This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
File: D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft (raw, json)
Hash identifier: Lx7PWaiE6I+Mn/Uj7U31XOF9Xt9Os1fpSSLK+XlK2+Y=
Subject key identifier: 31:DC:5C:56:34:24:86:84:6F:A8:41:18:2C:64:F9:A4:4C:AC:98:3B
Authority key identifier: D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53
Certificate issuer: /CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053
Certificate serial: 4883145A10BA17034C1FB2B51C7470EE4AF2C5A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
Manifest number: 70
Signing time: Sun 25 Jan 2026 09:38:07 +0000
Manifest this update: Sun 25 Jan 2026 09:33:07 +0000
Manifest next update: Mon 26 Jan 2026 10:06:07 +0000
Files and hashes: 1: 3133312e3232312e3134382e302f32322d3234203d3e20323634343333.roa (hash: cB6sCKAyHvesTFjo6aVVBHx3MwFesWxApaaS8pLGJk4=)
2: 323830343a316538343a3a2f33322d3336203d3e20323634343333.roa (hash: wqkO26iBwML8dHCOdOfHPla5oFoB5WF7uIRgLGj2YMk=)
3: D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl (hash: r7xGlMePLZJz22/0cBO6DAJak/0FIcf+xQOPl7AQhtk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl
rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:83:14:5a:10:ba:17:03:4c:1f:b2:b5:1c:74:70:ee:4a:f2:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053
Validity
Not Before: Jan 25 09:33:07 2026 GMT
Not After : Jan 26 10:06:07 2026 GMT
Subject: CN=31DC5C56342486846FA841182C64F9A44CAC983B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:dc:d2:18:4b:31:21:a8:90:4d:81:4c:0a:
9b:de:ad:4a:59:28:85:e9:57:12:2b:83:72:69:17:
67:e5:ab:54:bd:d2:d0:bf:79:19:f1:44:d5:7c:9c:
ad:99:8e:61:b3:1d:1b:d3:11:21:b2:c2:af:72:63:
86:3b:94:ac:ac:05:df:f3:c8:fa:df:d7:93:b6:c4:
15:e5:de:8d:d1:d0:9b:f1:2e:e0:0a:e1:a9:09:a6:
30:39:da:52:46:4d:6b:df:c6:ee:7c:62:06:8c:c8:
49:e2:75:7b:ea:6d:f7:eb:f2:4e:ac:84:61:37:85:
ab:b4:65:a0:bb:f7:7d:6a:f4:71:29:3b:a1:6d:cc:
73:b6:35:e0:c9:3c:fa:2c:a0:d5:84:b3:ab:94:af:
ea:ff:39:91:84:ef:ad:d5:97:da:10:04:b7:c0:83:
69:ac:ac:da:a2:b5:98:3d:d5:9c:b9:0a:73:f0:7d:
ce:d1:48:28:56:83:8c:c1:bb:ba:bc:42:b3:fa:fd:
38:8a:0d:be:3b:6f:30:a5:cc:c8:94:1e:df:02:9c:
9d:ad:cf:f6:4f:40:a8:d6:94:25:19:25:46:70:42:
60:b2:ff:d1:df:b0:0a:05:36:28:e3:ec:f0:48:38:
43:38:80:92:1c:3b:77:28:ab:f7:be:e3:84:45:d7:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:5C:56:34:24:86:84:6F:A8:41:18:2C:64:F9:A4:4C:AC:98:3B
X509v3 Authority Key Identifier:
keyid:D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:90:d4:4e:bb:cf:7f:62:a1:a8:a0:0d:a1:7e:ad:01:72:72:
