This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
File: 71238E97CC73F492E8BD23DB6B3EA12536850E88.mft (raw, json)
Hash identifier: AVI/drS3Lbq9TkXRFs/auBbBryzIvjfl6Sl4jTB14Gw=
Subject key identifier: B2:75:B7:37:F7:C7:1F:7C:13:50:E4:DE:D5:C6:50:DC:3C:1D:B4:24
Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
Certificate issuer: /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Certificate serial: 0A7A764C5EF6E13131EB5FCDE2B4E06E79F5F603
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
Manifest number: 023F
Signing time: Sun 11 Jan 2026 11:55:12 +0000
Manifest this update: Sun 11 Jan 2026 11:50:12 +0000
Manifest next update: Mon 12 Jan 2026 13:52:12 +0000
Files and hashes: 1: 71238E97CC73F492E8BD23DB6B3EA12536850E88.crl (hash: Hn6vSc4hMZCcTk2Wnk+mX7O8WhOxRnFOVOflRdRmAWA=)
2: 323830343a343866343a3a2f33322d3634203d3e20323637313535.roa (hash: yXnnsOV19PP7dYa4WTWInOHdG2GRhu4PLnG5X9h7/aA=)
3: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (hash: ST5sKKJMcOBgKpX2M249j1DXH+kY2hJv5oEFgqx1pOo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 13:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7a:76:4c:5e:f6:e1:31:31:eb:5f:cd:e2:b4:e0:6e:79:f5:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Validity
Not Before: Jan 11 11:50:12 2026 GMT
Not After : Jan 12 13:52:12 2026 GMT
Subject: CN=B275B737F7C71F7C1350E4DED5C650DC3C1DB424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:09:c2:a5:ff:bd:8b:25:0b:8c:21:4c:5a:
48:76:08:45:ce:e6:a2:8d:ee:37:0b:64:bd:18:60:
2d:03:13:3c:ef:94:2f:7c:38:c1:a8:9b:59:6b:e4:
63:08:e9:a6:6e:f0:a1:5f:dd:85:6c:a3:2a:d0:9c:
81:44:e2:a9:05:24:cc:9d:62:27:78:f4:a7:a3:27:
cc:ca:91:7e:12:f2:58:13:1b:b3:25:1e:9d:55:27:
f7:27:e1:29:83:68:74:00:16:b9:dd:7b:84:73:b2:
58:13:16:cf:a3:99:84:75:c1:0d:f8:59:48:3f:9f:
3f:10:fe:b7:1a:05:82:0c:60:0f:86:f5:f2:aa:b3:
84:9e:5e:7c:2f:27:d6:fb:14:1a:6f:9d:87:1f:54:
c4:09:0c:af:27:9b:e6:1f:94:17:2c:91:fa:dd:7a:
27:96:ac:68:8d:c2:6a:74:a7:3b:3d:e4:2b:e2:08:
71:c6:6a:f1:8b:d1:85:5e:d6:57:2f:d8:9a:56:b9:
31:b4:1e:b7:ad:19:5b:74:13:16:40:d2:4f:41:69:
f3:5d:67:81:8b:68:cc:87:1c:c4:7d:e2:01:3f:e6:
e7:23:25:2a:9d:00:1a:d9:62:a2:d8:d0:5b:5c:a3:
c3:49:b8:e8:80:87:99:9b:10:c8:00:2e:32:9a:5e:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:B7:37:F7:C7:1F:7C:13:50:E4:DE:D5:C6:50:DC:3C:1D:B4:24
X509v3 Authority Key Identifier:
keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1d:b5:a4:63:bc:bf:d6:7f:16:6e:15:cf:cc:d6:65:2a:6f:
