This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft File: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft (raw, json) Hash identifier: 6D3F5H+OuhcvXxWRG6Vw9zwR4P8Q+eNXQRLJSUnZ+2o= Subject key identifier: 76:B4:7C:6A:70:6A:69:59:11:EC:9D:07:DE:37:C0:CD:D7:AF:DA:2F Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC Certificate issuer: /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC Certificate serial: 7D802E671CE00BC790C9CB3FB803B18C45991A55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft Manifest number: AB Signing time: Sat 06 Dec 2025 09:42:29 +0000 Manifest this update: Sat 06 Dec 2025 09:37:29 +0000 Manifest next update: Sun 07 Dec 2025 13:09:29 +0000 Files and hashes: 1: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl (hash: vXhGBFBEF4PDZR/PZ1O42Wo2lt8W2vhBx4oHueIYYok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:80:2e:67:1c:e0:0b:c7:90:c9:cb:3f:b8:03:b1:8c:45:99:1a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC Validity Not Before: Dec 6 09:37:29 2025 GMT Not After : Dec 7 13:09:29 2025 GMT Subject: CN=76B47C6A706A695911EC9D07DE37C0CDD7AFDA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:68:6c:3e:83:70:7b:0c:66:81:05:24:ce: 6e:6f:c8:17:aa:4d:c6:cb:22:ad:fb:f2:e0:4d:a7: 86:31:d4:a1:e9:3d:7b:f5:b8:90:87:7f:31:e3:7e: e8:f7:c5:c0:49:c5:09:2c:19:d1:8c:3f:dc:3e:84: c9:a2:40:33:bb:d5:4b:ac:5a:fe:3a:04:07:2b:ac: 8c:d4:70:65:25:32:d1:2f:98:0b:c4:f4:d0:4c:66: 97:84:92:21:a1:e3:f5:fb:6e:16:dc:a7:6f:71:89: a4:79:f3:3b:c7:6c:38:0a:ed:09:f4:90:74:b0:be: d6:96:dd:fd:cd:24:18:9d:79:ae:e9:62:b9:24:a1: b6:9f:9d:1e:7d:95:eb:53:b4:d9:26:e6:af:52:33: a4:db:b0:e2:8c:76:4c:ba:a3:84:6d:46:65:bd:b1: 00:38:bc:53:fe:20:cb:2f:48:11:d1:d9:c7:64:3e: 54:a9:bc:e0:73:f1:4a:63:b9:36:0f:4d:7f:93:40: 78:76:ad:88:ce:93:c4:82:70:43:55:32:c1:c2:7c: 3f:df:d0:39:ff:62:dc:a2:bf:08:3f:a9:07:86:01: 77:b5:fe:5c:8a:ee:c0:5c:0e:6a:bc:0a:4f:27:16: 58:1a:8d:84:49:63:79:55:39:60:90:63:9a:43:eb: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:7C:6A:70:6A:69:59:11:EC:9D:07:DE:37:C0:CD:D7:AF:DA:2F X509v3 Authority Key Identifier: keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:24:ff:be:07:3f:71:95:3d:f8:ce:da:e7:cf:43:93:25:74: ea:26:1d:4d:11:ff:16:09:6f:6b:3f:43:20:d6:c4:d4:26:24: bd:95:c0:44:a2:8e:c6:b2:64:e2:48:07:b3:2e:a7:61:5f:13: 9f:03:bb:af:25:18:8f:af:39:73:74:d6:64:07:7b:ee:cc:2b: 7e:c4:95:32:c2:30:ab:70:9e:42:33:d1:60:9a:9a:37:a2:d3: 9c:b3:3a:c4:43:51:9e:8c:f6:55:9d:20:fb:43:b5:6d:9b:85: 9b:24:4a:72:0d:8c:fe:5e:7b:2b:8a:ea:a1:51:8d:a6:5f:5b: 98:52:26:43:b5:f7:8d:db:65:cf:db:54:57:76:08:7f:bd:b2: f6:81:17:3b:d5:25:98:bb:0b:30:45:69:da:8a:f3:ab:05:ed: d5:bd:e9:64:15:54:33:e3:5d:e0:42:7c:56:76:55:b5:cf:fb: e7:19:5e:be:47:0f:8d:e4:81:39:fd:6b:d9:f3:8f:0d:88:82: 56:26:a3:bf:d8:29:d1:1d:46:be:40:be:ab:fb:27:78:17:b6: f7:62:26:75:98:f7:2b:ad:12:f8:0c:ee:5b:48:ad:7b:f9:6e: cd:8d:81:ab:60:21:ce:79:28:5b:0b:40:d4:5a:f0:ce:0e:8c: a1:2d:cd:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfYAuZxzgC8eQycs/uAOxjEWZGlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQkFBMUNEMTBENzZBOTc0MzNGMzc2Q0Q2Qjc0NzRD NTE3OTdDQzAeFw0yNTEyMDYwOTM3MjlaFw0yNTEyMDcxMzA5MjlaMDMxMTAvBgNV BAMTKDc2QjQ3QzZBNzA2QTY5NTkxMUVDOUQwN0RFMzdDMENERDdBRkRBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMmhsPoNwewxmgQUkzm5vyBeq TcbLIq378uBNp4Yx1KHpPXv1uJCHfzHjfuj3xcBJxQksGdGMP9w+hMmiQDO71Uus Wv46BAcrrIzUcGUlMtEvmAvE9NBMZpeEkiGh4/X7bhbcp29xiaR58zvHbDgK7Qn0 kHSwvtaW3f3NJBidea7pYrkkobafnR59letTtNkm5q9SM6TbsOKMdky6o4RtRmW9 sQA4vFP+IMsvSBHR2cdkPlSpvOBz8UpjuTYPTX+TQHh2rYjOk8SCcENVMsHCfD/f 0Dn/Ytyivwg/qQeGAXe1/lyK7sBcDmq8Ck8nFlgajYRJY3lVOWCQY5pD68fjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdrR8anBqaVkR7J0H3jfAzdev2i8wHwYDVR0j BBgwFoAUKjuqHNENdql0M/N2zWt0dMUXl8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl eWsvMC8yQTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBM0JBQTFDRDEwRDc2QTk3 NDMzRjM3NkNENkI3NDc0QzUxNzk3Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdleWsvMC8y QTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAiT/vgc/cZU9+M7a589DkyV06iYdTRH/Fglvaz9DINbE1CYkvZXARKKOxrJk 4kgHsy6nYV8TnwO7ryUYj685c3TWZAd77swrfsSVMsIwq3CeQjPRYJqaN6LTnLM6 xENRnoz2VZ0g+0O1bZuFmyRKcg2M/l57K4rqoVGNpl9bmFImQ7X3jdtlz9tUV3YI f72y9oEXO9UlmLsLMEVp2orzqwXt1b3pZBVUM+Nd4EJ8VnZVtc/75xlevkcPjeSB Of1r2fOPDYiCViajv9gp0R1GvkC+q/sneBe292ImdZj3K60S+AzuW0ite/luzY2B q2AhznkoWwtA1Frwzg6MoS3N+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:16 2025 by rpki-client