This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json)
Hash identifier: EBpgULHs6VSaTIZLcsR+fdYbWgVPExofikJCNpy8NIA=
Subject key identifier: AD:5A:45:99:1C:F6:B8:4A:21:06:4B:07:8F:DF:37:4C:49:49:79:F4
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial: 0B88CC9B8791A7EA66AC57D6BE9F4B6BB8E44B6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
Manifest number: 0376
Signing time: Sun 25 Jan 2026 11:25:06 +0000
Manifest this update: Sun 25 Jan 2026 11:20:06 +0000
Manifest next update: Mon 26 Jan 2026 14:22:06 +0000
Files and hashes: 1: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: Yqv/V9KI5GlU2TZbY30gQJT7++CXbKITYOKWMYRDbTk=)
2: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=)
3: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=)
4: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 14:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:88:cc:9b:87:91:a7:ea:66:ac:57:d6:be:9f:4b:6b:b8:e4:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Validity
Not Before: Jan 25 11:20:06 2026 GMT
Not After : Jan 26 14:22:06 2026 GMT
Subject: CN=AD5A45991CF6B84A21064B078FDF374C494979F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:0b:f0:dd:25:16:83:0e:ea:ae:cd:27:d6:
5d:4a:74:48:3b:ba:53:67:1a:83:d2:c5:a9:f0:ab:
1a:33:5c:0e:a2:a0:af:90:29:0c:73:d5:99:e0:b4:
13:c7:f8:1e:60:ed:24:3c:df:dd:39:57:29:8a:d0:
a8:90:da:d9:14:a0:cc:74:4c:d3:bd:83:3c:1c:19:
ff:5f:3e:02:16:57:b5:86:4f:8c:6d:7e:1b:80:1a:
13:d1:4f:da:67:35:06:4f:74:a0:4d:61:94:bb:4a:
49:75:46:dc:b8:8b:df:83:2d:41:96:91:94:9e:96:
01:7b:75:33:cf:ee:03:67:80:83:c7:ae:8a:ec:f9:
a8:05:b9:4b:54:08:dc:eb:fd:8f:4d:bc:0b:a9:4c:
f0:33:87:ba:f5:b7:e8:8b:a3:b5:0d:6c:f0:7b:9a:
2e:22:58:3e:f8:08:4d:8d:fe:7c:68:4f:db:53:1a:
4d:05:16:2e:79:43:1f:b4:fd:6c:7b:6d:7c:c8:f4:
bb:9c:49:20:26:5e:9c:fb:ab:cc:91:78:f3:95:22:
20:ca:00:80:f9:0a:02:bc:04:05:0b:31:26:24:97:
07:9e:df:e0:95:d1:5e:a7:fd:1c:ab:c8:18:87:b0:
43:55:82:a4:4d:aa:d7:d3:b4:03:c5:ed:a6:64:f2:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:45:99:1C:F6:B8:4A:21:06:4B:07:8F:DF:37:4C:49:49:79:F4
X509v3 Authority Key Identifier:
keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7c:1a:42:1c:0e:0f:68:24:77:91:9a:99:76:20:0e:93:ad:
82:a1:b7:1f:0e:fe:b0:8d:7e:3e:36:d1:56:8a:74:0d:27:c3:
b5:77:2b:23:fc:4f:f3:ad:59:49:90:33:16:f0:f1:2f:91:71:
c2:e2:cd:a6:cc:a0:69:db:36:5f:b8:57:49:bc:1a:14:18:5d:
f0:0c:5c:35:d1:c9:b0:74:1b:21:21:3c:bc:77:94:19:d3:70:
e0:34:6e:86:19:1f:ab:71:1d:0a:d0:c6:b9:b9:6d:4f:de:c9:
54:4f:87:a0:36:93:d8:3c:6a:9b:4a:83:82:df:fd:5b:2a:32:
6e:c6:d5:aa:cf:cc:ad:d4:e9:56:34:c9:2f:b0:43:47:74:4c:
2b:e5:f1:42:20:68:0e:21:cc:19:84:96:1a:f5:d2:8e:75:2e:
76:d8:e6:35:21:90:9e:08:61:10:e4:24:a0:bf:df:69:21:d6:
8d:2e:ee:04:0c:64:fa:70:cd:e6:a3:1a:4d:9d:f4:8b:e7:19:
c1:67:db:66:42:38:c1:98:7b:3d:4d:44:f4:f4:ec:0d:1d:ea:
f3:fc:e7:16:c4:e9:58:a9:49:68:5f:97:7b:47:b8:5e:d5:41:
9e:96:db:46:f2:24:d6:87:79:ad:b0:ad:6b:ec:11:bf:d0:72:
8f:81:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:54 2026 by rpki-client