This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
File: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json)
Hash identifier: 8Dm/ugBkzchvQEOSi4KrASJ/j7o4J4S6gF+9Vqdzwl4=
Subject key identifier: 99:BC:5E:AE:DB:FF:86:67:50:71:E3:D3:F7:BB:8E:FC:86:1F:56:B2
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial: 0D23D242627278FBD47B20908982DF8F6608FB5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
Manifest number: 03CC
Signing time: Sun 25 Jan 2026 20:40:13 +0000
Manifest this update: Sun 25 Jan 2026 20:35:13 +0000
Manifest next update: Mon 26 Jan 2026 20:44:13 +0000
Files and hashes: 1: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=)
2: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: D/or5UA4B34nf3sURoS4YL0WBx5mjpXg8xWk9/UtO9U=)
3: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:23:d2:42:62:72:78:fb:d4:7b:20:90:89:82:df:8f:66:08:fb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Validity
Not Before: Jan 25 20:35:13 2026 GMT
Not After : Jan 26 20:44:13 2026 GMT
Subject: CN=99BC5EAEDBFF86675071E3D3F7BB8EFC861F56B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:9c:0c:65:9d:b3:ae:98:2a:47:8d:e1:f3:
f9:e4:d3:d6:25:cc:bb:7f:3f:98:7b:99:45:85:97:
4f:4d:3b:a7:6f:67:cc:36:b9:b9:2d:36:45:ed:95:
4d:8f:6b:88:5c:d7:75:e6:ef:1e:ca:c8:c4:cd:65:
b9:16:8b:95:54:95:c8:d4:aa:1b:7b:ff:b4:d0:c8:
51:a3:50:c1:3d:3f:65:45:6e:db:12:e6:2e:cb:56:
a6:20:7c:8b:0e:b8:cc:32:1a:a9:c0:26:19:75:00:
04:89:c4:0a:a8:7f:24:08:23:79:2c:77:68:d9:22:
b4:38:5e:48:7f:d4:e8:3f:07:8a:94:2c:71:d3:aa:
07:ed:58:92:2b:08:9c:0e:14:1f:0a:4f:06:97:10:
60:51:13:f1:20:cf:27:02:f2:b2:66:a9:f8:b6:87:
cc:ac:0d:f7:15:5a:73:b3:b5:40:d6:dd:6a:28:80:
45:06:e5:f7:71:85:58:63:77:45:fb:7a:4c:1c:18:
06:1a:e0:8a:45:5f:99:08:97:15:38:07:10:6d:4a:
a1:1f:c0:8d:a6:64:80:7e:fc:c7:54:a1:ea:75:b5:
e7:bc:80:08:b1:cf:e7:0f:38:a2:5a:7b:00:e5:cc:
86:a4:c7:5c:21:c7:23:60:36:9b:61:2e:60:e2:90:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:5E:AE:DB:FF:86:67:50:71:E3:D3:F7:BB:8E:FC:86:1F:56:B2
X509v3 Authority Key Identifier:
keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6e:4b:6b:a4:49:38:70:a0:6c:3e:67:d9:53:fb:c1:16:41:
69:a8:3f:d5:76:32:c5:24:58:a3:72:91:3c:f8:a6:8f:f6:c8:
ba:d3:3c:45:3c:49:dd:61:d9:cf:19:14:48:c8:9c:a8:2b:65:
eb:16:59:12:6f:ab:24:27:86:c3:3a:56:f8:79:86:ec:90:a7:
69:0b:15:e2:87:d7:67:05:27:b7:7f:98:8b:8f:e3:12:fe:3e:
9e:7f:f4:5f:f1:f7:d8:d0:49:ed:c0:53:a9:b9:b2:2a:d2:de:
ff:8f:db:ce:88:3e:b1:0a:b7:20:2d:6d:bb:fb:cf:5e:d3:0f:
8c:d2:87:95:61:7d:cf:c1:77:55:0d:0d:cf:53:14:f4:a1:71:
85:42:c9:09:47:11:8a:7f:d1:91:10:54:ea:96:83:bb:a2:13:
15:a6:fd:84:bd:9c:27:50:3a:34:69:17:ca:0b:54:68:ad:78:
f0:af:20:8b:0f:de:7f:70:a7:cb:57:22:9c:95:c1:40:95:1d:
09:3d:84:b2:6a:72:c4:0b:d9:ad:56:d2:09:9d:13:d1:41:f7:
f3:52:62:ca:06:6e:24:c8:e1:ac:d9:7b:41:6a:0f:2a:04:db:
ff:d1:c2:53:08:53:cb:3f:f4:b8:ea:a4:1c:0e:20:b1:ac:3d:
5f:ff:e1:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDSPSQmJyePvUeyCQiYLfj2YI+14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG
MERCRUQwMzAeFw0yNjAxMjUyMDM1MTNaFw0yNjAxMjYyMDQ0MTNaMDMxMTAvBgNV
BAMTKDk5QkM1RUFFREJGRjg2Njc1MDcxRTNEM0Y3QkI4RUZDODYxRjU2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxZwMZZ2zrpgqR43h8/nk09Yl
zLt/P5h7mUWFl09NO6dvZ8w2ubktNkXtlU2Pa4hc13Xm7x7KyMTNZbkWi5VUlcjU
qht7/7TQyFGjUME9P2VFbtsS5i7LVqYgfIsOuMwyGqnAJhl1AASJxAqofyQII3ks
d2jZIrQ4Xkh/1Og/B4qULHHTqgftWJIrCJwOFB8KTwaXEGBRE/EgzycC8rJmqfi2
h8ysDfcVWnOztUDW3WoogEUG5fdxhVhjd0X7ekwcGAYa4IpFX5kIlxU4BxBtSqEf
wI2mZIB+/MdUoep1tee8gAixz+cPOKJaewDlzIakx1whxyNgNpthLmDikLYrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmbxertv/hmdQcePT97uO/IYfVrIwHwYDVR0j
BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw
RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhHc3YvMC81
RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjW5La6RJOHCgbD5n2VP7wRZBaag/1XYyxSRYo3KRPPimj/bIutM8RTxJ3WHZ
zxkUSMicqCtl6xZZEm+rJCeGwzpW+HmG7JCnaQsV4ofXZwUnt3+Yi4/jEv4+nn/0
X/H32NBJ7cBTqbmyKtLe/4/bzog+sQq3IC1tu/vPXtMPjNKHlWF9z8F3VQ0Nz1MU
9KFxhULJCUcRin/RkRBU6paDu6ITFab9hL2cJ1A6NGkXygtUaK148K8giw/ef3Cn
y1cinJXBQJUdCT2EsmpyxAvZrVbSCZ0T0UH381JiygZuJMjhrNl7QWoPKgTb/9HC
UwhTyz/0uOqkHA4gsaw9X//hQA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:46:57 2026 by rpki-client