This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft File: 2AFA735BD922B81B8D49B7C0193B661015358B07.mft (raw, json) Hash identifier: Lc2kd5FRDI20kP5T6pwH8fOBAfOgr17ma5i8uHr8OTA= Subject key identifier: 09:F4:2D:C9:19:C3:A7:E1:77:EE:68:E0:B7:6F:DA:0F:6A:30:7B:C4 Authority key identifier: 2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07 Certificate issuer: /CN=2AFA735BD922B81B8D49B7C0193B661015358B07 Certificate serial: 3B3D97D4FD1CACB884EFB7A88E0F5D1B545259D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer Subject info access: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft Manifest number: 64 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 16:56:03 +0000 Manifest next update: Sun 07 Dec 2025 18:42:03 +0000 Files and hashes: 1: 2AFA735BD922B81B8D49B7C0193B661015358B07.crl (hash: mRO66hdxX5BVLN0ThjO6nMIr9yMPpl+ki/73Dm4mRWY=) 2: 323830343a353637343a3a2f33322d3438203d3e20323637393939.roa (hash: OMp0VOHQJmlx0pDjyH8nrjLj4t1+kkoAi1gxjq3Qngc=) 3: 34352e3136372e3131302e302f32342d3234203d3e20323637393939.roa (hash: WaFQPRdEr1s1cPabk3fRShZFzRQn+NDhBvGA56NvuPQ=) 4: 34352e3136372e3130382e302f32332d3234203d3e20323637393939.roa (hash: 6orLroAee4vZGrjN6H/zYXLHJqDKFbzn5WyrqkDkzzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.crl rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3d:97:d4:fd:1c:ac:b8:84:ef:b7:a8:8e:0f:5d:1b:54:52:59:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFA735BD922B81B8D49B7C0193B661015358B07 Validity Not Before: Dec 6 16:56:03 2025 GMT Not After : Dec 7 18:42:03 2025 GMT Subject: CN=09F42DC919C3A7E177EE68E0B76FDA0F6A307BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:fa:67:14:74:1e:e6:ba:21:99:b1:84:4f: 03:b8:f0:e3:73:4b:58:1d:fd:bf:a9:42:14:e1:b7: dd:0a:b8:da:20:c6:77:a9:e1:de:0e:a2:95:60:7f: 52:c2:fa:14:2a:50:c6:27:56:8f:5d:da:74:33:47: e6:8b:f4:74:98:c8:9a:e7:ae:fc:57:d5:c0:25:e0: 13:26:d2:45:81:ce:2c:f8:58:9b:44:de:9c:33:f7: 8d:0d:8e:0e:53:d1:7f:c2:8f:cd:0b:0d:e3:72:de: 7f:a9:f0:47:ea:d8:ff:3b:16:5f:ba:72:ea:ad:a2: 0f:2d:34:5a:f9:0a:e3:82:6a:1c:5e:68:7f:e2:86: 0f:7a:ff:42:80:2e:af:6e:91:86:d2:86:74:ae:48: 6b:6f:95:42:f3:f3:58:b8:ae:60:b3:c4:d7:53:d9: 34:dd:b9:38:48:c9:6f:a8:a5:b1:0f:10:46:0f:4d: 81:28:08:20:18:a5:ef:0e:fd:21:68:6c:3f:d9:be: 2c:93:bb:b8:2d:a1:09:6b:3b:23:75:a6:c4:a8:6f: 39:e5:d0:b8:c8:87:47:59:6a:e8:ea:5f:80:eb:1b: d7:56:bf:ea:4e:75:09:ca:f2:44:b1:d6:c3:f1:92: ca:9b:7b:c7:35:8c:29:82:b2:d8:50:d1:2b:54:64: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:2D:C9:19:C3:A7:E1:77:EE:68:E0:B7:6F:DA:0F:6A:30:7B:C4 