This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
File: 421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json)
Hash identifier: XCQhc6t6VkF3xRWFE9KAo8rJ2rBGVTwBKFcThRJ4Lbc=
Subject key identifier: 93:A9:23:E0:AB:DB:2D:DB:B8:2B:0A:F2:50:F7:6A:D9:1E:D0:DD:1F
Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
Certificate issuer: /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Certificate serial: 674201928B66476EAADEE9E025565418029BE99B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
Manifest number: 01A4
Signing time: Sun 25 Jan 2026 08:12:05 +0000
Manifest this update: Sun 25 Jan 2026 08:07:05 +0000
Manifest next update: Mon 26 Jan 2026 10:05:05 +0000
Files and hashes: 1: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: khKkGLKX+DYvbTQTlzxi8ftWpg8iX5/2mr8dOSyf8c8=)
2: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:42:01:92:8b:66:47:6e:aa:de:e9:e0:25:56:54:18:02:9b:e9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90
Validity
Not Before: Jan 25 08:07:05 2026 GMT
Not After : Jan 26 10:05:05 2026 GMT
Subject: CN=93A923E0ABDB2DDBB82B0AF250F76AD91ED0DD1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:f4:76:a0:32:61:18:78:f9:2f:85:8f:09:
ef:0d:c0:7b:66:23:96:2f:a5:16:c2:1a:13:29:b1:
7e:ce:99:f2:5e:85:98:e4:ee:40:d7:a5:5f:45:0b:
55:e7:9e:a3:ca:4a:49:3d:4b:91:82:9d:b1:c0:d5:
b4:1a:67:7e:3d:29:cd:93:2c:35:bc:c0:7f:2f:b5:
d1:e1:3f:2d:ec:db:7e:66:80:d2:34:bb:9a:e2:9e:
ab:0d:a2:45:83:3a:e9:61:25:97:56:eb:81:ef:09:
df:d3:4d:c0:7c:64:a9:1d:1e:ed:bd:1b:e1:f1:b3:
d1:db:a7:ec:aa:90:00:3f:4d:ce:58:5f:6a:e4:93:
79:64:f8:fb:74:ae:63:6e:d4:7b:ea:2d:0c:38:b6:
ac:b3:f3:e0:fc:97:7c:c1:d1:4f:63:25:67:f1:5a:
ed:db:d8:ac:fc:a3:f3:c5:31:53:8c:16:5e:b3:d6:
ae:02:ef:69:e4:58:cc:db:35:01:4f:50:58:04:af:
63:ab:23:f7:30:48:6f:06:a9:f7:92:5a:c8:78:99:
fe:ce:e7:fd:27:d7:b5:2b:ec:2c:c8:d8:45:8f:ca:
7d:f0:90:97:99:61:7a:d4:85:b2:2b:8f:0a:a2:50:
cc:ef:19:4c:31:3a:0d:7c:31:c0:4d:c8:a2:94:ba:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:23:E0:AB:DB:2D:DB:B8:2B:0A:F2:50:F7:6A:D9:1E:D0:DD:1F
X509v3 Authority Key Identifier:
keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:aa:1a:36:e4:46:33:6c:05:46:3a:1d:d1:da:fe:e6:7d:17:
bc:9b:8b:71:5e:0d:f4:45:65:e5:08:cc:2e:59:62:c2:a0:92:
f0:42:e1:8b:f6:aa:ef:cb:bf:48:9a:ef:3e:21:c3:c8:83:21:
a9:78:e9:92:29:fd:89:fc:b9:36:10:a1:b6:12:87:e2:e3:4f:
0e:ea:e9:70:05:b9:93:db:14:09:29:a7:67:95:0c:a9:a0:30:
a4:00:b0:c9:40:69:75:87:fd:5c:77:be:60:53:fc:f9:89:dc:
3a:76:1f:6a:b2:47:9f:f2:94:07:3b:7b:bc:bc:cc:65:53:52:
a1:21:bf:63:7a:54:36:b2:f5:ba:08:76:de:23:5b:40:da:c2:
f8:2a:d1:ec:1b:e6:57:36:84:ca:0e:9d:db:54:44:df:3e:3f:
7a:fd:cd:66:82:95:87:78:e9:82:ed:4d:a5:d0:fc:c5:78:83:
fa:eb:15:b9:8d:a9:43:dd:a6:e8:8f:57:0f:fd:79:3d:38:cd:
42:ed:7e:de:e8:1e:d8:a9:b6:f8:2e:c7:41:35:b8:69:94:95:
d5:39:38:c3:ce:e1:af:ef:19:8f:88:ee:b2:a3:47:b0:3e:b3:
31:4d:77:0f:97:89:12:4c:d8:03:8e:04:a4:e8:38:52:8c:6a:
68:55:fc:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ0IBkotmR26q3ungJVZUGAKb6ZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNTA5RUUwQjMzM0ZGN0Q1NzZCRjQ3OUVEMDE1NUJB
REZCMkE5MDAeFw0yNjAxMjUwODA3MDVaFw0yNjAxMjYxMDA1MDVaMDMxMTAvBgNV
BAMTKDkzQTkyM0UwQUJEQjJEREJCODJCMEFGMjUwRjc2QUQ5MUVEMEREMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuPR2oDJhGHj5L4WPCe8NwHtm
I5YvpRbCGhMpsX7OmfJehZjk7kDXpV9FC1XnnqPKSkk9S5GCnbHA1bQaZ349Kc2T
LDW8wH8vtdHhPy3s235mgNI0u5rinqsNokWDOulhJZdW64HvCd/TTcB8ZKkdHu29
G+Hxs9Hbp+yqkAA/Tc5YX2rkk3lk+Pt0rmNu1HvqLQw4tqyz8+D8l3zB0U9jJWfx
Wu3b2Kz8o/PFMVOMFl6z1q4C72nkWMzbNQFPUFgEr2OrI/cwSG8GqfeSWsh4mf7O
5/0n17Ur7CzI2EWPyn3wkJeZYXrUhbIrjwqiUMzvGUwxOg18McBNyKKUugIbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk6kj4KvbLdu4KwryUPdq2R7Q3R8wHwYDVR0j
BBgwFoAUQhUJ7gszP/fVdr9HntAVW637KpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxL
NVovMC80MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMTUwOUVFMEIzMzNGRjdE
NTc2QkY0NzlFRDAxNTVCQURGQjJBOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxLNVovMC80
MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzKoaNuRGM2wFRjod0dr+5n0XvJuLcV4N9EVl5QjMLlliwqCS8ELhi/aq78u/
SJrvPiHDyIMhqXjpkin9ify5NhChthKH4uNPDurpcAW5k9sUCSmnZ5UMqaAwpACw
yUBpdYf9XHe+YFP8+YncOnYfarJHn/KUBzt7vLzMZVNSoSG/Y3pUNrL1ugh23iNb
QNrC+CrR7BvmVzaEyg6d21RE3z4/ev3NZoKVh3jpgu1NpdD8xXiD+usVuY2pQ92m
6I9XD/15PTjNQu1+3uge2Km2+C7HQTW4aZSV1Tk4w87hr+8Zj4jusqNHsD6zMU13
D5eJEkzYA44EpOg4UoxqaFX88A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:00 2026 by rpki-client