This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json)
Hash identifier: PuerhGmEQrWBJil0sgpCbL6QjQc6+4VGcVO1A27e6gE=
Subject key identifier: 64:05:29:5A:D9:19:83:E0:14:16:ED:76:6A:A4:C8:BC:08:E4:BE:F0
Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90
Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390
Certificate serial: 19B9895CB57D70F55D64859A895D2253A6046D9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
Manifest number: C1
Signing time: Sun 25 Jan 2026 09:39:10 +0000
Manifest this update: Sun 25 Jan 2026 09:34:10 +0000
Manifest next update: Mon 26 Jan 2026 12:11:10 +0000
Files and hashes: 1: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=)
2: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: ftRoesKFKds6Be/kBZJyVwaqm83zyv3oFf2fBISC6Gw=)
3: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: +imYjavH3CgL72HTCYrNEn4EQVxod0LuWgoSWYHHRlI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl
rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 12:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b9:89:5c:b5:7d:70:f5:5d:64:85:9a:89:5d:22:53:a6:04:6d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390
Validity
Not Before: Jan 25 09:34:10 2026 GMT
Not After : Jan 26 12:11:10 2026 GMT
Subject: CN=6405295AD91983E01416ED766AA4C8BC08E4BEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:ff:e4:00:f4:11:7f:28:79:4b:c5:15:35:
71:38:04:6e:6a:24:e6:28:6e:ed:a4:83:74:d8:f8:
c6:de:c6:b1:d5:d8:0c:e3:26:e5:61:50:55:1b:42:
8c:e3:34:58:c8:47:58:69:d1:a2:9a:91:83:2b:5c:
6c:3d:86:2b:d9:4f:97:73:d8:d8:bb:e9:6f:23:9c:
aa:10:5c:50:a6:2d:c0:76:89:91:04:bf:f3:ca:f8:
20:18:3b:0f:bf:40:3f:b4:02:b8:f5:83:02:07:2a:
05:7b:6e:38:f2:bd:1e:fb:6e:fa:01:22:da:2f:33:
e1:dc:9a:3c:fe:65:9b:07:86:b2:ce:89:17:bc:ae:
94:85:89:92:e7:0d:e3:59:07:68:bf:11:fb:24:ec:
ea:4d:b7:a1:2c:bf:26:41:6e:3b:c5:c1:7f:7e:fe:
99:3e:fb:1d:36:e8:44:8d:f1:ad:25:d5:b8:59:17:
9f:cb:1f:a8:0d:a5:d7:86:4c:15:b3:ea:ac:8b:0f:
a0:f2:86:0b:90:bf:7f:87:c4:03:f9:1e:b5:58:ea:
06:f4:23:e7:3f:78:47:e0:5b:6f:5c:0c:37:57:45:
49:96:cb:d9:19:b3:16:e1:66:e1:5f:68:fd:31:e1:
8b:7c:24:c3:95:41:87:eb:97:9a:00:25:cd:cd:66:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:29:5A:D9:19:83:E0:14:16:ED:76:6A:A4:C8:BC:08:E4:BE:F0
X509v3 Authority Key Identifier:
keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:02:49:6b:4d:f0:ae:48:4c:4c:dc:88:a3:61:d6:a5:43:
fc:27:54:c9:4a:01:98:83:25:4a:0e:de:96:45:7d:a0:c8:88:
f5:15:aa:52:46:e8:41:ed:9d:d4:a0:4b:17:7d:20:2a:fe:50:
a0:5a:0a:bf:20:25:fb:4e:61:2c:c8:3d:59:52:f5:aa:af:dc:
a0:34:2c:17:56:ee:e9:67:f5:13:b1:17:fe:eb:7d:a3:7d:5f:
ad:43:78:c7:03:e0:0c:f5:51:44:f8:1d:b9:60:11:3d:45:50:
de:b4:d5:46:8a:6b:09:05:ac:42:0b:ea:0c:3e:07:70:e2:0f:
b3:71:a3:b8:58:bc:4f:e0:df:56:00:62:95:94:a1:1a:7d:3e:
4d:7a:2d:c4:b9:0f:cb:5a:8e:de:b5:4a:23:67:05:fb:f7:12:
94:b6:3d:fa:dd:7a:8d:90:62:92:1d:e5:88:fd:70:49:80:48:
1e:59:5e:b6:17:1e:81:7b:5e:d7:fa:2d:77:23:f9:d7:3f:e3:
77:7c:22:6b:b1:a6:80:03:c4:86:c7:a7:a8:54:ef:0c:c3:44:
27:bd:c9:0b:06:42:a2:ac:18:44:f4:fe:b8:9c:f8:60:ac:c3:
22:b5:e9:ca:9e:bb:5b:18:ab:51:32:12:24:37:d9:d2:a9:69:
c7:c2:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:10 2026 by rpki-client