This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
File: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json)
Hash identifier: NYBUbpiezTM90nVzj2dHz+9QRWZy68aimWEB/9UKqc8=
Subject key identifier: 6F:C6:AD:F7:7D:DB:B9:6D:1D:A8:83:ED:9D:CB:4C:C1:5E:EA:45:BD
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Certificate issuer: /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial: 0771C5C8A0C5BE392BE1E4E8E023FB5DE05B0284
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
Manifest number: 01A0
Signing time: Sun 25 Jan 2026 11:28:08 +0000
Manifest this update: Sun 25 Jan 2026 11:23:08 +0000
Manifest next update: Mon 26 Jan 2026 13:40:08 +0000
Files and hashes: 1: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=)
2: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: EP/KrCwAidJNIQ5i8l3g5Zr40UhSHu/hDIZkHMf4iLM=)
3: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 13:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:71:c5:c8:a0:c5:be:39:2b:e1:e4:e8:e0:23:fb:5d:e0:5b:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Validity
Not Before: Jan 25 11:23:08 2026 GMT
Not After : Jan 26 13:40:08 2026 GMT
Subject: CN=6FC6ADF77DDBB96D1DA883ED9DCB4CC15EEA45BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:fa:66:06:1e:48:57:3a:6a:6b:15:9d:f3:
45:77:cd:87:85:a0:85:b1:b0:9a:c8:e1:8e:71:81:
10:41:1b:8c:95:7b:5b:d7:f8:33:29:47:01:16:4d:
c3:ca:90:c0:85:a5:27:a2:a8:8d:20:e0:9d:15:80:
34:59:15:f3:8a:3f:2d:f9:87:45:9d:73:5a:7a:49:
f1:03:61:b2:69:e8:42:4d:0f:c1:e9:01:5f:f7:c8:
d5:de:2b:08:b5:a6:f8:34:14:58:eb:28:54:99:97:
4b:9a:f5:45:6c:17:70:50:f6:dc:ad:c9:52:58:b3:
46:08:77:1a:f5:af:bb:74:80:d4:7b:c3:7c:d4:f1:
fa:68:98:a3:94:c5:49:64:41:b0:72:8b:a1:1d:fd:
8f:e7:22:e5:0f:df:a1:09:f5:4d:43:ad:65:c4:62:
90:ca:93:6f:e5:2f:e6:09:36:75:1a:f8:06:5a:93:
b5:a3:2b:2f:08:6d:10:60:a1:57:03:10:a2:8d:cc:
c3:e9:0e:7c:22:2b:77:5f:65:8a:60:68:65:92:da:
e6:62:6c:c4:15:e6:be:2e:ff:ea:23:2f:de:47:e3:
3f:5d:32:82:05:d6:14:cc:59:6c:5e:0f:39:84:f3:
cb:36:d1:1b:c4:90:42:3f:1b:3e:e7:39:30:8d:d1:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:AD:F7:7D:DB:B9:6D:1D:A8:83:ED:9D:CB:4C:C1:5E:EA:45:BD
X509v3 Authority Key Identifier:
keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4c:39:9d:46:72:b0:f1:e8:9b:05:7f:fc:56:ac:16:46:5d:
0c:8b:ac:c3:c3:55:dc:b7:73:41:e0:61:6c:7c:64:89:2d:0e:
5d:0b:d5:69:1d:67:5a:59:42:02:a1:9e:1e:28:7c:60:2d:72:
46:e3:fa:d5:03:2c:bd:67:56:74:a8:88:e6:de:d0:9e:94:5b:
62:b7:59:a7:09:1f:15:73:01:73:2b:50:74:f1:05:a5:f6:f6:
28:36:f7:e9:38:1d:ba:8c:32:b3:2a:63:68:9c:44:24:d5:61:
de:d4:e8:fe:bd:09:13:7b:fc:21:97:85:58:10:e4:48:28:00:
39:5e:fc:24:2c:04:82:b7:43:ca:b2:ac:21:44:32:88:d7:30:
84:c4:b6:09:11:94:6b:6d:b8:f0:67:08:4a:5c:27:86:3e:a2:
86:b4:bc:6b:cb:33:61:ec:7b:c8:af:91:a4:f3:4e:e9:e3:a5:
a2:c5:c5:f4:b6:5d:f7:a0:48:53:75:65:cb:eb:bc:13:f2:10:
4e:57:19:6d:6c:f5:13:90:0a:32:9a:15:d0:7a:1d:c5:e3:c1:
ff:06:bc:3b:11:0d:3b:50:38:a8:6d:82:a5:1a:f8:1e:ed:90:
ce:ad:b6:21:17:60:6a:8e:44:87:7c:32:70:ae:3b:47:0b:40:
30:e7:48:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB3HFyKDFvjkr4eTo4CP7XeBbAoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E1QTFGQkRGQkFDM0IwRTQ3MUQ4MDczQkE0NjM1RjE3
QjI2NjA0ODAeFw0yNjAxMjUxMTIzMDhaFw0yNjAxMjYxMzQwMDhaMDMxMTAvBgNV
BAMTKDZGQzZBREY3N0REQkI5NkQxREE4ODNFRDlEQ0I0Q0MxNUVFQTQ1QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F/pmBh5IVzpqaxWd80V3zYeF
oIWxsJrI4Y5xgRBBG4yVe1vX+DMpRwEWTcPKkMCFpSeiqI0g4J0VgDRZFfOKPy35
h0Wdc1p6SfEDYbJp6EJND8HpAV/3yNXeKwi1pvg0FFjrKFSZl0ua9UVsF3BQ9tyt
yVJYs0YIdxr1r7t0gNR7w3zU8fpomKOUxUlkQbByi6Ed/Y/nIuUP36EJ9U1DrWXE
YpDKk2/lL+YJNnUa+AZak7WjKy8IbRBgoVcDEKKNzMPpDnwiK3dfZYpgaGWS2uZi
bMQV5r4u/+ojL95H4z9dMoIF1hTMWWxeDzmE88s20RvEkEI/Gz7nOTCN0ZhVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUb8at933buW0dqIPtnctMwV7qRb0wHwYDVR0j
BBgwFoAUOlofvfusOw5HHYBzukY18XsmYEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5
aWsvMC8zQTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNUExRkJERkJBQzNCMEU0
NzFEODA3M0JBNDYzNUYxN0IyNjYwNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5aWsvMC8z
QTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACUw5nUZysPHomwV//FasFkZdDIusw8NV3LdzQeBhbHxkiS0OXQvVaR1nWllC
AqGeHih8YC1yRuP61QMsvWdWdKiI5t7QnpRbYrdZpwkfFXMBcytQdPEFpfb2KDb3
6TgduowysypjaJxEJNVh3tTo/r0JE3v8IZeFWBDkSCgAOV78JCwEgrdDyrKsIUQy
iNcwhMS2CRGUa2248GcISlwnhj6ihrS8a8szYex7yK+RpPNO6eOlosXF9LZd96BI
U3Vly+u8E/IQTlcZbWz1E5AKMpoV0HodxePB/wa8OxENO1A4qG2CpRr4Hu2Qzq22
IRdgao5Eh3wycK47RwtAMOdImw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:14:15 2026 by rpki-client