This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: oc2AY9eN3FCf/hnYgxd1p568wGaRZo9yHaA+hcJzQJs= Subject key identifier: 91:FA:15:5C:DC:34:7C:5F:BA:3B:B0:D0:F5:63:89:8E:F3:BB:02:A1 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 64A1A06396457F377785C8C71A6A278D15F1EEE5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 0218 Signing time: Sun 25 Jan 2026 01:07:37 +0000 Manifest this update: Sun 25 Jan 2026 01:02:37 +0000 Manifest next update: Mon 26 Jan 2026 04:30:37 +0000 Files and hashes: 1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=) 3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: O6nBesMv/YI6AdjArqLKf0Cf3TKA5hLKSgLG684RU74=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 04:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a1:a0:63:96:45:7f:37:77:85:c8:c7:1a:6a:27:8d:15:f1:ee:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Jan 25 01:02:37 2026 GMT Not After : Jan 26 04:30:37 2026 GMT Subject: CN=91FA155CDC347C5FBA3BB0D0F563898EF3BB02A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:06:10:ca:17:29:8a:e3:2d:79:1c:68:73: 9f:4e:75:31:fe:69:a2:5d:ef:70:14:9e:ba:e9:7b: 20:8c:a3:ec:1d:3f:27:86:8a:92:a4:8c:87:05:3e: 83:3e:2e:c7:ec:1a:6e:1d:3e:2d:1d:86:c1:ed:a9: ae:00:da:b0:a1:b7:73:e5:a5:59:8b:63:b2:bd:58: ae:48:f8:81:b8:a2:d8:b7:3a:fc:36:e4:ea:0f:17: f3:90:9d:31:9f:d2:77:f7:83:99:7b:1d:80:d5:99: 7c:60:c8:9b:58:22:64:20:18:9f:b1:46:85:77:01: 5e:4c:b5:a8:47:52:30:ac:4b:3b:3f:f9:44:78:c6: b2:29:88:6c:9c:c7:48:b0:2e:f0:e0:3f:c1:2b:d7: 6b:c8:85:34:aa:4c:14:7f:8c:58:6d:de:68:66:5a: 60:a0:c8:55:d8:6c:74:06:3e:74:2f:28:2e:8f:4e: 36:a9:d5:1c:b2:5a:d2:cb:0b:93:f1:87:00:f3:cd: 11:6d:10:44:80:49:41:60:e3:a9:0d:e8:21:32:b0: 16:95:03:1d:d6:27:07:3a:24:f6:63:0e:21:c0:1a: f1:f5:f7:a0:49:f0:a4:ed:c6:df:2f:fb:a7:5b:7c: ff:cb:ea:ef:32:9f:7b:e4:52:93:fa:30:c5:f5:f2: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FA:15:5C:DC:34:7C:5F:BA:3B:B0:D0:F5:63:89:8E:F3:BB:02:A1 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:38:f1:4b:c6:14:9a:8e:0a:7e:ff:79:75:ea:2b:c7:fe:9f: a2:20:c5:a8:d3:4f:1d:4c:37:da:9a:13:2d:ad:ac:dd:1b:88: 18:00:94:b2:e1:e3:29:c0:88:99:65:62:77:14:86:a9:68:92: c6:7b:da:8e:27:b5:93:eb:21:2b:b5:c6:65:ad:ca:fa:18:52: 26:85:64:fd:81:f7:4c:be:e3:b6:eb:08:4e:d2:73:b0:50:8a: 23:97:8e:4c:dc:61:7e:b4:87:3a:00:9e:70:9e:fb:86:ef:95: 8d:d4:fb:6a:6c:3e:96:3d:88:28:fa:e9:32:e0:e2:d9:8c:b3: ff:e5:32:04:f8:b0:49:cc:ce:20:a8:80:26:62:92:fa:6e:a4: 59:a6:6d:f6:80:fc:84:c1:ae:17:61:8b:d4:95:c8:d4:6c:9e: ac:93:02:fe:5d:37:f8:dc:19:97:3b:f4:72:6e:27:8a:f0:71: d7:c7:83:f7:07:dd:22:c0:73:ec:3a:c6:d3:b4:90:39:31:2e: 51:98:74:e5:8b:9c:c4:82:3d:ef:de:f0:48:f6:29:1e:87:27: 57:11:44:66:aa:ac:9f:7e:0f:ed:df:e7:ea:c1:88:ee:c3:b1: 8b:e2:a1:68:94:37:77:23:1b:bd:65:ff:24:cd:37:e3:41:6d: d2:de:7d:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZKGgY5ZFfzd3hcjHGmonjRXx7uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNjAxMjUwMTAyMzdaFw0yNjAxMjYwNDMwMzdaMDMxMTAvBgNV BAMTKDkxRkExNTVDREMzNDdDNUZCQTNCQjBEMEY1NjM4OThFRjNCQjAyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpgYQyhcpiuMteRxoc59OdTH+ aaJd73AUnrrpeyCMo+wdPyeGipKkjIcFPoM+LsfsGm4dPi0dhsHtqa4A2rCht3Pl pVmLY7K9WK5I+IG4oti3Ovw25OoPF/OQnTGf0nf3g5l7HYDVmXxgyJtYImQgGJ+x RoV3AV5MtahHUjCsSzs/+UR4xrIpiGycx0iwLvDgP8Er12vIhTSqTBR/jFht3mhm WmCgyFXYbHQGPnQvKC6PTjap1RyyWtLLC5PxhwDzzRFtEESASUFg46kN6CEysBaV Ax3WJwc6JPZjDiHAGvH196BJ8KTtxt8v+6dbfP/L6u8yn3vkUpP6MMX18pIbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkfoVXNw0fF+6O7DQ9WOJjvO7AqEwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHzjxS8YUmo4Kfv95deorx/6foiDFqNNPHUw32poTLa2s3RuIGACUsuHjKcCI mWVidxSGqWiSxnvajie1k+shK7XGZa3K+hhSJoVk/YH3TL7jtusITtJzsFCKI5eO TNxhfrSHOgCecJ77hu+VjdT7amw+lj2IKPrpMuDi2Yyz/+UyBPiwSczOIKiAJmKS +m6kWaZt9oD8hMGuF2GL1JXI1GyerJMC/l03+NwZlzv0cm4nivBx18eD9wfdIsBz 7DrG07SQOTEuUZh05YucxII9797wSPYpHocnVxFEZqqsn34P7d/n6sGI7sOxi+Kh aJQ3dyMbvWX/JM0340Ft0t59PQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:55:47 2026 by rpki-client