This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
File: C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft (raw, json)
Hash identifier: /sL3TK8lmCMsYvdVlzQiXQPbgzkcH9JQPEDkYaGtOGA=
Subject key identifier: D2:80:D4:1D:07:22:33:2B:7F:6B:85:DF:CE:2E:07:AF:0F:63:24:F5
Authority key identifier: C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD
Certificate issuer: /CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
Certificate serial: 09C3A75D9403D102D9495171FA15C799D2F94952
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
Manifest number: D2
Signing time: Sun 25 Jan 2026 12:33:37 +0000
Manifest this update: Sun 25 Jan 2026 12:28:37 +0000
Manifest next update: Mon 26 Jan 2026 13:52:37 +0000
Files and hashes: 1: 3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa (hash: KKYm/55pCGpbLWeQwnRn/GBwiJl0ocNiQJGRsO01YUg=)
2: 323830343a366331303a3a2f33322d313238203d3e20323730343433.roa (hash: LPPl3TiuccnQnw15BF2O5c80XCo9bntztuQLh81UT94=)
3: C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl (hash: u3HuH/n22lqmZbC2itIrL2kw/ejYGVCY91cK7gXu5VU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl
rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 13:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c3:a7:5d:94:03:d1:02:d9:49:51:71:fa:15:c7:99:d2:f9:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
Validity
Not Before: Jan 25 12:28:37 2026 GMT
Not After : Jan 26 13:52:37 2026 GMT
Subject: CN=D280D41D0722332B7F6B85DFCE2E07AF0F6324F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:f1:1b:ff:5b:05:32:56:f6:d9:97:a4:2e:
db:75:30:1a:70:c1:a3:6f:1f:d2:16:1c:02:7a:f8:
9b:46:44:6a:0c:fe:64:bc:47:ba:24:51:24:74:b0:
a0:b5:1e:e9:d5:0b:6e:a7:16:bc:20:95:d8:0b:06:
30:40:ac:e6:ac:83:0b:75:56:1d:17:dd:36:32:43:
fb:06:9c:ec:39:bc:2c:36:eb:3b:39:b5:f9:99:7c:
d2:36:59:8c:59:4c:46:60:fb:19:fa:63:05:74:40:
2a:56:de:d6:a8:89:23:e5:1a:29:ef:01:c7:5f:57:
a2:8c:0c:36:4d:e1:bc:79:a3:4a:d4:79:53:db:8b:
02:e9:69:58:e8:c8:2e:d4:85:c8:02:bb:06:c4:2c:
67:f9:34:f5:5b:fe:9d:c5:fb:bf:b0:22:36:d6:46:
61:83:eb:ff:37:39:a1:61:23:6d:d6:bf:7f:b3:b5:
66:b0:93:0e:59:6d:cb:10:da:4a:46:7f:b0:35:fb:
27:03:3d:bf:41:1d:83:60:ad:eb:c9:cf:a2:a4:8e:
d7:7e:68:8b:e6:03:ce:9a:a4:3b:1e:25:a6:22:4c:
00:ef:f7:8e:db:34:64:97:41:3d:85:b0:e3:81:57:
37:1f:be:9a:d8:46:dd:0c:c4:3d:b6:84:ca:81:83:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:D4:1D:07:22:33:2B:7F:6B:85:DF:CE:2E:07:AF:0F:63:24:F5
X509v3 Authority Key Identifier:
