This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: gHNIVgHLzBqyEjilAsL+1cfJB9Tlj/lM26U5etGRuIw= Subject key identifier: AD:5F:EB:62:07:52:C6:F1:1D:3A:F9:47:79:46:ED:FB:4F:D3:28:D6 Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 0D9C4DC26F445BE46F8CB979D96EA5E6B21D08C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 0314 Signing time: Fri 05 Dec 2025 21:19:47 +0000 Manifest this update: Fri 05 Dec 2025 21:14:47 +0000 Manifest next update: Sun 07 Dec 2025 00:11:47 +0000 Files and hashes: 1: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) 2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: kbiBdvE9/Dgu7j9pX1VcpiSYNw7i7TOtnx9wkBKQmu4=) 3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9c:4d:c2:6f:44:5b:e4:6f:8c:b9:79:d9:6e:a5:e6:b2:1d:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Dec 5 21:14:47 2025 GMT Not After : Dec 7 00:11:47 2025 GMT Subject: CN=AD5FEB620752C6F11D3AF9477946EDFB4FD328D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:61:71:c3:ea:5f:ee:59:70:72:d8:6c:d5: 7a:2f:eb:35:b6:36:57:87:7b:8a:b4:4c:9e:db:7d: 48:5d:d5:f5:c2:cc:8d:1c:26:73:66:ab:01:86:8b: c4:9b:b4:71:10:01:5b:90:7e:79:ad:a7:7f:e0:8e: 19:ed:75:88:53:17:e2:31:8c:5a:f7:0d:b0:33:45: fc:55:17:c6:4a:42:0a:73:44:e9:a5:3c:77:e7:6f: 6d:75:cf:17:3f:ee:a6:5b:b5:56:77:6b:c4:9b:2d: 0f:d5:35:29:0a:16:e3:2a:48:b8:5c:79:21:15:ff: 02:6b:1b:0e:d0:70:d3:7a:1e:f3:61:23:15:70:59: b8:b4:e0:e4:a4:59:db:1a:8a:0d:2a:27:73:3e:e0: 80:dd:4b:cc:4f:49:11:e2:ff:50:83:2c:a8:07:14: c9:26:e3:40:70:d4:ee:8b:07:71:41:f8:b4:db:3b: e4:af:1e:bc:5f:a3:38:1d:c9:f4:72:f8:55:ed:43: 54:5b:59:91:43:f4:68:0d:27:99:a4:9c:85:1f:58: 5d:c8:1a:ea:6b:2b:83:0d:6a:ef:a2:1a:ff:16:53: 46:21:f7:6b:2e:d8:53:18:48:c1:5b:4d:67:95:2b: ec:6a:18:71:84:95:a1:be:6a:ef:7f:ca:4a:39:82: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5F:EB:62:07:52:C6:F1:1D:3A:F9:47:79:46:ED:FB:4F:D3:28:D6 X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c1:4d:04:0c:7d:39:d9:b4:19:fa:4c:7a:18:cd:4b:71:86: 32:1f:81:46:07:92:b7:73:8c:50:36:51:a7:2b:bd:15:09:30: 92:4d:1b:23:a9:fd:ad:b3:3d:d5:69:35:32:ef:33:85:1e:bc: 34:8a:5f:42:9e:6a:dd:0a:7c:93:6e:3c:5d:47:c7:e6:b9:36: bc:f3:36:0e:13:c9:4e:f3:50:77:12:32:7a:47:f4:8d:20:e7: dc:22:4d:a4:df:9e:ef:0e:2b:85:27:fa:36:5d:4c:84:6a:2c: 5d:68:82:2c:15:9c:cf:31:4f:01:78:cd:e7:df:9e:ff:c3:57: 4e:96:f6:a6:17:68:50:dc:b2:b0:dc:2d:ff:11:72:b0:a0:22: a2:a3:52:3d:2b:32:79:c8:eb:8c:0a:85:97:01:a5:03:d3:cc: 28:8e:91:8b:80:21:96:0e:f5:63:d6:4f:05:78:55:7c:d2:63: f4:0f:8f:71:d7:df:75:b7:a8:13:80:5d:1f:b7:85:07:a8:21: a1:e2:24:2c:67:f9:1f:6c:9f:4a:75:66:98:e0:41:e7:f4:28: 11:9a:1d:b9:5c:a1:78:5c:93:ac:5c:d0:76:77:fc:03:bc:54: d6:e8:da:d1:1f:a7:fb:67:9c:f1:a9:c0:08:bc:9a:b5:a1:b8: 3a:1b:1f:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDZxNwm9EW+RvjLl52W6l5rIdCMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTEyMDUyMTE0NDdaFw0yNTEyMDcwMDExNDdaMDMxMTAvBgNV BAMTKEFENUZFQjYyMDc1MkM2RjExRDNBRjk0Nzc5NDZFREZCNEZEMzI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/GFxw+pf7llwcths1Xov6zW2 NleHe4q0TJ7bfUhd1fXCzI0cJnNmqwGGi8SbtHEQAVuQfnmtp3/gjhntdYhTF+Ix jFr3DbAzRfxVF8ZKQgpzROmlPHfnb211zxc/7qZbtVZ3a8SbLQ/VNSkKFuMqSLhc eSEV/wJrGw7QcNN6HvNhIxVwWbi04OSkWdsaig0qJ3M+4IDdS8xPSRHi/1CDLKgH FMkm40Bw1O6LB3FB+LTbO+SvHrxfozgdyfRy+FXtQ1RbWZFD9GgNJ5mknIUfWF3I GuprK4MNau+iGv8WU0Yh92su2FMYSMFbTWeVK+xqGHGElaG+au9/yko5grk7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrV/rYgdSxvEdOvlHeUbt+0/TKNYwHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADMFNBAx9Odm0GfpMehjNS3GGMh+BRgeSt3OMUDZRpyu9FQkwkk0bI6n9rbM9 1Wk1Mu8zhR68NIpfQp5q3Qp8k248XUfH5rk2vPM2DhPJTvNQdxIyekf0jSDn3CJN pN+e7w4rhSf6Nl1MhGosXWiCLBWczzFPAXjN59+e/8NXTpb2phdoUNyysNwt/xFy sKAioqNSPSsyecjrjAqFlwGlA9PMKI6Ri4Ahlg71Y9ZPBXhVfNJj9A+Pcdffdbeo E4BdH7eFB6ghoeIkLGf5H2yfSnVmmOBB5/QoEZoduVyheFyTrFzQdnf8A7xU1uja 0R+n+2ec8anACLyataG4Ohsf2A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:41 2025 by rpki-client