This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
File: 98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft (raw, json)
Hash identifier: QfE2C0/v9iH6HR8FSL0Ec88dtDXxfEDFeRZXUyvYyGc=
Subject key identifier: 3C:38:1E:38:FE:9E:0F:0B:27:15:5F:40:A5:E0:D3:71:D4:3B:90:00
Authority key identifier: 98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Certificate issuer: /CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
Certificate serial: 786E249F2E3F8A36FDC9E881E5268DDDC86FD380
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
Manifest number: 029C
Signing time: Sun 25 Jan 2026 07:40:36 +0000
Manifest this update: Sun 25 Jan 2026 07:35:36 +0000
Manifest next update: Mon 26 Jan 2026 10:40:36 +0000
Files and hashes: 1: 3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa (hash: qZrpLX+V7F/v4ZqmTXHfH+2Tgl63VtJKoioJmpnVOIs=)
2: 98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl (hash: suw53iFEztfiT/aPveG2HE65x7ZVJ0jUmFiLOt3/obM=)
3: 323830343a373166633a3a2f33322d313238203d3e20323730383234.roa (hash: r0kbvnOz+jTPDX7sMBwJdffkj7T98YbClJByF8JqoYI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl
rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6e:24:9f:2e:3f:8a:36:fd:c9:e8:81:e5:26:8d:dd:c8:6f:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
Validity
Not Before: Jan 25 07:35:36 2026 GMT
Not After : Jan 26 10:40:36 2026 GMT
Subject: CN=3C381E38FE9E0F0B27155F40A5E0D371D43B9000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:fb:22:7a:95:72:b2:00:29:53:77:05:1f:
dc:40:ed:1d:c4:5d:d5:a9:44:d7:5f:1d:fa:4e:aa:
b2:7b:d5:fc:96:0d:64:cf:ee:e1:a1:48:a6:3c:89:
48:8e:28:91:21:a1:1d:52:4e:64:a6:7d:c0:dd:56:
cd:d4:54:a6:ff:34:88:9b:16:a3:c0:4c:14:df:c4:
cc:29:2f:3a:32:e1:65:a9:a0:c9:30:c8:ad:6e:ce:
b6:76:89:ce:36:d3:ce:88:db:09:4f:53:d3:fd:b2:
21:ec:60:67:f3:89:18:07:32:17:51:04:ce:66:93:
59:a6:60:e9:cf:38:e9:f4:dd:82:3f:72:30:fb:a0:
b7:a9:f0:df:73:3d:62:73:77:b3:a2:05:73:7a:5f:
f6:19:0b:36:e3:e0:f8:b4:07:b1:6d:47:f9:73:70:
2b:7c:75:30:12:41:75:ae:d9:f7:ad:fe:96:dd:11:
69:f7:1c:f8:1a:8a:a4:bc:29:87:6f:cd:ce:2a:96:
c1:b2:3f:96:22:75:79:99:77:54:2c:a7:7d:38:23:
a8:f7:63:a5:a4:42:3d:02:2f:11:72:74:d3:00:23:
b5:68:38:4d:a3:79:14:5f:79:ee:b5:f8:21:da:70:
26:08:75:c0:88:91:dd:48:01:9d:29:5e:23:dd:36:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:1E:38:FE:9E:0F:0B:27:15:5F:40:A5:E0:D3:71:D4:3B:90:00
X509v3 Authority Key Identifier:
keyid:98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:b3:44:11:a9:cb:08:b4:96:e1:2a:4c:1a:e9:91:1f:63:
10:73:4b:4b:17:75:f2:b8:fa:49:57:a0:a0:e7:20:5a:b5:6c:
ba:67:25:b9:33:64:fa:24:ad:ee:44:5d:e2:ad:0d:bf:be:dc:
fd:48:98:45:fa:f4:54:aa:e7:c2:a4:0c:e0:e1:c3:0a:d8:bd:
41:6b:9c:ec:14:5b:30:98:59:ff:dd:8f:7f:d2:45:78:aa:94:
1a:4a:af:e3:98:23:a6:29:a0:36:a0:5c:b7:04:5b:6b:3e:8e:
a8:77:e8:97:92:ef:30:63:e8:44:a2:6b:ed:6a:ca:dc:bb:51:
27:bb:49:f6:67:64:c8:a4:42:45:eb:97:47:12:66:d4:11:7a:
e2:40:e7:49:d8:4f:02:4b:f4:c0:13:9a:54:d4:3c:fe:da:0f:
22:87:1f:74:a7:e7:d5:7a:b6:dc:f5:cd:e4:18:32:a2:82:c7:
da:4c:62:54:be:0b:8e:a7:e0:d7:ab:5a:51:6b:98:6b:b6:4e:
d7:3e:79:67:47:37:18:31:97:ba:9c:91:47:16:93:a6:eb:25:
5f:da:cc:6d:07:a3:e1:51:14:7a:6a:4f:63:24:4d:7d:a3:6e:
dc:90:23:17:bf:10:64:d0:f2:f6:aa:3d:22:06:c1:77:7f:ac:
c5:de:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:49:12 2026 by rpki-client