This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft File: 721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft (raw, json) Hash identifier: Q6nFX2sUd0vo8/ZfDyXKeuINUQjOER4OTjgUA6OAVXs= Subject key identifier: D1:AE:CE:FF:2E:64:2B:9B:71:A6:88:BE:05:26:90:C1:79:10:89:B4 Authority key identifier: 72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB Certificate issuer: /CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB Certificate serial: 2EACAC4D4440BB653174824E60D50E9641B42CC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft Manifest number: 3A Signing time: Sat 06 Dec 2025 03:15:51 +0000 Manifest this update: Sat 06 Dec 2025 03:10:51 +0000 Manifest next update: Sun 07 Dec 2025 04:45:51 +0000 Files and hashes: 1: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (hash: 8+Ghan3SgXuTsYmRhspkbGki+wRJrZx9AdfY1l2WwTE=) 2: 34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (hash: 1fsdSmR4TdjbL1xr7Loe4KWvKXQMJAqt1mSxZ8Jgpyo=) 3: 721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl (hash: Z2zq9wQ+TXIggOAIyD0kztlzywh0bjajbPr9leD+GDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ac:ac:4d:44:40:bb:65:31:74:82:4e:60:d5:0e:96:41:b4:2c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB Validity Not Before: Dec 6 03:10:51 2025 GMT Not After : Dec 7 04:45:51 2025 GMT Subject: CN=D1AECEFF2E642B9B71A688BE052690C1791089B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b8:57:68:94:d9:ce:8e:6c:c6:fb:26:8e:7a: b8:c5:7b:2f:9f:35:76:31:5c:55:53:58:70:f1:65: 03:49:e9:19:43:4c:e6:7a:21:0b:49:0f:70:e9:63: 39:cc:40:0d:17:0c:1c:36:95:0c:0d:07:77:2b:c0: ca:4b:eb:cf:6d:1f:7b:d3:6e:ce:98:60:aa:6b:e5: 41:aa:e0:9d:ae:67:0b:4c:12:a2:9e:6b:8f:9a:46: 5d:a7:1f:3b:45:dc:ca:61:19:c7:88:51:36:51:f9: df:4b:85:2d:66:9e:db:b2:4d:2d:f7:1e:5b:89:2a: 86:58:4d:32:c2:1d:5d:92:25:22:9d:ac:60:ab:bc: 23:cb:87:8e:93:ce:03:bc:d8:4c:e0:91:79:6e:21: 0a:5a:b3:75:0b:27:19:45:a4:6e:3f:76:b5:a7:cf: be:3c:f3:4a:d3:ab:b7:81:6c:57:58:c8:7d:d3:46: 6f:2f:42:a0:79:d4:9e:2d:f3:fd:16:a3:b4:e2:43: 5f:18:32:7e:f2:97:19:a8:f3:ae:37:2e:00:c2:b3: 8d:92:00:00:92:e0:ec:8e:15:27:89:3c:78:7c:8a: a2:f0:c9:d3:78:6e:6a:04:a6:4d:1e:96:7e:fc:94: e1:cd:2b:03:05:82:8a:5b:96:1f:1b:c6:63:94:95: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:CE:FF:2E:64:2B:9B:71:A6:88:BE:05:26:90:C1:79:10:89:B4 X509v3 Authority Key Identifier: keyid:72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:76:2d:81:9b:b6:d4:b4:97:69:01:19:68:d0:ca:3a:a7:81: