This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/D27D1E86B5C582FA5901811E3000A092077DE1EB.mft
File: D27D1E86B5C582FA5901811E3000A092077DE1EB.mft (raw, json)
Hash identifier: IEuNqp+ip/4RMy4Rw77Dn7ENRVwGRzZBQJc+oSjzs7s=
Subject key identifier: BF:D6:67:16:48:9A:4A:51:15:27:37:1D:B8:5B:9A:A3:54:A8:09:07
Authority key identifier: D2:7D:1E:86:B5:C5:82:FA:59:01:81:1E:30:00:A0:92:07:7D:E1:EB
Certificate issuer: /CN=D27D1E86B5C582FA5901811E3000A092077DE1EB
Certificate serial: 1A383D8077497C11A135DE6E451790D1CC4B8848
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27D1E86B5C582FA5901811E3000A092077DE1EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/D27D1E86B5C582FA5901811E3000A092077DE1EB.mft
Manifest number: 0A
Signing time: Sun 25 Jan 2026 13:36:11 +0000
Manifest this update: Sun 25 Jan 2026 13:31:11 +0000
Manifest next update: Mon 26 Jan 2026 16:20:11 +0000
Files and hashes: 1: 323830343a386261383a3a2f33322d3438203d3e20323733373437.roa (hash: m26kw1x1KNCWDv1pAONcpYaQDy+RJhCKJz77Nt04vv4=)
2: D27D1E86B5C582FA5901811E3000A092077DE1EB.crl (hash: 1WTLwjz6Vy87o2KS3nMJ+oFHDGZeeg7uNoR+E918ur8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/D27D1E86B5C582FA5901811E3000A092077DE1EB.crl
rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/D27D1E86B5C582FA5901811E3000A092077DE1EB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27D1E86B5C582FA5901811E3000A092077DE1EB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 16:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:38:3d:80:77:49:7c:11:a1:35:de:6e:45:17:90:d1:cc:4b:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D27D1E86B5C582FA5901811E3000A092077DE1EB
Validity
Not Before: Jan 25 13:31:11 2026 GMT
Not After : Jan 26 16:20:11 2026 GMT
Subject: CN=BFD66716489A4A511527371DB85B9AA354A80907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:59:e2:e6:75:3c:1b:71:b2:1d:bb:9a:10:
9a:d4:54:a7:34:a8:17:60:c0:24:71:25:c0:f7:01:
72:3d:0e:01:9f:a0:25:17:1c:2f:51:67:f6:63:ae:
da:59:a7:48:41:c6:91:80:b5:0c:2f:e1:35:81:de:
ae:96:f4:81:93:23:47:c1:38:ce:4a:33:b0:3d:52:
4e:5d:79:d2:fa:1a:80:c3:de:8f:8a:3b:92:9a:a1:
15:be:80:84:58:b1:fc:13:e9:59:49:4b:54:d4:b3:
5b:79:d2:76:cf:85:a2:3c:6f:2d:b2:e2:de:92:09:
fc:53:53:01:f3:9f:c6:5c:a7:82:fd:69:5f:5c:6b:
a7:11:80:2b:36:07:7b:54:31:c0:15:d5:8a:65:1d:
21:d9:50:3c:ac:a2:31:ed:89:d1:0e:65:d2:19:c2:
5b:ca:4e:5d:c8:4c:9a:3c:15:d8:65:ce:63:4d:74:
91:13:1b:42:41:4c:ac:78:d7:d9:51:db:b6:1e:32:
ff:a3:0d:e8:6e:fe:94:22:6b:6b:b0:8a:3c:33:19:
e7:d1:6b:03:a8:76:19:5a:c5:a5:ca:73:03:cf:5e:
46:31:00:53:62:da:37:66:6c:00:8f:af:69:74:30:
8b:4d:74:d9:3a:cb:6f:62:b9:c3:86:04:96:86:e8:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:67:16:48:9A:4A:51:15:27:37:1D:B8:5B:9A:A3:54:A8:09:07
X509v3 Authority Key Identifier:
