This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
File: BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft (raw, json)
Hash identifier: 9cX8w5rgtlB315z5xD0gOPVueYq3uUct+fBLoduVmiM=
Subject key identifier: B1:4B:19:83:EB:54:25:42:45:31:2C:4F:CF:41:1E:4A:D3:BC:75:B8
Authority key identifier: BD:11:E0:8A:DC:67:69:95:5F:3D:67:39:11:82:42:DE:BF:A4:8D:A7
Certificate issuer: /CN=BD11E08ADC6769955F3D6739118242DEBFA48DA7
Certificate serial: 1978BD204A8DB44A3D47CE6EF0B34BB6561AD333
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
Manifest number: 1B
Signing time: Mon 26 Jan 2026 00:40:07 +0000
Manifest this update: Mon 26 Jan 2026 00:35:07 +0000
Manifest next update: Tue 27 Jan 2026 03:56:07 +0000
Files and hashes: 1: BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl (hash: qQV1bXv/BpboEiUrnMhGK+gJOub5kgI1OpI7Bp2cE0c=)
2: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: 1OnUECnkyQmog7XazHCHWrwvBR0ZMrSzL9SvhnkwK3k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl
rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Jan 2026 03:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:78:bd:20:4a:8d:b4:4a:3d:47:ce:6e:f0:b3:4b:b6:56:1a:d3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD11E08ADC6769955F3D6739118242DEBFA48DA7
Validity
Not Before: Jan 26 00:35:07 2026 GMT
Not After : Jan 27 03:56:07 2026 GMT
Subject: CN=B14B1983EB54254245312C4FCF411E4AD3BC75B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:af:31:44:93:09:39:0a:01:41:33:45:52:
99:73:6d:08:86:9e:5d:14:40:04:05:bd:c0:35:7d:
24:2b:16:dc:bb:a6:eb:95:4b:74:ea:0f:08:8b:b2:
df:3f:13:72:02:54:61:1e:61:bd:46:3d:dd:18:9b:
ff:7e:f0:e7:8a:f5:80:46:ba:9c:30:1b:2e:14:a9:
13:6a:f5:9d:89:6e:db:09:5a:85:3a:0f:01:fc:7a:
5a:93:95:4c:bf:81:4a:65:dc:ea:7d:e8:b5:ff:13:
31:81:59:d1:a4:f8:ec:9f:f8:63:a7:be:0f:4a:e5:
5b:a7:23:15:59:6e:1a:4a:f4:42:af:46:de:0a:90:
69:f1:4d:9f:67:9a:52:42:2b:31:b6:1f:b6:68:36:
d9:d3:09:ca:3c:be:6c:6a:55:23:4b:53:45:c0:a1:
14:63:31:cc:f5:e0:18:ca:64:ae:03:f3:f1:04:62:
c9:81:91:19:d1:a1:b0:7f:cb:fa:54:77:da:50:e9:
9f:bb:f6:2e:5d:d1:b0:cb:d4:d8:28:43:6f:ba:a5:
39:c5:b5:cc:21:41:af:6d:f6:87:09:1c:7a:d2:4c:
fe:da:10:26:f2:0d:06:4a:97:e4:e5:b6:01:8e:5b:
83:1a:25:76:3d:53:08:7c:30:6a:6b:b5:c1:7d:6b:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:19:83:EB:54:25:42:45:31:2C:4F:CF:41:1E:4A:D3:BC:75:B8
X509v3 Authority Key Identifier:
keyid:BD:11:E0:8A:DC:67:69:95:5F:3D:67:39:11:82:42:DE:BF:A4:8D:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a8:0d:0c:57:ac:df:64:12:02:37:6c:ae:e7:ae:72:e4:71:
