This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: oz+tbR0JGr+bkTTQaAFnwTAYON3SzjzZ3yiLApTtN2Y= Subject key identifier: F6:20:49:40:58:A1:82:2F:68:1C:BA:20:A7:5A:BC:36:48:E0:11:FF Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 7CD069AF49A743E3DB6A52ADF437E06043B469E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 0328 Signing time: Sat 20 Dec 2025 22:52:10 +0000 Manifest this update: Sat 20 Dec 2025 22:47:10 +0000 Manifest next update: Mon 22 Dec 2025 00:50:10 +0000 Files and hashes: 1: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: zoQucRTF6Xu/cyVWngRhOFJoQnkqOT0N6ZcLYYVf49c=) 2: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) 3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 00:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d0:69:af:49:a7:43:e3:db:6a:52:ad:f4:37:e0:60:43:b4:69:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Dec 20 22:47:10 2025 GMT Not After : Dec 22 00:50:10 2025 GMT Subject: CN=F620494058A1822F681CBA20A75ABC3648E011FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:2d:24:d9:12:45:95:a9:e8:22:46:73:50: fd:cc:c2:77:35:60:76:af:1a:c3:73:2d:e0:1c:77: b9:c0:50:02:e6:42:14:fa:cd:a8:72:ad:c7:a5:cd: 3d:2b:fa:81:b3:a8:cf:33:20:1f:a5:f9:30:ec:52: 78:c8:d3:c9:0d:67:d8:d4:a2:3e:8a:59:67:94:9f: cf:72:ce:21:04:4e:f0:ac:73:ea:4f:ae:61:4b:d6: 81:04:81:6c:59:7b:72:6e:b8:57:df:20:ae:c6:14: 92:e3:d8:13:f8:d9:d3:9c:49:f1:59:60:65:70:2c: 24:87:c5:ea:f4:f4:cf:66:fc:7b:30:ce:86:8b:6d: 2c:46:42:ce:b1:ec:85:a1:2f:60:50:11:d9:ec:c8: a4:3a:43:4c:50:5c:4a:1e:ba:41:7f:62:4f:6c:ff: ea:f7:3e:0b:33:21:a8:82:96:f8:3b:98:a2:81:bc: c8:2a:0d:f9:c1:76:97:ad:b9:94:8f:dc:ca:3d:88: 30:74:7d:02:16:2c:2c:aa:f0:14:3b:e0:82:08:49: a5:c7:3d:50:c4:88:b6:52:81:18:ea:fc:7d:29:ad: b5:92:34:6d:67:67:3b:29:59:80:6c:3a:05:07:9f: c0:b7:c5:c3:f9:0d:02:c9:bd:5c:a2:2e:9c:d1:c2: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:20:49:40:58:A1:82:2F:68:1C:BA:20:A7:5A:BC:36:48:E0:11:FF X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:43:c3:25:a4:d9:ec:26:1e:87:ac:e6:fa:82:1a:5a:94:27: a4:01:05:44:bd:fb:21:fb:9b:3e:dd:bd:06:10:4d:ae:e4:fe: b0:d8:01:a1:3e:97:f9:f8:d6:c3:ef:bf:ad:1b:7b:7c:92:79: 3f:fc:70:c8:21:bf:e1:10:65:4a:02:ed:d0:9d:51:17:dc:88: 94:fd:bb:a5:04:69:66:2e:9d:36:23:cc:19:d0:f3:dd:a1:43: 03:ce:35:41:c1:dc:2b:f4:cd:a6:cb:98:d5:a7:ba:1d:28:c7: 53:40:b3:1e:11:48:ec:59:bd:d7:ec:f6:95:da:c9:03:ec:e2: 0f:2b:47:63:53:c5:9e:a9:1f:04:5c:5f:b3:a3:3f:6b:9c:4c: 15:db:d6:f8:69:d5:06:6f:85:4e:db:1e:b7:b4:65:90:08:0b: eb:2a:48:a9:a1:79:28:5e:f3:62:9d:58:e6:ca:0f:b8:74:86: fc:75:f7:c2:35:93:22:3b:59:d2:87:b9:89:12:db:46:95:b7: 56:05:15:be:7e:f7:9f:a9:d2:56:38:40:9f:e4:4a:44:e5:bc: 16:24:d4:c8:57:18:cd:e4:e9:db:e8:c2:4a:f1:e6:e5:21:4c: de:a5:43:71:f9:f3:6f:90:40:02:4e:99:4e:fd:04:4f:33:9e: cc:9d:4c:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfNBpr0mnQ+PbalKt9DfgYEO0aeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTEyMjAyMjQ3MTBaFw0yNTEyMjIwMDUwMTBaMDMxMTAvBgNV BAMTKEY2MjA0OTQwNThBMTgyMkY2ODFDQkEyMEE3NUFCQzM2NDhFMDExRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgEy0k2RJFlanoIkZzUP3Mwnc1 YHavGsNzLeAcd7nAUALmQhT6zahyrcelzT0r+oGzqM8zIB+l+TDsUnjI08kNZ9jU oj6KWWeUn89yziEETvCsc+pPrmFL1oEEgWxZe3JuuFffIK7GFJLj2BP42dOcSfFZ YGVwLCSHxer09M9m/HswzoaLbSxGQs6x7IWhL2BQEdnsyKQ6Q0xQXEoeukF/Yk9s /+r3PgszIaiClvg7mKKBvMgqDfnBdpetuZSP3Mo9iDB0fQIWLCyq8BQ74IIISaXH PVDEiLZSgRjq/H0prbWSNG1nZzspWYBsOgUHn8C3xcP5DQLJvVyiLpzRwhThAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9iBJQFihgi9oHLogp1q8NkjgEf8wHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd0PDJaTZ7CYeh6zm+oIaWpQnpAEFRL37IfubPt29BhBNruT+sNgBoT6X+fjW w++/rRt7fJJ5P/xwyCG/4RBlSgLt0J1RF9yIlP27pQRpZi6dNiPMGdDz3aFDA841 QcHcK/TNpsuY1ae6HSjHU0CzHhFI7Fm91+z2ldrJA+ziDytHY1PFnqkfBFxfs6M/ a5xMFdvW+GnVBm+FTtset7RlkAgL6ypIqaF5KF7zYp1Y5soPuHSG/HX3wjWTIjtZ 0oe5iRLbRpW3VgUVvn73n6nSVjhAn+RKROW8FiTUyFcYzeTp2+jCSvHm5SFM3qVD cfnzb5BAAk6ZTv0ETzOezJ1MHw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:23:09 2025 by rpki-client