This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft
File: 2B70CD0507DEB57B92FF796531C932DEF83009A2.mft (raw, json)
Hash identifier: 7mgymnYnRc4dRHZJtX0gM+wh9IJ7gBBaBlHg1O5aYyA=
Subject key identifier: C0:36:7E:12:E2:84:73:9E:97:B7:49:9D:8B:38:61:2E:82:0B:98:9E
Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2
Certificate issuer: /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
Certificate serial: 3585B5BB614B50BFB1208F233BFAED1EBC4658BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft
Manifest number: 02A6
Signing time: Fri 09 Jan 2026 23:36:04 +0000
Manifest this update: Fri 09 Jan 2026 23:31:04 +0000
Manifest next update: Sun 11 Jan 2026 01:13:04 +0000
Files and hashes: 1: 3138392e3132362e31322e302f32322d3234203d3e20323730333136.roa (hash: usN4Sn/tOM9yn1kyODhJ/9CSDKsJBo6S6EP+tHpD0AQ=)
2: 323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (hash: uM7t3CdpbFI7OeW+ScOEPFx4SBbDqHNlaGrAPMxg5UE=)
3: 2B70CD0507DEB57B92FF796531C932DEF83009A2.crl (hash: BtV8679QzkdUSlnP6l8c8BAmAQbTMn5Hlzh2hFZJAiM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl
rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Jan 2026 01:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:85:b5:bb:61:4b:50:bf:b1:20:8f:23:3b:fa:ed:1e:bc:46:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
Validity
Not Before: Jan 9 23:31:04 2026 GMT
Not After : Jan 11 01:13:04 2026 GMT
Subject: CN=C0367E12E284739E97B7499D8B38612E820B989E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:8b:d6:32:cc:87:93:ef:36:c9:64:f0:16:
bb:61:40:a9:27:58:e2:e0:33:4c:f1:9e:47:98:b9:
f6:f8:55:b6:c7:3f:2a:51:ee:21:b4:32:60:aa:3f:
46:41:e9:3f:13:34:8b:fc:67:2d:01:7e:dd:97:e5:
60:8b:df:90:bc:c2:da:63:a4:54:f3:a5:ed:fc:70:
96:2d:ff:9a:a6:59:6a:b7:db:07:52:f2:06:1c:ca:
14:6b:f0:d7:76:18:ee:b1:33:20:60:05:db:85:9b:
ed:d1:6c:5a:04:c4:b1:1d:dd:c9:86:e1:66:c1:71:
48:4d:6e:68:32:5e:b3:d2:fe:16:a6:10:0f:72:4c:
4d:ba:6f:61:63:ee:25:5f:35:f2:d2:c9:2a:25:02:
4a:0b:bd:48:c3:d5:b5:29:e2:9e:2f:56:ea:92:b0:
87:27:90:29:78:1d:d3:35:bf:c6:82:22:98:c5:18:
0d:d2:cc:ba:92:d2:9c:72:96:11:0f:e0:0c:a1:c0:
6e:0e:f5:76:34:34:28:e7:c9:bb:09:f3:8a:09:73:
4a:7f:aa:c9:85:cc:1a:2b:05:90:1e:25:1f:22:21:
db:77:40:fa:7d:c5:0e:ff:16:0e:c2:c6:8c:ad:8a:
04:d9:45:d6:78:5b:f7:8e:e2:66:06:28:6b:8c:e5:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:7E:12:E2:84:73:9E:97:B7:49:9D:8B:38:61:2E:82:0B:98:9E
X509v3 Authority Key Identifier:
keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:fb:43:69:ca:38:f3:9c:5a:9e:74:d3:a7:5a:bd:28:f2:
d5:69:f7:dd:85:7e:82:59:45:9b:a1:b0:16:10:e3:13:f8:cc:
2f:74:ea:49:3c:8b:72:68:48:86:1b:90:3d:01:37:ab:bc:de:
05:7e:40:4b:0a:c3:13:fa:60:c7:a8:6c:7f:06:cb:e5:54:c1:
76:56:82:f3:d5:43:7d:eb:fe:4b:3d:ed:ee:61:dc:13:8a:a7:
ae:8f:dc:ee:1f:ee:8d:96:1f:a9:7d:ff:04:bb:28:50:5b:a2:
eb:4c:78:c7:11:f6:c8:4e:e2:1d:da:c7:b2:1d:b5:c6:64:38:
04:09:b1:de:4c:55:a7:d3:6a:e0:3e:fd:67:2a:7a:fb:8a:be:
ea:b4:d8:ca:40:ea:41:d0:0e:30:ee:1b:3f:58:c2:e3:f1:53:
00:3a:15:52:6c:a8:b2:4d:3c:f9:68:b7:b4:fe:f3:a1:38:1f:
52:d8:17:d3:dd:f7:49:86:e9:d5:5e:e9:73:26:e5:29:8e:dd:
54:28:cc:61:54:04:de:fd:e8:24:da:0a:fc:68:a4:f4:69:48:
47:cc:8f:a6:34:0d:ec:e0:a2:34:c4:3e:ea:35:6f:5b:3f:05:
88:93:0a:b8:8d:a0:3b:20:5a:98:c6:f6:a1:54:73:5a:7e:4a:
04:e9:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:58:50 2026 by rpki-client