This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
File: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft (raw, json)
Hash identifier: KCk7LmIbEHrKflaOJ5qf9a/TlbK0ny0NPCVHm1seovU=
Subject key identifier: 10:22:22:C8:3D:76:BB:94:2E:4E:AB:A8:D0:C4:5D:21:8E:9A:49:0C
Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Certificate issuer: /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Certificate serial: 4568004EDCF209AF5CA2770A5EB99EFFE7592AAD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
Manifest number: 5D
Signing time: Sun 25 Jan 2026 07:31:41 +0000
Manifest this update: Sun 25 Jan 2026 07:26:41 +0000
Manifest next update: Mon 26 Jan 2026 10:34:41 +0000
Files and hashes: 1: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (hash: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk=)
2: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (hash: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=)
3: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl (hash: ddqeX0RdKOvnq3Btc31wB3WLLwpJq9LSmH3FGWzrXnM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 10:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:68:00:4e:dc:f2:09:af:5c:a2:77:0a:5e:b9:9e:ff:e7:59:2a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
Validity
Not Before: Jan 25 07:26:41 2026 GMT
Not After : Jan 26 10:34:41 2026 GMT
Subject: CN=102222C83D76BB942E4EABA8D0C45D218E9A490C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:d6:fe:3b:f6:5e:d3:03:9a:97:a5:94:68:
69:77:08:3f:e4:ea:aa:fa:52:ac:62:68:e7:a6:82:
54:15:41:a4:ee:74:90:96:5e:09:71:a3:0a:7b:86:
58:62:42:f8:df:09:5b:da:b1:f5:93:08:98:2a:2e:
95:4a:e6:8d:e0:1d:b0:00:ad:3b:f9:18:e5:0f:88:
19:b6:88:ba:35:8f:4e:2a:37:96:db:f9:bc:2f:9b:
c2:eb:53:b0:f7:2a:2e:51:1e:1f:9e:7e:f2:e4:c4:
85:52:e4:d9:2e:19:d9:49:da:dc:16:e1:39:d7:ed:
3d:ab:87:28:55:fc:a6:f4:da:13:4b:ab:8b:55:ce:
de:ce:aa:42:26:9e:7b:75:b2:b6:f5:39:82:e4:f8:
8c:5f:32:35:3e:06:6d:fc:14:0a:73:44:a1:77:4e:
46:f3:3c:67:47:83:4e:f5:f0:93:7a:44:4b:47:8c:
3a:c8:fc:8d:36:d3:bf:44:88:51:44:f3:a2:a0:ee:
6a:2d:63:0b:5e:67:34:e7:7e:f5:20:ed:7e:8b:5f:
c6:07:dd:b6:de:0e:18:b3:ad:71:97:27:3c:09:6a:
cd:2f:88:bf:10:a4:c8:62:37:a0:ed:43:dc:d3:56:
dd:4c:c1:7e:72:7c:24:eb:06:80:3c:4e:6a:5f:53:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:22:C8:3D:76:BB:94:2E:4E:AB:A8:D0:C4:5D:21:8E:9A:49:0C
X509v3 Authority Key Identifier:
keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:5e:0c:fe:f7:96:76:da:68:21:48:94:61:32:9f:89:d3:
ce:5e:10:9c:7b:82:63:40:4f:2b:b4:6b:8e:8e:7e:4b:67:e9:
e0:f3:18:47:43:e6:3e:95:60:e6:5f:b0:74:3d:5c:74:0c:a8:
8b:77:ee:59:f7:07:b2:41:47:e4:8d:62:ba:b5:07:21:0a:d7:
cb:57:23:97:81:9e:95:44:70:59:98:bc:9f:58:24:ab:e7:d1:
91:53:af:16:f9:4c:4e:40:ca:7b:c0:77:26:ba:06:52:e4:af:
38:4b:d6:7d:23:ff:f8:13:f7:ad:a4:bb:92:c3:a7:9d:0d:ac:
63:c6:e2:59:a5:73:68:5d:9f:5c:d5:8f:cb:81:87:2d:ff:f3:
69:76:bf:b5:06:a5:a9:c8:7b:33:10:c8:e9:be:8a:80:75:36:
32:70:54:35:87:5c:17:5c:d5:c3:25:f2:5d:e6:2a:98:19:e5:
28:0a:76:dd:2b:1f:d0:1a:31:ae:30:72:fd:de:a9:55:48:b0:
48:f3:6a:57:16:0d:d5:02:eb:cb:c4:1f:e2:80:66:0f:5a:88:
64:74:0d:1b:e1:95:48:a9:d2:7a:c2:5b:19:ee:b8:5d:80:ab:
22:c0:cf:27:d7:0e:78:bd:6c:70:6b:3c:c9:63:b4:cf:de:62:
eb:75:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:56:56 2026 by rpki-client