This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft
File: 19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft (raw, json)
Hash identifier: hZY41PYMit+6LNN8nkQzcaPg3m1IX4G9OmPV9Y+VNu0=
Subject key identifier: F8:B2:52:3E:A1:51:D7:EB:7C:76:62:7D:B2:88:BB:05:73:8E:13:46
Authority key identifier: 19:F8:90:38:A7:A3:09:0D:D5:63:01:55:A9:CB:3A:62:F9:A8:F8:CA
Certificate issuer: /CN=19F89038A7A3090DD5630155A9CB3A62F9A8F8CA
Certificate serial: 08AD9CCB34686360046D18D9B46F9EE15735E25D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft
Manifest number: 35
Signing time: Sun 25 Jan 2026 10:30:56 +0000
Manifest this update: Sun 25 Jan 2026 10:25:56 +0000
Manifest next update: Mon 26 Jan 2026 12:14:56 +0000
Files and hashes: 1: 323830343a356665343a3a2f33322d313238203d3e20323639313330.roa (hash: U9UNiWVUbqsl1MmYeYBN5uWPts9TXCm/5to+ZeOwiO8=)
2: 19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.crl (hash: 5feOpNU6+PmXwZy7bgEm/0qvhm8/5uDNtjbHATHQ5B4=)
3: 34352e3138302e34302e302f32322d3332203d3e20323639313330.roa (hash: hpxA8jQRip72T+3nh5wGmIUwVep1oihPl6lvSzgMyJk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.crl
rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 12:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ad:9c:cb:34:68:63:60:04:6d:18:d9:b4:6f:9e:e1:57:35:e2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19F89038A7A3090DD5630155A9CB3A62F9A8F8CA
Validity
Not Before: Jan 25 10:25:56 2026 GMT
Not After : Jan 26 12:14:56 2026 GMT
Subject: CN=F8B2523EA151D7EB7C76627DB288BB05738E1346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:cb:11:63:72:b3:3b:39:b3:a2:73:97:1d:
15:d8:3d:4c:a2:e9:6f:45:78:97:fb:18:6d:c1:88:
5e:fa:35:eb:ed:f0:76:94:9b:e0:19:8f:b2:9c:6f:
d7:ed:92:32:c0:f8:29:d3:68:ae:db:4b:5e:1d:14:
a5:28:e9:a3:e8:a0:f7:d1:8b:79:63:08:3b:2f:a9:
98:70:b5:19:fe:bf:c8:fb:f6:04:5f:d6:2c:91:18:
65:a1:b1:22:04:42:77:0a:f4:25:08:83:d5:d7:5d:
c9:36:62:ff:62:b4:06:12:f8:7f:4d:f5:dd:4d:b2:
de:ae:1f:80:08:82:ca:0c:ba:af:42:57:5a:87:19:
ca:9b:7e:5d:00:6d:1a:c2:98:74:55:53:dc:f3:0b:
9a:a4:ea:bf:a6:fb:ea:a9:26:65:0a:a0:4a:31:e2:
5f:91:68:a7:8a:e9:6b:df:12:dd:c0:58:75:e7:79:
b7:14:b1:2b:4e:39:a6:4d:24:a7:b1:90:85:7a:eb:
91:35:ab:8b:96:52:55:5f:0a:65:3f:ba:e5:1d:c9:
a8:93:68:c2:79:98:76:33:53:25:28:36:3d:3d:b8:
de:66:ce:92:f6:f6:f6:4a:37:d4:d8:ea:a5:0d:48:
d1:36:a7:86:a6:b5:4b:c8:da:c1:dd:92:5b:57:27:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:52:3E:A1:51:D7:EB:7C:76:62:7D:B2:88:BB:05:73:8E:13:46
X509v3 Authority Key Identifier:
keyid:19:F8:90:38:A7:A3:09:0D:D5:63:01:55:A9:CB:3A:62:F9:A8:F8:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ec:eb:00:79:65:97:ca:d8:87:bc:c0:8b:13:33:bf:3d:ff:
07:58:44:7f:c3:29:d8:ea:dc:02:fc:4e:63:f9:c2:1b:da:eb:
31:15:3a:d2:57:5a:0c:fe:47:24:27:a6:95:f7:c2:82:6a:1a:
06:aa:0c:c2:73:b3:53:96:af:3f:97:86:a9:0f:10:e6:f6:e3:
0d:9f:b3:b7:b8:61:84:79:70:c4:85:49:dd:41:8d:91:da:8b:
d7:d6:47:cc:b2:9e:c1:2e:6f:e7:5e:c9:51:5c:df:a6:e3:67:
0a:ae:93:bd:fe:92:21:9b:26:1a:b2:91:a0:aa:5a:ec:fd:89:
f9:67:24:db:b9:94:92:8b:2b:c2:96:ad:93:ec:0b:26:88:7c:
0e:ab:cd:ab:5f:d2:cf:e1:3c:17:39:e4:4a:27:4d:1a:04:de:
1f:5a:ca:cb:43:f4:a8:0f:03:b7:f7:32:b3:28:40:9e:e4:be:
c0:e4:07:0e:58:da:1a:88:e9:39:0f:6e:c5:3d:b8:44:3c:30:
99:ef:d7:21:3d:84:1e:61:41:e4:b5:f2:50:f2:69:e7:58:fe:
ef:c0:5a:5b:1d:a4:40:3b:90:23:f2:e1:47:2c:9e:97:ed:b6:
11:69:a9:77:f6:ca:0d:ab:eb:de:71:13:9f:fb:8f:bc:b4:6c:
03:7c:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:46 2026 by rpki-client