58:8b:39:4c:9a:87:91:27:c8:c6:2a:90:9d:a9:78:60:f4:7d:
a8:8b:a0:a9:c9:9a:95:27:01:4b:e8:99:ed:54:f5:e9:6a:b7:
0a:04:41:f4:de:ff:58:b6:e7:ac:b7:6f:15:3b:0c:d0:56:dc:
aa:d2:b9:47:de:22:dc:e0:9d:67:a2:1d:ce:06:ac:d3:db:fc:
04:1a:af:2b:be:89:66:aa:8a:f5:9a:fa:55:30:be:69:75:65:
10:69:e9:08:2a:b3:c8:09:a0:9a:0c:c0:96:5c:e4:8f:ae:8c:
71:86:7f:ff:ef:2c:78:ca:1e:2a:48:c5:e4:0b:d0:1e:ef:a1:
5e:f6:39:76:e3:6b:80:56:0f:5c:fb:d5:7a:65:e0:4b:c3:1b:
31:f5:08:31:df:da:c3:4f:91:19:1a:4e:9f:e6:44:af:94:ac:
68:50:ed:a9:a7:76:65:2b:db:66:5c:94:0e:a7:4d:10:8e:12:
6b:ce:7b:b4:46:cd:e0:07:d6:7e:ee:c6:aa:bd:c4:90:88:df:
48:0b:97:de:95:c7:38:f7:f8:2e:29:6d:9b:4d:7e:3b:31:ab:
39:bb:13:a5:f9:4e:0c:b6:34:65:a6:60:dd:af:67:87:8a:d8:
13:83:fe:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCnp2TF724TEx61/N4rTgbnn19gMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEyMzhFOTdDQzczRjQ5MkU4QkQyM0RCNkIzRUExMjUz
Njg1MEU4ODAeFw0yNjAxMTExMTUwMTJaFw0yNjAxMTIxMzUyMTJaMDMxMTAvBgNV
BAMTKEIyNzVCNzM3RjdDNzFGN0MxMzUwRTRERUQ1QzY1MERDM0MxREI0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKQnCpf+9iyULjCFMWkh2CEXO
5qKN7jcLZL0YYC0DEzzvlC98OMGom1lr5GMI6aZu8KFf3YVsoyrQnIFE4qkFJMyd
Yid49KejJ8zKkX4S8lgTG7MlHp1VJ/cn4SmDaHQAFrnde4RzslgTFs+jmYR1wQ34
WUg/nz8Q/rcaBYIMYA+G9fKqs4SeXnwvJ9b7FBpvnYcfVMQJDK8nm+YflBcskfrd
eieWrGiNwmp0pzs95CviCHHGavGL0YVe1lcv2JpWuTG0HretGVt0ExZA0k9BafNd
Z4GLaMyHHMR94gE/5ucjJSqdABrZYqLY0Ftco8NJuOiAh5mbEMgALjKaXj8dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsnW3N/fHH3wTUOTe1cZQ3DwdtCQwHwYDVR0j
BBgwFoAUcSOOl8xz9JLovSPbaz6hJTaFDogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0FOOVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZ
WHIvMC83MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2ODUwRTg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjM4RTk3Q0M3M0Y0OTJF
OEJEMjNEQjZCM0VBMTI1MzY4NTBFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0FOOVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMC83
MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2ODUwRTg4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuB21pGO8v9Z/Fm4Vz8zWZSpvWIs5TJqHkSfIxiqQnal4YPR9qIugqcmalScB
S+iZ7VT16Wq3CgRB9N7/WLbnrLdvFTsM0FbcqtK5R94i3OCdZ6Idzgas09v8BBqv
K76JZqqK9Zr6VTC+aXVlEGnpCCqzyAmgmgzAllzkj66McYZ//+8seMoeKkjF5AvQ
Hu+hXvY5duNrgFYPXPvVemXgS8MbMfUIMd/aw0+RGRpOn+ZEr5SsaFDtqad2ZSvb
ZlyUDqdNEI4Sa857tEbN4AfWfu7Gqr3EkIjfSAuX3pXHOPf4Liltm01+OzGrObsT
pflODLY0ZaZg3a9nh4rYE4P+1Q==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:02:20 2026 by rpki-client