This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
File: 4E865237E426925D454145603E8DE8C3ABC12D0F.mft (raw, json)
Hash identifier: 2beQMBeu2jeRgI1iGIetmozPKwAmcdE9+xn82SpTYAM=
Subject key identifier: 42:7A:DA:29:87:59:EE:32:B5:96:03:83:4C:1C:EF:C2:0B:D6:CD:47
Authority key identifier: 4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F
Certificate issuer: /CN=4E865237E426925D454145603E8DE8C3ABC12D0F
Certificate serial: 66BEACC591F2323CE65917E86D8C7C3264AF1F7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
Manifest number: 036C
Signing time: Sun 25 Jan 2026 10:44:42 +0000
Manifest this update: Sun 25 Jan 2026 10:39:42 +0000
Manifest next update: Mon 26 Jan 2026 13:08:42 +0000
Files and hashes: 1: 4E865237E426925D454145603E8DE8C3ABC12D0F.crl (hash: ooQ4JZEAZVwSuNhfpyL/1vhkKq1Tq6jtTIjnPkO9nAg=)
2: 34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa (hash: OpU0/tEQBI+4vThuFy3ZyGUvrgYx1ggjKv8RdD5tmtM=)
3: 323830343a363332303a3a2f33322d3336203d3e20323639333430.roa (hash: 1zv4Gfvoo8oW8O9l/92CrciW8YXFwb8aKjX8u8vuL4s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl
rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 13:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:be:ac:c5:91:f2:32:3c:e6:59:17:e8:6d:8c:7c:32:64:af:1f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E865237E426925D454145603E8DE8C3ABC12D0F
Validity
Not Before: Jan 25 10:39:42 2026 GMT
Not After : Jan 26 13:08:42 2026 GMT
Subject: CN=427ADA298759EE32B59603834C1CEFC20BD6CD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:20:94:69:04:f2:8a:26:f3:36:32:6f:5a:
2e:79:91:61:5a:a7:59:cf:42:c3:2a:34:a6:0f:2a:
b6:c2:dd:73:09:cb:9d:71:5f:a1:41:0d:23:70:d1:
de:ee:30:db:9e:fa:ef:eb:10:2f:26:45:b0:3f:b0:
bc:e4:29:46:1f:98:91:4b:ad:22:c9:d6:b9:2f:8a:
9b:5b:21:87:22:e5:4b:77:10:b6:a6:16:57:df:c2:
d7:04:c6:8a:fa:b5:16:84:5c:08:78:31:ea:8c:da:
9b:66:cf:66:68:5c:67:f0:7f:b4:29:3e:b2:18:72:
b9:d2:fa:ae:76:6f:7e:17:f6:73:18:1e:c8:28:f5:
ab:c6:3b:f7:e7:14:4a:be:c5:f6:4a:a7:b7:86:1b:
21:62:58:77:9d:1e:b6:90:88:74:0b:ac:48:c4:02:
5d:57:e8:2f:f2:65:4a:21:c9:a2:bc:ff:f5:99:1f:
b0:14:1d:01:99:15:6e:7c:4a:37:2c:b6:26:68:d2:
d1:8c:24:24:16:e5:c4:50:e1:f6:21:1f:7d:4c:8a:
e6:a3:17:2a:8f:49:c6:1a:e9:19:65:ba:58:78:74:
97:8c:a1:0a:cd:06:a6:d0:5e:f6:31:ee:b1:c9:d6:
53:c1:4e:07:b8:76:ef:8c:79:eb:cc:a7:5b:29:11:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:DA:29:87:59:EE:32:B5:96:03:83:4C:1C:EF:C2:0B:D6:CD:47
X509v3 Authority Key Identifier:
keyid:4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b6:aa:0a:3f:b4:f8:aa:98:b9:bb:71:7e:3c:68:05:59:12:
af:b9:8f:fe:09:e6:b6:3b:b1:8d:41:bd:5d:3a:ae:6a:e1:dc:
eb:b2:48:d9:21:52:df:ab:cf:ec:0a:ba:d8:91:f8:b5:e5:9d:
13:22:dc:7f:95:01:e6:8d:57:f2:65:86:38:f2:59:61:6c:44:
bf:d3:42:c3:89:b2:7c:06:41:98:4d:58:8c:a7:b0:fa:09:9e:
3d:24:b1:c3:8b:61:2a:bb:88:c9:51:02:cd:a7:0c:1b:59:47:
64:6f:78:39:6e:8a:ac:2b:e3:f8:b8:4d:f7:32:f7:f6:03:05:
e3:0b:65:62:ea:1b:57:f9:38:ad:ad:f1:49:4f:05:27:73:36:
b3:9a:26:4e:f1:2c:f5:3d:d6:c0:85:74:c2:9b:2d:38:42:61:
74:ce:cb:82:dc:ba:0a:78:59:b0:4e:d3:fa:a6:f6:e5:e2:2c:
f2:9c:e4:0e:8e:82:93:70:7d:9d:05:58:5f:21:e1:71:18:34:
ae:93:73:d2:57:76:db:9a:a4:03:f7:bc:94:e3:1a:9c:f2:1a:
7a:1b:a4:6d:e2:d5:e6:05:bb:48:6e:f2:ac:d2:fd:5f:27:08:
70:05:bc:35:aa:9a:a0:a3:e5:08:80:f6:d9:ac:97:69:1d:a8:
f9:df:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:57 2026 by rpki-client