7d:fd:10: 04:b2:ae:96:93:2c:3c:a0:50:4e:28:36:ae:e5:d1: e6:1c:f1:c2:98:26:9e:fe:6f:6e:cc:f6:5b:8e:1c: 38:73:a4:b2:ca:19:6b:2c:00:54:c4:91:87:1d:44: 94:b8:6c:9b:55:ef:17:1c:02:5a:fe:c9:38:88:c8: 26:84:d5:46:5b:74:8b:e0:b9:9c:3e:71:68:5f:af: af:80:6f:3e:09:20:b8:f3:36:5e:bb:ca:ae:0f:5b: b4:75:68:2a:15:4d:4b:46:0b:ce:67:64:73:1d:9b: 90:75:ff:e4:e7:61:6c:af:90:63:7b:6d:e5:89:67: de:cb:54:04:99:b4:a4:d5:95:c9:13:1b:80:4a:a8: e9:a2:40:86:65:e6:9c:16:c4:1f:84:31:fb:3e:65: 2e:de:ee:cc:42:29:bb:6b:29:4c:b9:10:da:f9:22: 35:c8:a6:c3:a3:52:fd:f0:08:51:e4:12:47:1a:46: 6a:5a:ac:4f:5a:39:f0:5f:a8:26:03:06:d9:b7:48: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:62:EC:E9:D2:F8:89:20:49:5D:E1:0A:51:0C:46:1E:0D:1F:6F:EE X509v3 Authority Key Identifier: keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bb:b7:c6:ab:e3:f4:32:f7:70:c3:29:df:0a:ac:68:12:00: 76:69:f7:29:fb:e4:57:9c:d1:e4:c1:37:02:1d:24:98:33:f1: 7a:1f:fb:3b:b9:0d:c8:f4:25:8d:9b:64:5a:19:12:70:25:62: a4:4c:f0:5c:16:88:97:d6:4c:44:42:01:b6:b2:e5:3d:d8:0c: b8:d7:a1:c9:af:6c:23:9c:b0:b0:08:bd:b8:0c:30:fc:f9:21: 00:1b:5f:4e:2d:47:e6:e2:4d:36:95:17:df:1c:ec:99:f4:58: 0f:27:e2:6f:5a:55:45:39:ed:9e:4b:b8:c9:80:1b:4f:c8:7a: f0:77:1c:f2:6c:dd:dd:76:96:db:88:82:59:10:42:e8:86:18: 94:3d:51:80:3a:91:b7:3b:d2:fd:34:6b:eb:4b:f7:7a:de:ba: fd:30:6c:fa:c5:13:ed:f1:e4:5a:09:ce:f1:a5:bf:a6:df:c5: 2d:92:77:85:a1:b2:81:b6:82:7d:33:a7:45:f2:a6:0d:f7:71: a4:dd:ee:83:68:7b:f7:6d:01:df:89:b7:e0:da:a5:c3:a9:e0: fe:69:24:53:86:e8:29:c1:15:31:08:93:48:e5:21:db:4d:00: 4b:7a:f7:47:e6:a5:35:68:54:2e:83:c7:32:2c:eb:ab:36:56: eb:79:e0:09 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUEu3SLHUijusgj2dWS3+jFBN4tdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RGNkRGODdGQzc2Q0Mx NTdBMDdDMTAeFw0yNTEyMDYwNjA1MDBaFw0yNTEyMDcwNjEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJCRUY0OTNENTk1RENBN0NC MTAzQ0UxMjgxODkyMkYxRjQ0NTA4NjAyNzU5NTNGNzZDMEMxQUY0MDA4RDVDMkQ4 RUQxNjNGQjQxRkZFRjYzNjRDM0Y5MDREQjgzRDVCMEFBRjQ2Q0I4RDI4QzI4MjdE RkQxMDA0QjJBRTk2OTMyQzNDQTA1MDRFMjgzNkFFRTVEMUU2MUNGMUMyOTgyNjlF RkU2RjZFQ0NGNjVCOEUxQzM4NzNBNEIyQ0ExOTZCMkMwMDU0QzQ5MTg3MUQ0NDk0 Qjg2QzlCNTVFRjE3MUMwMjVBRkVDOTM4ODhDODI2ODRENTQ2NUI3NDhCRTBCOTlD M0U3MTY4NUZBRkFGODA2RjNFMDkyMEI4RjMzNjVFQkJDQUFFMEY1QkI0NzU2ODJB MTU0RDRCNDYwQkNFNjc2NDczMUQ5QjkwNzVGRkU0RTc2MTZDQUY5MDYzN0I2REU1 ODk2N0RFQ0I1NDA0OTlCNEE0RDU5NUM5MTMxQjgwNEFBOEU5QTI0MDg2NjVFNjlD MTZDNDFGODQzMUZCM0U2NTJFREVFRUNDNDIyOUJCNkIyOTRDQjkxMERBRjkyMjM1 QzhBNkMzQTM1MkZERjAwODUxRTQxMjQ3MUE0NjZBNUFBQzRGNUEzOUYwNUZBODI2 MDMwNkQ5Qjc0ODgyQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAu770k9WV3KfLEDzhKBiSLx9EUIYCdZU/dsDBr0AI1cLY7RY/tB/+ 9jZMP5BNuD1bCq9Gy40owoJ9/RAEsq6Wkyw8oFBOKDau5dHmHPHCmCae/m9uzPZb jhw4c6SyyhlrLABUxJGHHUSUuGybVe8XHAJa/sk4iMgmhNVGW3SL4LmcPnFoX6+v gG8+CSC48zZeu8quD1u0dWgqFU1LRgvOZ2RzHZuQdf/k52Fsr5Bje23liWfey1QE mbSk1ZXJExuASqjpokCGZeacFsQfhDH7PmUu3u7MQim7aylMuRDa+SI1yKbDo1L9 8AhR5BJHGkZqWqxPWjnwX6gmAwbZt0iCxQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FJ5i7OnS+IkgSV3hClEMRh4NH2/uMB8GA1UdIwQYMBaAFCPs1NGviM4uGz3234f8 dswVegfBMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2 NndQSE5wYnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0Uy RTFCM0RGNkRGODdGQzc2Q0MxNTdBMDdDMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8yM0VDRDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0Ew N0MxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2NndQSE5w YnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RG NkRGODdGQzc2Q0MxNTdBMDdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGm7t8ar4/Qy93DDKd8KrGgS AHZp9yn75Fec0eTBNwIdJJgz8Xof+zu5Dcj0JY2bZFoZEnAlYqRM8FwWiJfWTERC Abay5T3YDLjXocmvbCOcsLAIvbgMMPz5IQAbX04tR+biTTaVF98c7Jn0WA8n4m9a VUU57Z5LuMmAG0/IevB3HPJs3d12ltuIglkQQuiGGJQ9UYA6kbc70v00a+tL93re uv0wbPrFE+3x5FoJzvGlv6bfxS2Sd4WhsoG2gn0zp0Xypg33caTd7oNoe/dtAd+J t+DapcOp4P5pJFOG6CnBFTEIk0jlIdtNAEt690fmpTVoVC6DxzIs66s2Vut54Ak= -----END CERTIFICATE-----Generated at Sat Dec 6 20:40:28 2025 by rpki-client