X509v3 Authority Key Identifier: keyid:2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8d:3b:46:b9:cb:20:66:f9:18:ec:8e:36:fd:78:ec:05:3c: 9f:fb:5d:2d:c7:99:f5:a0:4b:e8:a8:f1:89:a6:4a:52:5d:ad: cc:47:24:a4:da:f7:2f:76:f4:d2:f0:ca:16:d5:1f:c3:4a:72: 62:50:71:c4:49:65:ff:b2:d7:3b:32:87:5a:53:9b:8f:00:6f: 08:30:dc:5e:f6:bd:36:67:5c:e6:9f:32:3c:c1:15:43:69:5b: 28:41:f1:fe:83:89:e3:c1:52:9b:59:17:b6:e6:c3:d5:8b:df: 00:d5:d8:18:13:1d:67:90:78:3a:43:31:81:82:59:4a:b2:bd: 12:33:fd:6e:52:7f:49:c6:90:4b:91:bb:a8:b2:35:0a:f6:b8: e0:63:82:4c:7c:30:47:66:81:91:6f:45:c8:9e:cc:15:e2:d6: 47:a1:05:16:ff:28:2a:a8:38:79:b7:56:9a:02:74:9d:cd:40: aa:f3:a7:82:c0:5c:03:0d:2a:94:b6:e6:22:52:75:21:6d:35: 1a:65:27:3d:fa:72:d7:b7:9a:41:3b:1a:d2:32:8e:b0:33:4f: 0c:ff:11:0f:1d:96:a0:89:37:cf:94:0d:12:78:72:eb:75:3e: 9c:c5:a7:99:d8:e7:90:8f:0d:68:43:ca:a3:51:9e:fb:3e:2e: 09:66:32:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOz2X1P0crLiE77eojg9dG1RSWdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGQTczNUJEOTIyQjgxQjhENDlCN0MwMTkzQjY2MTAx NTM1OEIwNzAeFw0yNTEyMDYxNjU2MDNaFw0yNTEyMDcxODQyMDNaMDMxMTAvBgNV BAMTKDA5RjQyREM5MTlDM0E3RTE3N0VFNjhFMEI3NkZEQTBGNkEzMDdCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCli/pnFHQe5rohmbGETwO48ONz S1gd/b+pQhTht90KuNogxnep4d4OopVgf1LC+hQqUMYnVo9d2nQzR+aL9HSYyJrn rvxX1cAl4BMm0kWBziz4WJtE3pwz940Njg5T0X/Cj80LDeNy3n+p8Efq2P87Fl+6 cuqtog8tNFr5CuOCahxeaH/ihg96/0KALq9ukYbShnSuSGtvlULz81i4rmCzxNdT 2TTduThIyW+opbEPEEYPTYEoCCAYpe8O/SFobD/ZviyTu7gtoQlrOyN1psSobznl 0LjIh0dZaujqX4DrG9dWv+pOdQnK8kSx1sPxksqbe8c1jCmCsthQ0StUZIzrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCfQtyRnDp+F37mjgt2/aD2owe8QwHwYDVR0j BBgwFoAUKvpzW9kiuBuNSbfAGTtmEBU1iwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy S2QvMC8yQUZBNzM1QkQ5MjJCODFCOEQ0OUI3QzAxOTNCNjYxMDE1MzU4QjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRkE3MzVCRDkyMkI4MUI4 RDQ5QjdDMDE5M0I2NjEwMTUzNThCMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC8y QUZBNzM1QkQ5MjJCODFCOEQ0OUI3QzAxOTNCNjYxMDE1MzU4QjA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ407RrnLIGb5GOyONv147AU8n/tdLceZ9aBL6KjxiaZKUl2tzEckpNr3L3b0 0vDKFtUfw0pyYlBxxEll/7LXOzKHWlObjwBvCDDcXva9Nmdc5p8yPMEVQ2lbKEHx /oOJ48FSm1kXtubD1YvfANXYGBMdZ5B4OkMxgYJZSrK9EjP9blJ/ScaQS5G7qLI1 Cva44GOCTHwwR2aBkW9FyJ7MFeLWR6EFFv8oKqg4ebdWmgJ0nc1AqvOngsBcAw0q lLbmIlJ1IW01GmUnPfpy17eaQTsa0jKOsDNPDP8RDx2WoIk3z5QNEnhy63U+nMWn mdjnkI8NaEPKo1Ge+z4uCWYy2g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:30 2025 by rpki-client