This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier: ERybLaDjEXboHKz8nQL8AArrH4J/pKrw4Pr5X3+x1Z4=
Subject key identifier: 27:10:A8:05:95:47:70:78:98:31:18:DB:BD:25:47:C4:48:51:54:63
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 5A9BC61BDF814806DF0F729C915C652A2455EB2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number: 0224
Signing time: Sun 25 Jan 2026 10:42:38 +0000
Manifest this update: Sun 25 Jan 2026 10:37:38 +0000
Manifest next update: Mon 26 Jan 2026 11:36:38 +0000
Files and hashes: 1: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
2: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: pIZIOOYgquEsve7E5rAoXqoooWcbX9E7DVCuR4cXhPg=)
3: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
4: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
5: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
6: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
7: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
8: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 11:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9b:c6:1b:df:81:48:06:df:0f:72:9c:91:5c:65:2a:24:55:eb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Jan 25 10:37:38 2026 GMT
Not After : Jan 26 11:36:38 2026 GMT
Subject: CN=2710A80595477078983118DBBD2547C448515463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:14:52:63:03:3e:b7:96:58:a3:c0:29:29:
80:af:fb:40:c8:f6:81:df:7a:ae:62:da:cb:69:59:
cb:b9:82:f6:28:cb:3f:43:4e:ab:b0:f8:06:de:a6:
49:0a:4e:27:df:52:39:fd:45:22:c1:ca:cc:2e:00:
82:43:01:bd:58:25:21:e9:91:be:c3:23:70:7e:b1:
a1:ea:6f:53:f3:85:f8:18:7b:fd:33:b5:fc:28:60:
8c:e4:89:b5:33:15:68:64:3b:3a:f0:e5:25:bf:9a:
04:6b:94:f6:7d:e2:99:69:cf:c8:09:c4:fa:5b:37:
66:3d:74:de:95:ef:96:0e:91:6e:77:2f:e9:58:a9:
72:44:bc:51:e1:2f:d0:0f:6c:d8:ef:3d:0c:c4:1c:
60:1a:3e:f5:2a:c6:ba:00:b9:da:b5:ea:6d:95:89:
92:9b:c8:91:21:e9:b5:7b:d2:da:0a:14:fc:a6:64:
3b:ef:ee:37:81:1d:5c:43:9f:52:6c:9a:f7:e1:9a:
e0:02:c2:1c:f7:b3:9e:4e:a5:bb:9e:b5:f4:88:5e:
a0:3e:c6:4c:e9:af:6b:a6:be:58:21:c8:41:40:13:
93:58:85:72:cf:0f:b8:e1:d5:0f:7a:51:2a:3b:98:
e1:af:e8:5e:0e:67:ff:1e:d6:75:6a:54:d6:4b:46:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:10:A8:05:95:47:70:78:98:31:18:DB:BD:25:47:C4:48:51:54:63
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:20:ef:5b:9f:73:e5:b7:46:ee:25:e7:05:34:b8:3b:bc:
99:ee:e5:29:9d:3b:5d:bf:04:c7:6e:50:99:31:a7:57:5b:a3:
ad:d9:af:9d:17:7e:d1:34:a9:80:0e:3a:b2:98:7a:87:23:6b:
11:27:6a:07:f7:c0:db:26:9b:3a:88:10:15:bd:c2:de:4a:7a:
d4:5b:f8:68:c7:30:af:96:ca:f6:bf:e1:a7:04:ad:43:38:e6:
33:f8:a4:8c:dc:25:d7:4a:b1:8e:f4:27:74:c4:2b:9d:9f:d6:
a6:54:97:80:27:3c:27:f1:73:63:55:e5:86:52:0f:c0:f8:07:
65:a1:0f:29:64:22:52:ba:9e:e1:3c:6d:da:4b:f0:54:de:e9:
02:d6:3f:b7:4b:fe:66:82:50:fc:32:0c:5d:c7:58:6c:92:ed:
6e:a4:8f:7b:ac:d5:ee:df:ea:5d:31:72:26:c3:d2:74:74:11:
51:5b:68:d6:49:7c:d3:2f:56:d2:8d:69:e5:aa:de:56:75:99:
66:3f:89:e8:ae:79:28:ae:15:80:22:df:1d:f9:ce:26:97:57:
90:6d:dd:1d:40:d8:d8:c2:eb:38:97:25:52:78:d2:ef:27:86:
40:a5:e2:af:b9:09:b7:97:dc:d1:78:28:d3:1e:d7:7e:0f:dc:
cf:12:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:45 2026 by rpki-client