This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
File: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft (raw, json)
Hash identifier: e8GfqDW/Cw8r7b64lzziy3aLn576zbK15ZkCs2z4gts=
Subject key identifier: 58:76:A4:80:72:EB:01:30:B8:2B:A0:3F:E1:B5:D8:7B:D2:9B:F5:AE
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Certificate issuer: /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial: 496621BF75D625ED9765E9EEA6A90A92795C60D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
Manifest number: 0371
Signing time: Sat 24 Jan 2026 22:51:13 +0000
Manifest this update: Sat 24 Jan 2026 22:46:13 +0000
Manifest next update: Mon 26 Jan 2026 01:55:13 +0000
Files and hashes: 1: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl (hash: GOc0Aum8XFdRalK2smuNY0aAd+eJ6QukjviFQHwwp4s=)
2: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: LpLs+i3g/uLpn4OYQy4EM5R0tGf85XQBkDf3K9t6dhk=)
3: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: nZ1gopaqkmRR4chzafMFQB8Y4M4MiBNQU4L++aKleIU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 01:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:66:21:bf:75:d6:25:ed:97:65:e9:ee:a6:a9:0a:92:79:5c:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Validity
Not Before: Jan 24 22:46:13 2026 GMT
Not After : Jan 26 01:55:13 2026 GMT
Subject: CN=5876A48072EB0130B82BA03FE1B5D87BD29BF5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:c8:c2:ad:96:5a:6b:d8:4c:72:0e:84:a7:
9e:2f:d0:0d:82:43:fa:d5:6c:ad:5a:00:d0:01:64:
13:28:2c:b9:7d:c7:d0:c4:2a:87:03:f6:0b:60:5c:
9f:52:9a:94:e2:cf:8b:a4:2c:1c:bf:26:bc:45:99:
8e:d4:b3:28:6e:d1:cf:fc:8d:72:b4:07:f6:cf:d3:
cc:a1:53:2c:05:f1:9e:42:9f:02:0a:f4:8d:09:ac:
67:15:52:cd:bc:ee:78:0b:4a:4b:0f:55:66:10:c6:
e3:d2:b8:e6:bd:7b:a4:6e:d2:c6:42:a2:68:21:ab:
a2:b5:fc:db:32:be:57:56:b6:eb:1b:dd:ee:3a:bc:
50:b6:69:de:31:14:99:ee:a0:b9:1d:35:94:9a:78:
0f:8b:0c:02:2c:a7:e9:96:b3:44:de:d9:d8:6b:27:
f9:85:b5:8d:93:ff:6a:e5:6b:1a:8b:23:4c:61:29:
1b:ef:4c:f0:03:3d:53:c6:0b:18:33:af:5e:e5:63:
c5:a1:4c:69:c3:ff:81:78:2b:dd:fe:89:39:51:01:
68:bf:65:d8:92:88:1d:02:99:e7:ce:e1:63:b8:73:
1f:68:32:88:4b:0d:f5:43:c2:ac:e5:af:cf:c1:ea:
b8:61:ac:c2:37:03:a3:01:a0:f6:ec:2a:b6:6a:20:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:A4:80:72:EB:01:30:B8:2B:A0:3F:E1:B5:D8:7B:D2:9B:F5:AE
X509v3 Authority Key Identifier:
keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:0b:1e:f7:fc:01:72:af:fe:35:ab:e8:dc:7a:36:43:b0:
f7:bd:d7:bf:0a:6b:87:4d:11:da:95:3b:4d:b6:77:1f:33:a5:
8b:e7:c6:5e:b8:81:57:95:c2:94:ee:f8:ac:d4:bb:a6:6a:8c:
ec:5b:b0:87:a3:df:ed:64:32:c9:a8:97:30:ed:73:93:18:36:
1d:7b:6e:bf:41:7f:c4:dd:28:79:ab:84:e0:38:69:c2:56:01:
35:86:57:cd:15:3f:24:14:fc:14:c6:22:c4:7f:ea:c9:cb:0d:
c8:cd:fd:b5:6f:20:2e:d0:1b:86:b5:5c:ed:e0:fb:32:9c:4e:
b7:2c:d3:11:23:56:0d:d0:47:ab:e0:30:4b:e4:b3:b7:f1:c6:
f0:71:35:85:5d:6b:d8:c8:c7:8b:22:c2:61:dc:39:94:3c:3f:
18:7d:57:3c:be:1f:e5:04:c3:ac:51:56:bb:3b:6a:af:26:b5:
4a:6e:6d:c7:00:db:f1:5b:27:e1:a4:41:1e:d1:3e:ad:4d:f9:
3c:b7:9c:68:96:3a:dc:82:ac:cf:57:7e:bc:94:a7:b1:b1:32:
d9:a8:2c:d7:f6:fd:74:5d:55:e4:d4:0e:1d:bf:c6:34:03:f5:
4e:d8:1d:84:8f:92:8b:fd:9d:a6:9b:df:a0:c5:7b:3c:45:49:
2a:ff:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:41 2026 by rpki-client