a9:4f:86:e3:6c:ec:f0:b4:02:f0:87:db:33:2c:be:c0:a9:ee: 1b:0d:f2:f1:4e:9f:70:25:15:a7:79:ab:d9:93:46:4f:12:74: 2e:a4:0d:40:d1:30:3f:be:72:39:dd:c8:f8:6d:83:b9:83:94: 68:24:39:3b:c1:e0:00:2a:98:d3:9e:4f:dc:40:60:49:2c:26: db:75:d9:9d:3a:52:f7:c8:52:27:7b:08:c4:4d:07:b6:86:64: fa:1c:1f:3f:10:30:e5:29:a4:18:04:61:5e:fb:2e:55:1d:7c: ce:80:3e:86:07:ed:04:b2:86:30:4b:98:56:a3:24:46:9f:66: 04:df:a8:d2:58:81:74:dd:1f:fb:9c:61:07:19:26:ad:4d:4e: 71:e0:10:30:4b:00:4b:54:c8:b5:de:28:71:be:8a:0c:6e:5b: b6:f0:86:5b:d9:a8:7e:77:c2:a2:c1:36:3b:35:39:53:23:8a: d0:a1:45:5c:30:8f:eb:33:4b:29:4b:f1:48:7c:24:a9:c8:8f: 34:a1:36:8f:e8:3e:dd:cf:ce:65:6a:2a:0f:67:65:65:57:b5: ec:b8:bd:3e:0e:b8:fd:01:b1:ae:1b:40:0b:7d:a5:9e:0a:43: c6:85:d5:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULqysTURAu2UxdIJOYNUOlkG0LMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIxRkRFRjBFQzY0RUM5RUNCODk2M0Q0Mjc5NTM1ODM2 QTBBMTZFQjAeFw0yNTEyMDYwMzEwNTFaFw0yNTEyMDcwNDQ1NTFaMDMxMTAvBgNV BAMTKEQxQUVDRUZGMkU2NDJCOUI3MUE2ODhCRTA1MjY5MEMxNzkxMDg5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1uFdolNnOjmzG+yaOerjFey+f NXYxXFVTWHDxZQNJ6RlDTOZ6IQtJD3DpYznMQA0XDBw2lQwNB3crwMpL689tH3vT bs6YYKpr5UGq4J2uZwtMEqKea4+aRl2nHztF3MphGceIUTZR+d9LhS1mntuyTS33 HluJKoZYTTLCHV2SJSKdrGCrvCPLh46TzgO82EzgkXluIQpas3ULJxlFpG4/drWn z74880rTq7eBbFdYyH3TRm8vQqB51J4t8/0Wo7TiQ18YMn7ylxmo8643LgDCs42S AACS4OyOFSeJPHh8iqLwydN4bmoEpk0eln78lOHNKwMFgopblh8bxmOUlePJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0a7O/y5kK5txpoi+BSaQwXkQibQwHwYDVR0j BBgwFoAUch/e8Oxk7J7LiWPUJ5U1g2oKFuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzVGSEthRmtpUFBwWmtON01KMmhFbXpxNUhDaDNnM25ha0xoVlhoMkRz MzQvMC83MjFGREVGMEVDNjRFQzlFQ0I4OTYzRDQyNzk1MzU4MzZBMEExNkVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyMUZERUYwRUM2NEVDOUVD Qjg5NjNENDI3OTUzNTgzNkEwQTE2RUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzVGSEthRmtpUFBwWmtON01KMmhFbXpxNUhDaDNnM25ha0xoVlhoMkRzMzQvMC83 MjFGREVGMEVDNjRFQzlFQ0I4OTYzRDQyNzk1MzU4MzZBMEExNkVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHYtgZu21LSXaQEZaNDKOqeBqU+G42zs8LQC8IfbMyy+wKnuGw3y8U6fcCUV p3mr2ZNGTxJ0LqQNQNEwP75yOd3I+G2DuYOUaCQ5O8HgACqY055P3EBgSSwm23XZ nTpS98hSJ3sIxE0HtoZk+hwfPxAw5SmkGARhXvsuVR18zoA+hgftBLKGMEuYVqMk Rp9mBN+o0liBdN0f+5xhBxkmrU1OceAQMEsAS1TItd4ocb6KDG5btvCGW9mofnfC osE2OzU5UyOK0KFFXDCP6zNLKUvxSHwkqciPNKE2j+g+3c/OZWoqD2dlZVe17Li9 Pg64/QGxrhtAC32lngpDxoXVmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:00:01 2025 by rpki-client