This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
File: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json)
Hash identifier: W6BqWZ+73y4Ax8QBa9bFEy6EFSD99EwtRaEuXosJWNY=
Subject key identifier: BF:47:CF:9E:12:3C:ED:4B:71:A5:DB:84:47:81:AF:7E:21:C2:A1:82
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Certificate issuer: /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial: 6EA04443EAF7FF3286E72C9E630F67A96EDA7029
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
Manifest number: 033D
Signing time: Sun 25 Jan 2026 06:11:11 +0000
Manifest this update: Sun 25 Jan 2026 06:06:11 +0000
Manifest next update: Mon 26 Jan 2026 08:25:11 +0000
Files and hashes: 1: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: emwGgS752GR+iE9k+emZZ4wvibJtJ4SVwnDY2rIx3jQ=)
2: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: nwVIwcLmhDBueq5xt/gc37vwol4yziELmDoL4LzkP7w=)
3: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: eBr86NdP8UcNjjscNRKlKFP5HRNCnh3UcA1xh8UVip4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 08:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a0:44:43:ea:f7:ff:32:86:e7:2c:9e:63:0f:67:a9:6e:da:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Validity
Not Before: Jan 25 06:06:11 2026 GMT
Not After : Jan 26 08:25:11 2026 GMT
Subject: CN=BF47CF9E123CED4B71A5DB844781AF7E21C2A182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:0c:51:80:d1:34:7d:b2:a4:1c:05:a6:9e:
2f:bf:92:b0:6d:e0:03:30:12:6e:38:c0:7c:ac:e8:
18:47:35:33:31:c8:a1:ef:6c:b3:04:e8:f0:cc:10:
71:33:c1:d1:80:19:b4:da:af:9a:1e:26:4d:59:00:
26:33:79:e6:6b:55:85:c1:97:48:e7:91:69:d0:57:
0c:30:1c:34:95:bc:05:f4:2c:9d:08:ae:a8:64:a6:
d3:9a:58:89:80:42:39:d1:fb:19:47:2d:d9:e7:bb:
67:d0:38:bf:f2:63:9c:5a:bc:85:2e:bc:3f:6f:9c:
9a:f6:03:7f:44:fb:81:83:09:c7:89:3b:a4:d7:40:
04:46:53:e4:37:52:92:d8:f8:bf:de:ae:f7:cb:6e:
ff:9d:dd:f6:74:39:f2:7a:62:5d:6b:6f:d4:0a:76:
7c:07:f4:be:5a:4b:d8:2f:12:53:49:dd:ff:84:75:
1d:b9:46:2e:ef:6c:5b:4d:26:22:a4:c7:08:72:8e:
bc:35:88:89:5d:30:46:c0:b6:43:e2:39:ad:b5:e7:
35:0a:ee:1a:89:ee:bc:3d:6c:0e:fb:47:bc:4a:7e:
c7:38:9d:37:d4:c1:f5:e7:72:d8:21:ac:f3:57:fa:
86:94:5e:6b:a1:0a:a4:17:b6:02:28:9b:2c:4d:2d:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:47:CF:9E:12:3C:ED:4B:71:A5:DB:84:47:81:AF:7E:21:C2:A1:82
X509v3 Authority Key Identifier:
keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a6:49:85:4d:bf:d4:3f:53:6a:62:1f:11:e1:cc:6b:0f:a3:
90:5f:98:a1:99:76:81:22:80:5a:5a:50:11:95:a4:48:d1:32:
d1:47:6f:3e:7d:52:cc:90:33:c6:b5:ba:3f:65:e1:a5:4c:b4:
9e:58:76:bc:6b:98:d5:73:d2:53:a0:3e:bc:c0:1c:93:80:f1:
22:71:47:7e:f6:9c:86:bc:5a:76:65:ba:d8:13:f3:fe:d2:70:
0c:b7:fe:30:56:44:1a:61:92:a0:03:19:34:2c:86:3b:03:f8:
d2:1a:30:d1:69:91:eb:ff:78:d9:b8:70:1b:46:ab:1f:cb:3e:
10:b9:be:65:b8:96:83:07:db:a1:85:ea:b7:bd:dc:ba:25:a0:
30:ad:05:4b:74:b0:9a:cd:f1:4b:f3:06:9b:8d:e3:f7:40:57:
18:26:6d:1f:73:f1:8e:83:89:63:15:76:ca:8b:db:62:cc:68:
46:27:b2:3e:02:10:f1:f6:d6:4c:09:95:94:9e:6b:18:d7:5e:
7f:e2:62:f4:40:a9:15:aa:bd:90:16:70:7a:31:4c:4f:e9:4d:
8b:d0:9e:ed:8c:d0:78:9f:4e:95:fb:a7:e6:6f:df:88:57:3b:
f6:f1:4d:05:ef:03:07:90:00:bf:73:44:18:08:35:0f:ac:80:
e5:7b:26:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:18:33 2026 by rpki-client