This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
File: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft (raw, json)
Hash identifier: f+bn3J3C5GEiOGQquXCyuPl0S7tGu+mTZ8C+r3hUl8Q=
Subject key identifier: 11:9E:E0:FB:CE:F2:D7:ED:4D:C8:94:0E:63:3E:FC:58:08:B3:43:4F
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Certificate issuer: /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial: 36C8D3ED822987D193C784AA6003D43633DBD763
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
Manifest number: 0348
Signing time: Sun 25 Jan 2026 16:15:14 +0000
Manifest this update: Sun 25 Jan 2026 16:10:14 +0000
Manifest next update: Mon 26 Jan 2026 20:01:14 +0000
Files and hashes: 1: 323830343a336263383a3a2f33322d3438203d3e20323636313730.roa (hash: mmaNkLilF/EoRmlf2yN+2d1pUoBI37qNRTNeSqh4Clg=)
2: 34352e362e3137362e302f32322d3234203d3e20323636313730.roa (hash: u6Qidk+dRJmAVIClo38LWMEpvi2huJ9R7RSbffvo+sI=)
3: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl (hash: Sv/E9rO7pQhAWLXq5sIL7zaKDOaNBb0itRJ56O1UqbA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c8:d3:ed:82:29:87:d1:93:c7:84:aa:60:03:d4:36:33:db:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Validity
Not Before: Jan 25 16:10:14 2026 GMT
Not After : Jan 26 20:01:14 2026 GMT
Subject: CN=119EE0FBCEF2D7ED4DC8940E633EFC5808B3434F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:b9:2c:c6:a2:0a:1d:c2:a0:3e:3b:d2:67:
09:15:fd:51:04:46:70:fa:95:a3:fb:98:7e:11:4c:
d4:6b:21:63:71:09:ce:d8:88:1c:10:04:44:6d:64:
9e:de:3e:0d:90:be:ce:2d:28:d3:f4:f6:9d:08:16:
0d:3e:0e:8d:c0:0d:cf:23:06:5d:cb:84:08:a3:2a:
9f:19:20:b4:6a:99:b8:10:f6:b5:30:b0:35:f7:f1:
e3:2d:30:34:c7:17:80:bf:aa:52:fd:59:bf:e2:59:
ff:54:fb:fd:94:ef:f9:e2:61:7b:7d:36:53:76:5a:
22:29:33:a1:02:87:3d:f0:24:98:18:c8:97:c9:f3:
6d:42:95:75:e9:59:fd:15:c1:9b:71:88:38:36:6a:
b5:d9:d3:38:05:4f:18:39:85:d8:37:6f:a0:f5:ed:
9e:02:22:9c:39:52:a1:67:be:72:b0:d0:10:79:95:
cc:26:5f:4a:a0:9e:da:2e:87:b7:7b:7b:2c:75:ed:
32:c9:4e:56:57:6d:60:22:6b:cf:ed:b2:cc:39:81:
8d:30:77:69:24:fe:c8:2d:2c:8f:da:d6:81:6f:21:
0f:e5:b1:59:ae:b4:ce:dc:71:43:a2:11:a3:9f:19:
eb:00:13:e6:d7:7b:5a:24:fd:45:3d:8a:f1:75:b8:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:E0:FB:CE:F2:D7:ED:4D:C8:94:0E:63:3E:FC:58:08:B3:43:4F
X509v3 Authority Key Identifier:
keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:26:7e:20:c2:0b:31:04:b1:f9:14:ce:9c:df:b4:16:c9:18:
a7:32:62:fd:e4:cc:00:bc:a9:a7:13:4b:86:7b:eb:83:f7:13:
e6:57:91:91:90:05:f7:ad:3d:2a:ee:68:fd:a7:68:57:8a:91:
81:c5:58:c0:f2:39:b2:87:10:65:59:71:81:e0:d6:8e:47:ee:
5b:46:34:b8:29:c3:c6:78:83:32:b0:39:c0:1f:6f:81:90:bc:
46:c2:f9:1a:56:96:91:e1:2a:2f:59:58:05:86:43:b1:10:99:
d4:36:89:64:4d:3d:38:d2:98:73:5d:3a:b2:62:bc:2a:69:86:
d6:e7:0d:56:7a:5a:77:65:80:1a:7c:c8:ed:e2:8c:f1:a0:7a:
f3:7d:ef:d1:24:e9:6a:c5:7c:bf:8e:ed:e1:f7:58:24:04:5b:
ff:b3:d0:dc:f2:0b:a3:80:40:86:60:a3:86:35:bb:13:83:2c:
81:dd:29:d8:db:85:d9:8d:90:38:e2:2d:8a:d8:72:ec:46:70:
ef:6d:a5:86:8e:62:9e:dc:31:41:cd:a5:25:3b:1f:05:c0:0d:
4b:08:f1:c5:4a:49:6a:21:13:cf:ef:2f:65:00:f9:9b:78:f5:
ea:a0:a3:c3:57:9b:92:05:fb:a6:d3:b9:3c:1b:17:2e:c0:7c:
a4:e7:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:34:00 2026 by rpki-client