This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier: 4zjxuh0FHuUF7THkV7ok/L2n4jVfwr/VXjN07wYEGBM=
Subject key identifier: C8:3B:AE:83:87:71:E4:1B:01:F4:22:43:62:6D:C8:59:0B:DB:82:05
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer: /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial: 7E87136624794EADE257B14712A8E9F8D1CE2337
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number: D3
Signing time: Sun 25 Jan 2026 15:40:00 +0000
Manifest this update: Sun 25 Jan 2026 15:35:00 +0000
Manifest next update: Mon 26 Jan 2026 17:08:00 +0000
Files and hashes: 1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 3h6SfhzIPmrfXblR02cl5n5u6+4bnzhiT4vzZuMnS64=)
2: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: nfTfd0+RufhB+XVQZlZ5mBEMJVIdgHWetXwAQD2l9dY=)
3: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: VyE9iHz3xhEfhzvHNmYrZfWFUzLKuAQo+FzkgAdY7ME=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 16:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:87:13:66:24:79:4e:ad:e2:57:b1:47:12:a8:e9:f8:d1:ce:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Validity
Not Before: Jan 25 15:35:00 2026 GMT
Not After : Jan 26 17:08:00 2026 GMT
Subject: CN=C83BAE838771E41B01F42243626DC8590BDB8205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:63:87:ba:02:3a:4d:b9:50:9e:f0:d8:21:
54:d9:9a:8a:7c:bb:dd:fc:a7:69:aa:b5:9b:c1:8e:
50:8e:a0:dd:a7:27:31:a1:4d:13:7a:b1:62:65:51:
f3:ae:a6:b1:f7:1b:12:01:dd:b3:8c:75:15:45:31:
d5:85:87:4e:9f:15:c0:c2:f8:fb:50:80:71:d6:27:
0b:38:63:81:af:b1:1b:1b:0c:42:be:94:f8:56:42:
69:49:53:e3:c6:66:ee:48:d4:bd:41:40:b8:7d:64:
a6:ce:30:d2:06:0c:8a:2e:4c:1a:02:82:6a:dc:ea:
10:ea:ca:fd:4e:c1:0c:d3:cd:b6:60:80:9f:10:bc:
19:ab:4b:4b:e8:47:d9:4d:1a:fe:04:ac:27:71:dd:
d1:a0:7f:d8:60:d6:cd:80:fe:ad:dc:b1:b2:8c:7c:
7f:47:7b:1b:5e:13:89:c2:c0:de:fa:91:87:7e:2c:
b9:2c:5f:80:39:3a:9e:f4:4b:0b:69:b9:df:89:88:
b4:e5:3b:43:42:db:e6:d5:83:a4:f7:67:6a:d9:8e:
4a:a9:34:f7:b4:2f:7a:19:6f:cd:58:a7:d7:da:2c:
dc:e2:fa:82:ed:d5:54:4a:10:ea:c7:0d:5a:bc:f5:
d1:9a:85:1a:46:96:2e:38:d3:98:28:c6:5a:eb:56:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:AE:83:87:71:E4:1B:01:F4:22:43:62:6D:C8:59:0B:DB:82:05
X509v3 Authority Key Identifier:
keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:98:5f:8c:25:3a:ed:fc:42:c4:ad:e2:6b:55:61:21:3f:3a:
75:5f:d6:85:98:2d:c6:b1:17:46:13:5d:a9:91:af:c6:f9:44:
31:9e:f0:7c:60:68:64:16:fd:5d:05:3b:4d:ef:fd:ff:51:3c:
8f:42:3d:0f:dc:cb:6d:97:c4:68:3f:dd:57:b1:7f:9c:e8:8e:
ca:93:77:98:4b:34:06:01:f5:ad:58:12:ec:05:6b:c0:dd:7a:
a1:a3:35:8e:02:0c:0b:e6:d5:52:32:b7:79:54:54:b4:2b:1e:
11:ec:6a:9c:d5:4e:74:bf:dd:11:81:0f:41:cf:38:38:c1:26:
ba:85:93:db:59:83:a7:19:40:e8:1c:9b:6d:17:5f:a5:56:ef:
74:09:85:93:b0:29:ee:c8:02:33:29:6f:4e:1a:de:80:c0:d2:
40:42:a4:04:cf:bd:99:3a:09:d4:c1:92:13:73:48:9f:de:ab:
38:69:7b:dd:f3:f6:26:2a:e6:72:bc:25:33:06:66:87:89:c8:
94:a3:a0:1a:3f:83:97:e9:b7:44:d6:38:a9:34:83:de:b4:81:
f3:f3:95:73:d4:e2:55:23:0f:14:6d:50:79:ad:9d:66:55:ae:
8f:73:58:0d:28:71:4f:c4:fb:72:b5:55:bd:e1:0a:5b:00:c4:
cd:c9:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:00:43 2026 by rpki-client