keyid:D2:7D:1E:86:B5:C5:82:FA:59:01:81:1E:30:00:A0:92:07:7D:E1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/D27D1E86B5C582FA5901811E3000A092077DE1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27D1E86B5C582FA5901811E3000A092077DE1EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/D27D1E86B5C582FA5901811E3000A092077DE1EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fc:7b:f5:1b:e8:74:7b:5e:bc:0c:f1:7f:cf:56:4d:d7:cc:
63:3f:d5:5a:0d:06:77:a2:17:bd:91:03:c4:42:19:bc:a9:8a:
7b:77:75:36:dc:33:23:fd:4c:68:79:95:6b:44:19:83:06:c9:
27:5c:a6:ca:b9:25:22:b1:bb:d9:c0:b6:4a:68:ac:b3:c0:79:
9d:83:e8:2e:77:8e:24:bc:c9:cc:1b:d7:6d:7a:2a:fa:a3:c2:
9b:9e:5c:c8:68:86:e4:4b:f9:ad:63:9b:b1:85:e6:66:9e:ba:
77:a3:25:ab:56:64:54:78:48:22:45:54:7d:26:ae:3f:37:06:
a3:de:ab:0e:e5:e4:73:f7:58:53:c9:fb:cb:c2:60:9b:a5:a8:
b9:b5:dc:7d:77:d3:46:70:91:9f:56:e8:ed:80:13:62:7f:cf:
d4:08:be:7d:b9:fd:00:51:a6:90:49:0c:53:1c:77:57:a9:fe:
98:0e:6b:60:d7:16:54:ba:8b:20:53:74:09:ec:d3:99:9f:84:
5e:ec:36:be:98:25:e5:8f:bd:06:1f:43:d5:a4:98:6d:f1:1e:
b4:20:6e:e9:56:cb:e2:a1:7a:af:ec:4c:87:57:c5:21:2a:15:
81:bd:46:d8:cf:cd:60:80:db:e1:18:08:ff:08:22:2f:37:7d:
79:c3:20:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGjg9gHdJfBGhNd5uRReQ0cxLiEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3RDFFODZCNUM1ODJGQTU5MDE4MTFFMzAwMEEwOTIw
NzdERTFFQjAeFw0yNjAxMjUxMzMxMTFaFw0yNjAxMjYxNjIwMTFaMDMxMTAvBgNV
BAMTKEJGRDY2NzE2NDg5QTRBNTExNTI3MzcxREI4NUI5QUEzNTRBODA5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZVni5nU8G3GyHbuaEJrUVKc0
qBdgwCRxJcD3AXI9DgGfoCUXHC9RZ/ZjrtpZp0hBxpGAtQwv4TWB3q6W9IGTI0fB
OM5KM7A9Uk5dedL6GoDD3o+KO5KaoRW+gIRYsfwT6VlJS1TUs1t50nbPhaI8by2y
4t6SCfxTUwHzn8Zcp4L9aV9ca6cRgCs2B3tUMcAV1YplHSHZUDysojHtidEOZdIZ
wlvKTl3ITJo8FdhlzmNNdJETG0JBTKx419lR27YeMv+jDehu/pQia2uwijwzGefR
awOodhlaxaXKcwPPXkYxAFNi2jdmbACPr2l0MItNdNk6y29iucOGBJaG6FENAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUv9ZnFkiaSlEVJzcduFuao1SoCQcwHwYDVR0j
BBgwFoAU0n0ehrXFgvpZAYEeMACgkgd94eswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFN1emphbkVFOXpuZGtiWktEYjRLM3RmR21WYzNzVnhOOWVEa2tUc1Bx
TkwvMC9EMjdEMUU4NkI1QzU4MkZBNTkwMTgxMUUzMDAwQTA5MjA3N0RFMUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyN0QxRTg2QjVDNTgyRkE1
OTAxODExRTMwMDBBMDkyMDc3REUxRUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFN1emphbkVFOXpuZGtiWktEYjRLM3RmR21WYzNzVnhOOWVEa2tUc1BxTkwvMC9E
MjdEMUU4NkI1QzU4MkZBNTkwMTgxMUUzMDAwQTA5MjA3N0RFMUVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARPx79RvodHtevAzxf89WTdfMYz/VWg0Gd6IXvZEDxEIZvKmKe3d1NtwzI/1M
aHmVa0QZgwbJJ1ymyrklIrG72cC2Smiss8B5nYPoLneOJLzJzBvXbXoq+qPCm55c
yGiG5Ev5rWObsYXmZp66d6Mlq1ZkVHhIIkVUfSauPzcGo96rDuXkc/dYU8n7y8Jg
m6WoubXcfXfTRnCRn1bo7YATYn/P1Ai+fbn9AFGmkEkMUxx3V6n+mA5rYNcWVLqL
IFN0CezTmZ+EXuw2vpgl5Y+9Bh9D1aSYbfEetCBu6VbL4qF6r+xMh1fFISoVgb1G
2M/NYIDb4RgI/wgiLzd9ecMg6A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:58 2026 by rpki-client