This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json) Hash identifier: h0Nf9teyY6upCENeP1RKy9d3u3WwewAd8IwmmiMZJcU= Subject key identifier: 82:0C:6D:40:3A:2B:EE:EC:A2:48:01:C2:07:DC:E4:5E:66:E3:2B:EA Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Certificate issuer: /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Certificate serial: 790B55C5CEE194063C752634C76E158422F90E13 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft Manifest number: 02CA Signing time: Sat 06 Dec 2025 14:35:08 +0000 Manifest this update: Sat 06 Dec 2025 14:30:08 +0000 Manifest next update: Sun 07 Dec 2025 16:26:08 +0000 Files and hashes: 1: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=) 2: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=) 3: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: N3p7NU46R9c4MdXW/8/Eh2HVvZBfIXb0Q9PdThQohwM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 16:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0b:55:c5:ce:e1:94:06:3c:75:26:34:c7:6e:15:84:22:f9:0e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Validity Not Before: Dec 6 14:30:08 2025 GMT Not After : Dec 7 16:26:08 2025 GMT Subject: CN=820C6D403A2BEEECA24801C207DCE45E66E32BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:ec:90:3b:25:f5:1d:d6:be:e2:38:66:39: b2:a7:96:a8:f9:96:e9:89:8b:48:16:77:72:96:41: 1d:2c:ff:2e:52:1e:a2:3f:a6:ee:16:61:e9:68:6c: 39:5f:83:ae:10:57:71:95:4c:ab:16:29:cf:1e:ea: 51:28:14:bc:d7:29:62:91:93:89:0f:17:76:56:60: dd:71:ad:e4:94:fb:a1:d2:84:72:7d:ea:a0:ec:c2: d6:66:13:cc:e2:66:0f:54:1a:1f:0c:3b:8c:f1:a7: 95:b4:cd:e1:46:9a:b1:37:ab:97:e2:09:aa:5a:9b: 52:66:e3:5e:03:43:28:8c:4b:58:5a:92:83:55:34: 57:15:d7:cf:c5:99:b2:7f:75:6a:b0:0e:56:39:62: e9:97:e9:fa:20:4b:11:15:43:70:f9:8a:00:a2:91: 89:b9:b5:67:4a:90:5e:3a:9b:03:87:3e:7c:ad:36: cf:ab:25:e6:e7:0c:8b:25:47:e9:68:e9:3f:15:e7: 78:9b:f3:1c:3a:48:cc:00:94:28:cb:23:50:7c:57: 15:dc:88:f7:e8:da:33:0f:45:9d:b3:3f:ef:45:05: 76:76:63:5b:cd:91:63:4f:35:ac:11:23:3c:c0:6d: ad:35:7e:89:71:ea:47:cd:00:1d:c5:9d:88:ab:72: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:6D:40:3A:2B:EE:EC:A2:48:01:C2:07:DC:E4:5E:66:E3:2B:EA X509v3 Authority Key Identifier: keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:86:53:b5:76:9b:bd:9a:31:27:01:a5:0e:5c:01:dc:e3:aa: 24:c6:37:7d:90:79:a6:69:ba:78:87:09:22:2b:7e:38:95:33: f8:e4:d9:d7:9a:ec:b6:41:a4:ae:58:e0:0c:95:d2:3f:35:86: e7:82:59:5f:08:61:36:4c:c5:bb:46:72:30:31:8c:8c:e7:3f: 00:69:e4:81:15:e7:44:30:9e:a1:62:e2:4e:b6:cf:c7:3c:fd: 09:b4:01:66:71:c0:d1:75:10:c5:3f:56:ad:66:92:2c:c5:78: 64:67:1b:36:6a:05:9f:86:ed:0a:30:ba:1b:5f:f0:2d:e2:14: d5:f4:b5:8f:29:c6:ec:7f:21:f7:93:c0:20:f5:10:f4:20:88: de:16:96:be:ea:fe:14:54:41:45:de:d3:d1:2d:10:65:58:ea: ef:b4:39:51:ba:9e:15:cf:86:da:97:af:9a:aa:b8:ee:d3:fc: 7b:0a:60:81:84:0e:94:5d:49:85:63:58:dc:71:37:63:d8:86: da:76:1d:99:d3:a2:f4:d4:7b:bc:f2:55:42:33:83:c1:ba:4c: a3:e2:47:bb:42:eb:7b:85:58:e5:3f:a5:5a:ce:94:36:60:6d: 21:06:32:18:e6:58:b8:bd:4a:f3:96:21:24:06:09:ad:49:1d: a9:cc:4d:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeQtVxc7hlAY8dSY0x24VhCL5DhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4 RTgyNzdEQTAeFw0yNTEyMDYxNDMwMDhaFw0yNTEyMDcxNjI2MDhaMDMxMTAvBgNV BAMTKDgyMEM2RDQwM0EyQkVFRUNBMjQ4MDFDMjA3RENFNDVFNjZFMzJCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY3uyQOyX1Hda+4jhmObKnlqj5 lumJi0gWd3KWQR0s/y5SHqI/pu4WYelobDlfg64QV3GVTKsWKc8e6lEoFLzXKWKR k4kPF3ZWYN1xreSU+6HShHJ96qDswtZmE8ziZg9UGh8MO4zxp5W0zeFGmrE3q5fi Capam1Jm414DQyiMS1hakoNVNFcV18/FmbJ/dWqwDlY5YumX6fogSxEVQ3D5igCi kYm5tWdKkF46mwOHPnytNs+rJebnDIslR+lo6T8V53ib8xw6SMwAlCjLI1B8VxXc iPfo2jMPRZ2zP+9FBXZ2Y1vNkWNPNawRIzzAba01folx6kfNAB3FnYircl5jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUggxtQDor7uyiSAHCB9zkXmbjK+owHwYDVR0j BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5 MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8y M0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR4ZTtXabvZoxJwGlDlwB3OOqJMY3fZB5pmm6eIcJIit+OJUz+OTZ15rstkGk rljgDJXSPzWG54JZXwhhNkzFu0ZyMDGMjOc/AGnkgRXnRDCeoWLiTrbPxzz9CbQB ZnHA0XUQxT9WrWaSLMV4ZGcbNmoFn4btCjC6G1/wLeIU1fS1jynG7H8h95PAIPUQ 9CCI3haWvur+FFRBRd7T0S0QZVjq77Q5UbqeFc+G2pevmqq47tP8ewpggYQOlF1J hWNY3HE3Y9iG2nYdmdOi9NR7vPJVQjODwbpMo+JHu0Lre4VY5T+lWs6UNmBtIQYy GOZYuL1K85YhJAYJrUkdqcxNzw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:07:17 2025 by rpki-client