70:8c:f0:8e:30:49:9c:8a:b5:9d:2c:43:21:fe:a3:13:d9:12:
68:91:6a:3c:52:35:c4:4b:13:56:f4:75:ad:be:46:45:76:c1:
b9:6c:f6:59:f3:89:e1:5a:b5:3a:3c:d2:c2:43:12:84:d7:8c:
ca:d9:c8:5c:09:54:12:1f:a3:49:65:56:9e:1f:75:24:0e:94:
e7:35:b1:98:70:d1:36:ef:bb:f7:4d:a7:71:89:a3:2c:15:02:
fc:b2:42:7d:26:76:a2:27:53:57:a6:39:80:72:64:2d:b7:8f:
6f:8d:73:12:18:a3:f7:72:35:6e:b1:fc:fb:84:ec:76:98:de:
d4:d0:9a:8a:e4:ea:dd:ff:1c:e6:0c:8d:b4:58:53:d0:57:d3:
36:55:fc:19:3a:9c:ae:be:b8:55:6e:f1:1f:40:3a:65:6a:5e:
45:58:da:2d:4f:bf:51:c1:60:ac:93:02:5f:9e:4f:d3:9e:34:
dd:10:03:c8:e2:cb:0a:de:26:c5:0d:6b:72:ce:f0:24:ae:fb:
03:73:00:cb:0d:c0:88:47:8e:0c:c6:82:47:27:7b:c4:66:89:
8a:4d:6a:d3:7b:cc:87:6f:96:d8:9b:6a:33:e1:29:ed:7e:25:
32:05:23:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGXi9IEqNtEo9R85u8LNLtlYa0zMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxMUUwOEFEQzY3Njk5NTVGM0Q2NzM5MTE4MjQyREVC
RkE0OERBNzAeFw0yNjAxMjYwMDM1MDdaFw0yNjAxMjcwMzU2MDdaMDMxMTAvBgNV
BAMTKEIxNEIxOTgzRUI1NDI1NDI0NTMxMkM0RkNGNDExRTRBRDNCQzc1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQK8xRJMJOQoBQTNFUplzbQiG
nl0UQAQFvcA1fSQrFty7puuVS3TqDwiLst8/E3ICVGEeYb1GPd0Ym/9+8OeK9YBG
upwwGy4UqRNq9Z2JbtsJWoU6DwH8elqTlUy/gUpl3Op96LX/EzGBWdGk+Oyf+GOn
vg9K5VunIxVZbhpK9EKvRt4KkGnxTZ9nmlJCKzG2H7ZoNtnTCco8vmxqVSNLU0XA
oRRjMcz14BjKZK4D8/EEYsmBkRnRobB/y/pUd9pQ6Z+79i5d0bDL1NgoQ2+6pTnF
tcwhQa9t9ocJHHrSTP7aECbyDQZKl+TltgGOW4MaJXY9Uwh8MGprtcF9a5b/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsUsZg+tUJUJFMSxPz0EeStO8dbgwHwYDVR0j
BBgwFoAUvRHgitxnaZVfPWc5EYJC3r+kjacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVGSEZYYXdDVmFHYmlDVm5qa2FoVDlGRWdheDRSNVd3RlVWdE1HemFG
NGgvMC9CRDExRTA4QURDNjc2OTk1NUYzRDY3MzkxMTgyNDJERUJGQTQ4REE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMTFFMDhBREM2NzY5OTU1
RjNENjczOTExODI0MkRFQkZBNDhEQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzVGSEZYYXdDVmFHYmlDVm5qa2FoVDlGRWdheDRSNVd3RlVWdE1HemFGNGgvMC9C
RDExRTA4QURDNjc2OTk1NUYzRDY3MzkxMTgyNDJERUJGQTQ4REE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV6gNDFes32QSAjdsrueucuRxcIzwjjBJnIq1nSxDIf6jE9kSaJFqPFI1xEsT
VvR1rb5GRXbBuWz2WfOJ4Vq1OjzSwkMShNeMytnIXAlUEh+jSWVWnh91JA6U5zWx
mHDRNu+7902ncYmjLBUC/LJCfSZ2oidTV6Y5gHJkLbePb41zEhij93I1brH8+4Ts
dpje1NCaiuTq3f8c5gyNtFhT0FfTNlX8GTqcrr64VW7xH0A6ZWpeRVjaLU+/UcFg
rJMCX55P05403RADyOLLCt4mxQ1rcs7wJK77A3MAyw3AiEeODMaCRyd7xGaJik1q
03vMh2+W2JtqM+Ep7X4lMgUjLg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:44:24 2026 by rpki-client