This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: ood0NCECk99xr+/17s3WmJHkiaBUF6ZXpznCQQB+2kg= Subject key identifier: 9F:90:D3:7F:CF:35:9E:19:75:ED:1C:9C:FD:45:85:49:B4:AE:0C:71 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 3FC7591DE09E6D41FE526CBA70F83BE1684D74BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 01D6 Signing time: Sat 06 Dec 2025 02:16:11 +0000 Manifest this update: Sat 06 Dec 2025 02:11:11 +0000 Manifest next update: Sun 07 Dec 2025 05:04:11 +0000 Files and hashes: 1: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=) 2: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: 4ItoFWtVU5tTrHcUoNeFxFH11ZYRCwTkj4/vE2bI8ao=) 3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c7:59:1d:e0:9e:6d:41:fe:52:6c:ba:70:f8:3b:e1:68:4d:74:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Dec 6 02:11:11 2025 GMT Not After : Dec 7 05:04:11 2025 GMT Subject: CN=9F90D37FCF359E1975ED1C9CFD458549B4AE0C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:38:be:56:ef:ac:97:48:c6:65:05:96:62: 93:d6:11:e6:9b:85:06:95:a9:64:71:03:71:9a:86: 69:ef:1d:0b:b4:93:b6:94:aa:be:36:87:aa:3c:65: 27:a1:1a:bb:dd:00:19:2f:5c:50:c3:58:34:42:b3: a2:eb:8c:7d:e7:8e:87:71:cc:e6:3e:1c:af:a3:fb: d0:19:4c:5d:e9:db:ea:dc:6a:18:53:06:75:01:8f: fb:e9:22:69:aa:06:c7:a4:bc:50:c6:a4:e2:b2:5d: ed:f2:19:9b:9d:07:2c:c3:b3:fb:38:0c:34:4b:ad: 27:a6:a1:c9:19:8f:5c:35:6d:71:d0:74:f5:f3:bc: 55:5a:6e:51:ee:e9:7e:a0:a4:4c:eb:c3:2e:b9:e5: 88:c3:21:cf:81:36:80:47:bc:c5:8d:b7:3d:1a:49: 01:5c:ef:03:a8:a6:43:4f:3b:1b:68:d9:34:2f:96: 6c:10:9d:c2:47:ed:36:a5:1e:c2:6c:35:19:a0:17: 34:4e:b6:7d:ab:78:bc:cc:6b:33:82:71:86:90:8e: de:89:63:16:80:62:0d:fe:d4:72:70:1b:5f:4e:62: 17:7f:3a:af:4f:a2:e2:3e:dd:83:7f:97:01:d9:49: 70:71:7a:38:69:31:57:d3:d9:6a:6d:68:62:35:65: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:90:D3:7F:CF:35:9E:19:75:ED:1C:9C:FD:45:85:49:B4:AE:0C:71 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:94:ee:1c:5c:19:59:f9:0c:a6:21:6c:09:35:72:6a:2e:0e: 7e:28:d2:4c:94:c2:71:7f:e1:2f:96:ec:c2:66:01:67:c6:67: 1c:30:da:f3:7e:10:65:ce:45:8a:7c:7e:32:f7:00:aa:39:c4: 0f:ed:75:3f:2b:e9:b1:33:0b:39:42:64:b6:5a:a1:dc:ef:51: 5f:c6:64:3e:50:cd:bf:f6:40:8a:17:4f:30:9d:f6:00:55:f8: 4d:a2:29:6e:76:c9:0d:3f:5c:0a:68:5f:f9:62:a3:43:b7:0f: ef:c8:50:4a:d5:ec:14:96:a2:0f:c0:8d:29:78:2c:71:e2:d5: 27:c5:fb:83:16:d0:6a:5f:41:a7:38:ec:c5:28:ea:96:f7:35: 32:11:53:ed:c1:d6:20:f6:d7:55:3e:91:42:08:bf:36:be:83: 6b:a4:5c:64:33:d2:f8:7a:45:a2:55:eb:b1:80:de:e9:ba:26: ce:74:51:0e:67:80:c6:61:ad:2c:f4:c3:eb:e7:cc:20:19:95: ea:39:66:6a:aa:d9:5b:07:5c:b5:de:34:29:53:8b:df:28:aa: 99:4b:5b:46:c0:ac:93:39:02:a8:0c:38:b8:50:ac:13:59:65: 07:b6:d7:dc:4c:5d:da:56:b4:7d:84:64:e4:ba:5c:bd:0c:3d: 5b:0c:1b:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP8dZHeCebUH+Umy6cPg74WhNdL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTEyMDYwMjExMTFaFw0yNTEyMDcwNTA0MTFaMDMxMTAvBgNV BAMTKDlGOTBEMzdGQ0YzNTlFMTk3NUVEMUM5Q0ZENDU4NTQ5QjRBRTBDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCji+Vu+sl0jGZQWWYpPWEeab hQaVqWRxA3GahmnvHQu0k7aUqr42h6o8ZSehGrvdABkvXFDDWDRCs6LrjH3njodx zOY+HK+j+9AZTF3p2+rcahhTBnUBj/vpImmqBsekvFDGpOKyXe3yGZudByzDs/s4 DDRLrSemockZj1w1bXHQdPXzvFVablHu6X6gpEzrwy655YjDIc+BNoBHvMWNtz0a SQFc7wOopkNPOxto2TQvlmwQncJH7TalHsJsNRmgFzROtn2reLzMazOCcYaQjt6J YxaAYg3+1HJwG19OYhd/Oq9PouI+3YN/lwHZSXBxejhpMVfT2WptaGI1ZXpBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn5DTf881nhl17Ryc/UWFSbSuDHEwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQJTuHFwZWfkMpiFsCTVyai4OfijSTJTCcX/hL5bswmYBZ8ZnHDDa834QZc5F inx+MvcAqjnED+11PyvpsTMLOUJktlqh3O9RX8ZkPlDNv/ZAihdPMJ32AFX4TaIp bnbJDT9cCmhf+WKjQ7cP78hQStXsFJaiD8CNKXgsceLVJ8X7gxbQal9BpzjsxSjq lvc1MhFT7cHWIPbXVT6RQgi/Nr6Da6RcZDPS+HpFolXrsYDe6bomznRRDmeAxmGt LPTD6+fMIBmV6jlmaqrZWwdctd40KVOL3yiqmUtbRsCskzkCqAw4uFCsE1llB7bX 3Exd2la0fYRk5LpcvQw9WwwbKA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:49 2025 by rpki-client