keyid:C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:47:78:db:eb:ab:e2:a6:03:28:db:ee:f9:d8:ff:20:f2:
44:02:2a:75:ae:f8:b3:6b:01:ef:3c:52:dd:91:18:d6:0f:b4:
6f:bd:fb:14:36:af:99:84:5e:0f:99:7a:16:03:9a:46:69:1e:
32:b0:52:fa:59:84:c7:7f:51:65:0e:1b:89:50:09:9e:00:b1:
b8:89:82:e9:bd:09:f1:2c:b2:06:a0:77:42:7f:99:4d:0a:56:
1f:9e:20:11:6a:96:b4:7f:fc:61:15:a9:f9:af:7d:57:20:8c:
a0:d3:06:2d:8e:f3:2f:b4:75:1a:d6:f4:15:60:95:e1:b5:dc:
c4:21:b3:1f:22:fb:dc:31:17:8d:d3:e4:29:e6:5f:50:a1:9d:
61:69:95:2a:5b:be:7c:28:9e:95:2c:13:4d:b3:2d:f3:fe:2a:
f2:9c:64:f1:a0:9a:4d:e5:54:25:97:a9:9a:0d:e1:ec:b2:6f:
43:da:2a:e4:7d:6e:ad:31:b6:cf:39:a2:36:d1:8e:18:17:c6:
e8:93:ad:9d:32:22:99:64:9a:1d:87:bb:24:4a:e8:27:e6:c3:
de:d5:0d:63:31:dc:c7:ff:95:9a:c8:12:de:be:b0:e5:40:73:
cc:d4:29:34:e7:92:6c:9e:c0:3a:52:f6:cd:32:20:16:9e:5c:
ef:d1:2c:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCcOnXZQD0QLZSVFx+hXHmdL5SVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVFM0Q2QzBBMDJBMEVFM0JEMDcwMkQ0MTM4MjlCQzE0
ODdBNDVBRDAeFw0yNjAxMjUxMjI4MzdaFw0yNjAxMjYxMzUyMzdaMDMxMTAvBgNV
BAMTKEQyODBENDFEMDcyMjMzMkI3RjZCODVERkNFMkUwN0FGMEY2MzI0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hPEb/1sFMlb22ZekLtt1MBpw
waNvH9IWHAJ6+JtGRGoM/mS8R7okUSR0sKC1HunVC26nFrwgldgLBjBArOasgwt1
Vh0X3TYyQ/sGnOw5vCw26zs5tfmZfNI2WYxZTEZg+xn6YwV0QCpW3taoiSPlGinv
AcdfV6KMDDZN4bx5o0rUeVPbiwLpaVjoyC7UhcgCuwbELGf5NPVb/p3F+7+wIjbW
RmGD6/83OaFhI23Wv3+ztWawkw5ZbcsQ2kpGf7A1+ycDPb9BHYNgrevJz6Kkjtd+
aIvmA86apDseJaYiTADv947bNGSXQT2FsOOBVzcfvprYRt0MxD22hMqBg1iFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0oDUHQciMyt/a4Xfzi4Hrw9jJPUwHwYDVR0j
BBgwFoAUxePWwKAqDuO9BwLUE4KbwUh6Ra0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1
aTYvMC9DNUUzRDZDMEEwMkEwRUUzQkQwNzAyRDQxMzgyOUJDMTQ4N0E0NUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1RTNENkMwQTAyQTBFRTNC
RDA3MDJENDEzODI5QkMxNDg3QTQ1QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1aTYvMC9D
NUUzRDZDMEEwMkEwRUUzQkQwNzAyRDQxMzgyOUJDMTQ4N0E0NUFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAInhHeNvrq+KmAyjb7vnY/yDyRAIqda74s2sB7zxS3ZEY1g+0b737FDavmYRe
D5l6FgOaRmkeMrBS+lmEx39RZQ4biVAJngCxuImC6b0J8SyyBqB3Qn+ZTQpWH54g
EWqWtH/8YRWp+a99VyCMoNMGLY7zL7R1Gtb0FWCV4bXcxCGzHyL73DEXjdPkKeZf
UKGdYWmVKlu+fCielSwTTbMt8/4q8pxk8aCaTeVUJZepmg3h7LJvQ9oq5H1urTG2
zzmiNtGOGBfG6JOtnTIimWSaHYe7JEroJ+bD3tUNYzHcx/+VmsgS3r6w5UBzzNQp
NOeSbJ7AOlL2zTIgFp5c79Es+A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:50 2026 by rpki-client