This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json)
Hash identifier: 55tFIQHQyRCQP7MeHM/Z4FUaOkJxxU5hirqQhraF1Ho=
Subject key identifier: 3B:F4:49:91:25:00:71:E3:F1:2E:F9:0F:DD:1D:33:44:5D:1B:55:8B
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial: 74FC3ACECB88C3262152FC2E7867FDCB4B42DB31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
Manifest number: 0138
Signing time: Sat 24 Jan 2026 23:02:29 +0000
Manifest this update: Sat 24 Jan 2026 22:57:29 +0000
Manifest next update: Mon 26 Jan 2026 02:44:29 +0000
Files and hashes: 1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=)
2: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=)
3: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: liD/cQi6ToKRYtBpcF47atMxV805DUNVgGCbjDjWc70=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 02:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fc:3a:ce:cb:88:c3:26:21:52:fc:2e:78:67:fd:cb:4b:42:db:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Validity
Not Before: Jan 24 22:57:29 2026 GMT
Not After : Jan 26 02:44:29 2026 GMT
Subject: CN=3BF44991250071E3F12EF90FDD1D33445D1B558B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:2e:25:eb:6b:49:6e:f7:21:d0:b3:8c:d2:
87:7f:66:78:94:1e:cf:d0:e6:3b:68:8b:4d:ca:17:
22:68:42:e5:c2:65:e4:c2:68:af:1e:77:0b:c6:97:
ca:d5:ba:50:bd:c8:f7:52:a9:48:b6:da:8c:cf:14:
df:4c:33:60:c4:d3:61:bb:a4:50:58:82:be:c7:e3:
b8:c3:be:7b:e9:02:3b:13:a1:4e:fd:7a:09:b5:02:
34:7c:19:27:2a:c5:b6:c6:d9:1d:dc:33:8b:2a:bf:
cc:1a:3b:cd:0f:ae:1a:01:08:8d:14:32:6f:eb:d5:
50:27:45:e4:19:f1:93:7b:bb:9c:1e:44:60:87:3a:
5b:71:0c:3b:18:75:6b:0a:53:ec:97:b9:32:b1:bd:
00:34:50:80:f4:95:5c:72:a4:5c:d1:9d:22:42:6d:
fb:f7:38:58:0d:ab:5f:50:0a:ba:e9:fc:55:97:9e:
73:e5:9c:39:d4:f8:19:b6:bf:7b:70:68:e2:42:97:
21:ed:8e:a6:f2:93:cf:b9:1d:d5:55:0a:c6:fc:23:
af:93:a9:09:a5:62:ff:58:9a:e4:6d:f1:52:ea:28:
22:6f:48:58:7d:ec:5d:de:05:66:81:51:09:b0:f3:
e2:68:4e:b9:fe:20:b9:08:87:13:c9:85:62:63:93:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:49:91:25:00:71:E3:F1:2E:F9:0F:DD:1D:33:44:5D:1B:55:8B
X509v3 Authority Key Identifier:
keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:89:59:01:f9:5d:df:6e:94:04:ca:db:6a:e6:f0:2f:90:2b:
17:2c:28:47:07:db:fc:0b:b1:a7:ba:18:ca:fd:cf:e3:45:7f:
65:69:5f:03:53:4a:52:36:17:40:6a:fc:96:dc:4d:57:95:68:
97:3c:e6:03:ec:f2:2e:9d:cd:f0:29:2d:3e:24:18:b8:4e:f5:
72:70:3c:cd:80:7a:6e:22:0a:57:4d:8c:61:ce:83:11:27:f9:
40:3b:a7:5b:84:06:38:94:53:49:55:df:bd:e3:92:1c:b1:62:
a7:7b:e8:8f:f5:b0:8c:bb:71:1b:b2:dd:72:b7:86:7a:5a:e2:
67:78:23:7b:de:3c:e4:83:e8:56:25:fa:5c:d7:b1:87:0f:a1:
31:ea:02:a8:a4:13:85:df:cc:29:c7:a1:f1:ec:36:5b:f5:d7:
29:80:0c:0f:a2:4e:5d:54:62:dc:5c:42:f9:43:99:2d:d4:14:
66:be:9c:1e:7b:a0:b4:8f:09:82:fc:7d:62:6f:64:4b:6d:9f:
85:c5:05:1c:3c:e3:fe:dc:c2:f5:9d:05:78:6e:98:1e:92:34:
4d:4e:98:65:a2:6c:5c:3e:89:f4:27:b1:f5:9a:b5:8b:c4:87:
82:98:8c:b6:da:8a:6e:0d:f4:fe:ba:cc:29:43:3b:f4:65:a3:
a4:13:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:00 2026 by rpki-client