c5:56:94:bc:ed:d0:5b:df:fa:46:09:28:95:7e:34:57:66:73:
cd:5f:26:56:c5:e5:f4:2c:57:db:9f:6c:29:c9:d9:20:16:f6:
9c:65:56:8b:74:b2:75:89:02:fc:03:9a:ad:a7:92:e9:3e:25:
75:40:17:80:e6:91:2c:01:53:8f:06:9a:31:26:24:70:3a:84:
dd:14:37:68:f0:80:01:b2:da:4c:67:9b:7e:e1:97:f9:4d:75:
7b:4a:33:a6:d9:83:cf:9b:b4:6e:b1:7f:9a:96:b1:9f:21:4d:
c4:23:46:4f:f2:45:49:53:05:c8:85:6e:ff:d9:05:bd:3d:50:
42:62:ce:75:4a:6a:92:d9:a2:10:b7:df:28:de:3e:0b:bc:ce:
97:e5:10:b1:d4:7a:3b:91:9b:6e:ac:e8:e9:a5:a1:94:80:8f:
78:06:ae:54:99:c7:c2:02:f5:9e:af:c5:5a:b7:dc:6d:43:83:
64:4a:7e:14:37:86:80:84:f0:3c:8c:66:16:be:73:d2:d5:80:
ed:e3:b9:0a:63:1a:bc:a2:99:70:ad:7a:e2:2e:bb:2a:b4:ed:
bc:88:5e:78:95:78:ab:b2:dc:bd:b7:53:da:31:49:5a:a3:96:
f7:a5:9e:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSIMUWhC6FwNMH7K1HHRw7kryxakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk0NTFDREM4NkMwQTNGQjEyQ0VFQTBFQzdGNEIxRDM4
MjI3MDA1MzAeFw0yNjAxMjUwOTMzMDdaFw0yNjAxMjYxMDA2MDdaMDMxMTAvBgNV
BAMTKDMxREM1QzU2MzQyNDg2ODQ2RkE4NDExODJDNjRGOUE0NENBQzk4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs99zSGEsxIaiQTYFMCpverUpZ
KIXpVxIrg3JpF2flq1S90tC/eRnxRNV8nK2ZjmGzHRvTESGywq9yY4Y7lKysBd/z
yPrf15O2xBXl3o3R0JvxLuAK4akJpjA52lJGTWvfxu58YgaMyEnidXvqbffr8k6s
hGE3hau0ZaC7931q9HEpO6FtzHO2NeDJPPosoNWEs6uUr+r/OZGE763Vl9oQBLfA
g2msrNqitZg91Zy5CnPwfc7RSChWg4zBu7q8QrP6/TiKDb47bzClzMiUHt8CnJ2t
z/ZPQKjWlCUZJUZwQmCy/9HfsAoFNijj7PBIOEM4gJIcO3coq/e+44RF181PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMdxcVjQkhoRvqEEYLGT5pEysmDswHwYDVR0j
BBgwFoAU2UUc3IbAo/sSzuoOx/Sx04InAFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVOZ2RLVnhIb0RkS3VpNXExRVBKdFNoQTZCZVh1VnlVM25MdUpCcEJG
ZVYvMC9EOTQ1MUNEQzg2QzBBM0ZCMTJDRUVBMEVDN0Y0QjFEMzgyMjcwMDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NDUxQ0RDODZDMEEzRkIx
MkNFRUEwRUM3RjRCMUQzODIyNzAwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUVOZ2RLVnhIb0RkS3VpNXExRVBKdFNoQTZCZVh1VnlVM25MdUpCcEJGZVYvMC9E
OTQ1MUNEQzg2QzBBM0ZCMTJDRUVBMEVDN0Y0QjFEMzgyMjcwMDUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABpDUTrvPf2KhqKANoX6tAXJyxVaUvO3QW9/6RgkolX40V2ZzzV8mVsXl9CxX
259sKcnZIBb2nGVWi3SydYkC/AOaraeS6T4ldUAXgOaRLAFTjwaaMSYkcDqE3RQ3
aPCAAbLaTGebfuGX+U11e0ozptmDz5u0brF/mpaxnyFNxCNGT/JFSVMFyIVu/9kF
vT1QQmLOdUpqktmiELffKN4+C7zOl+UQsdR6O5Gbbqzo6aWhlICPeAauVJnHwgL1
nq/FWrfcbUODZEp+FDeGgITwPIxmFr5z0tWA7eO5CmMavKKZcK164i67KrTtvIhe
eJV4q7LcvbdT2jFJWqOW96We3g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:59:55 2026 by rpki-client