This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
File: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json)
Hash identifier: MlBASHKQvEdN3X+4rpgnmwSGzEYgqJGYjGBs5MuQ8Yk=
Subject key identifier: 2F:42:50:8F:62:F4:84:1B:A3:50:C1:8D:E0:56:2F:8A:F5:8B:E4:06
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Certificate issuer: /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial: 79BF016B5A6EDC837764712305A5E54E89231CF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
Manifest number: 029B
Signing time: Sun 25 Jan 2026 06:15:35 +0000
Manifest this update: Sun 25 Jan 2026 06:10:35 +0000
Manifest next update: Mon 26 Jan 2026 07:24:35 +0000
Files and hashes: 1: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: qR6iS5F06BWnuM8HyC9ItrpXDfvJvjlt1MMd4yffj18=)
2: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: 8gZng/LcYVjRvdKcIWLphoxYezlVpCWANLcyK6msRE4=)
3: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: 3VLtIjTinhCLN7QWZG65lm2FKK4k0JuNsY80aHQ/4/E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 07:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:bf:01:6b:5a:6e:dc:83:77:64:71:23:05:a5:e5:4e:89:23:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Validity
Not Before: Jan 25 06:10:35 2026 GMT
Not After : Jan 26 07:24:35 2026 GMT
Subject: CN=2F42508F62F4841BA350C18DE0562F8AF58BE406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:e3:5b:85:9d:dd:6f:a9:2b:b4:a6:61:70:
29:7b:b0:cd:d6:21:0d:a5:51:bb:dc:68:5c:df:4d:
e2:69:b3:8f:aa:f9:32:f4:37:2c:d6:c4:cb:f1:23:
0b:89:12:f7:45:b0:b6:19:af:68:2c:4f:54:3b:cf:
bb:85:72:f1:66:bb:78:ef:1a:01:e2:72:de:88:81:
dd:cd:63:11:c7:33:e0:5f:e2:32:29:c8:09:09:91:
9b:df:45:d0:1c:17:55:fe:99:b7:11:7f:02:88:ad:
ef:55:07:91:ad:42:71:34:69:9a:5a:ca:b0:80:62:
d9:be:a7:21:92:13:ff:e8:8a:1b:63:54:37:c6:86:
ac:bb:d7:79:5d:1d:6d:db:ea:ea:31:d7:93:d3:46:
06:bf:e5:fc:f9:95:3d:48:e2:a2:47:1b:7b:18:46:
1f:0c:6c:c0:22:47:43:10:f5:68:b8:38:fc:ab:b7:
3a:46:30:a0:d0:d3:a4:ae:1e:15:7e:ce:1d:e9:ae:
83:6c:b6:d9:8f:0a:21:9b:8e:89:87:ca:44:5a:ed:
1b:03:5d:67:05:3e:a9:a0:b8:46:ab:3d:1f:76:66:
05:7c:a2:e7:be:04:67:ad:db:02:6c:cd:8c:5e:53:
bf:05:9e:6a:d3:40:8d:e0:fc:36:5b:dd:b2:f3:a2:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:50:8F:62:F4:84:1B:A3:50:C1:8D:E0:56:2F:8A:F5:8B:E4:06
X509v3 Authority Key Identifier:
keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3e:f1:bf:14:1a:6d:05:1a:1e:45:cb:e8:da:25:1a:2f:43:
59:88:a9:d6:37:d5:50:05:0f:2b:bc:71:5e:f0:89:a6:3e:72:
53:a4:54:57:ca:a1:51:10:e0:03:99:b5:e3:5c:d1:0e:2d:b7:
d8:05:e3:09:76:3e:92:bd:8a:29:1e:c4:54:da:44:d2:2d:a4:
08:76:0d:3b:dd:b2:a4:b9:5a:71:01:48:51:1f:91:1c:50:f5:
95:9a:0f:3d:0e:5b:78:f2:21:b3:45:3a:67:58:69:30:78:63:
30:d8:fb:ac:78:08:39:bf:84:d7:11:e7:06:ae:86:b2:04:3d:
5a:13:aa:c0:64:27:5f:4e:f1:6e:f6:9c:6c:11:9e:bb:e7:ad:
e0:b1:6f:2e:88:42:5e:ae:e1:a8:2a:fa:53:ca:21:1e:15:8e:
9b:55:5e:90:e7:21:fc:27:05:17:1a:6b:ef:9d:ca:ad:98:05:
5e:9b:bc:ef:07:3d:89:36:f9:02:a0:c7:0e:c7:18:6e:e3:17:
1c:ae:72:f5:47:8e:13:b6:06:27:44:07:59:99:07:dc:17:f8:
59:be:ec:c4:2a:64:12:4c:18:ae:be:c6:7d:a6:52:73:ac:bf:
e2:c0:a4:2c:46:64:1b:db:88:0a:7a:44:75:f5:46:28:2a:08:
87:54:90:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeb8Ba1pu3IN3ZHEjBaXlTokjHPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGNTIwNEI0MTE2OUNCQkYyRjY4QTUwMEUwMzZGQkE2
QzNDM0JFRjAeFw0yNjAxMjUwNjEwMzVaFw0yNjAxMjYwNzI0MzVaMDMxMTAvBgNV
BAMTKDJGNDI1MDhGNjJGNDg0MUJBMzUwQzE4REUwNTYyRjhBRjU4QkU0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vONbhZ3db6krtKZhcCl7sM3W
IQ2lUbvcaFzfTeJps4+q+TL0NyzWxMvxIwuJEvdFsLYZr2gsT1Q7z7uFcvFmu3jv
GgHict6Igd3NYxHHM+Bf4jIpyAkJkZvfRdAcF1X+mbcRfwKIre9VB5GtQnE0aZpa
yrCAYtm+pyGSE//oihtjVDfGhqy713ldHW3b6uox15PTRga/5fz5lT1I4qJHG3sY
Rh8MbMAiR0MQ9Wi4OPyrtzpGMKDQ06SuHhV+zh3proNsttmPCiGbjomHykRa7RsD
XWcFPqmguEarPR92ZgV8oue+BGet2wJszYxeU78FnmrTQI3g/DZb3bLzomZvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUL0JQj2L0hBujUMGN4FYvivWL5AYwHwYDVR0j
BBgwFoAUyvUgS0EWnLvy9opQDgNvumw8O+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZK
RTkvMC9DQUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjUyMDRCNDExNjlDQkJG
MkY2OEE1MDBFMDM2RkJBNkMzQzNCRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZKRTkvMC9D
QUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuT7xvxQabQUaHkXL6NolGi9DWYip1jfVUAUPK7xxXvCJpj5yU6RUV8qhURDg
A5m141zRDi232AXjCXY+kr2KKR7EVNpE0i2kCHYNO92ypLlacQFIUR+RHFD1lZoP
PQ5bePIhs0U6Z1hpMHhjMNj7rHgIOb+E1xHnBq6GsgQ9WhOqwGQnX07xbvacbBGe
u+et4LFvLohCXq7hqCr6U8ohHhWOm1VekOch/CcFFxpr753KrZgFXpu87wc9iTb5
AqDHDscYbuMXHK5y9UeOE7YGJ0QHWZkH3Bf4Wb7sxCpkEkwYrr7GfaZSc6y/4sCk
LEZkG9uICnpEdfVGKCoIh1SQew==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:54:43 2026 by rpki-client