This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft File: BD11125724CB8C5430E605E8628C6235B0ECD037.mft (raw, json) Hash identifier: Eq8ts50qu2liFM+AGI7YI3yU5L5xqlV1vaAgASyalA8= Subject key identifier: DE:6F:5D:38:81:2B:F5:91:E0:63:18:BB:6F:41:5E:0E:E4:BA:40:9B Authority key identifier: BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37 Certificate issuer: /CN=BD11125724CB8C5430E605E8628C6235B0ECD037 Certificate serial: 0FEA4EA46C2E4348BD7A1B09FBF8986060FB9A30 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer Subject info access: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft Manifest number: 016A Signing time: Mon 12 Jan 2026 12:40:01 +0000 Manifest this update: Mon 12 Jan 2026 12:35:01 +0000 Manifest next update: Tue 13 Jan 2026 14:56:01 +0000 Files and hashes: 1: 3137372e35322e33322e302f32322d3332203d3e20323632343336.roa (hash: RtrsE+xGCCVr2chEHvLdQ7AT5f/sRQG9Zyqj0JzNMs0=) 2: BD11125724CB8C5430E605E8628C6235B0ECD037.crl (hash: pehS3iwWCx1P9V527Aq63IH0OFxjcsFXbL+nUhd9nK4=) 3: 3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa (hash: +AusLg2SKOw9O5wiWzX6vgr5NojjKfN8e30wCraIzYo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 14:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ea:4e:a4:6c:2e:43:48:bd:7a:1b:09:fb:f8:98:60:60:fb:9a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD11125724CB8C5430E605E8628C6235B0ECD037 Validity Not Before: Jan 12 12:35:01 2026 GMT Not After : Jan 13 14:56:01 2026 GMT Subject: CN=DE6F5D38812BF591E06318BB6F415E0EE4BA409B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:d7:a6:b6:e7:ff:fe:6a:71:65:98:97:de: ec:80:94:a1:15:fc:a9:45:55:de:70:e8:ae:c8:c0: 9d:43:fd:ae:6e:26:72:82:c2:be:b2:f0:c1:da:27: e6:42:0e:51:0b:ae:f3:df:25:47:18:a2:46:05:57: df:59:49:c3:c7:a2:82:fd:5b:8e:b0:e1:e4:7c:f9: 90:aa:f3:d0:e1:37:cd:47:29:20:fe:46:fa:3c:c4: 5b:9b:b1:a7:a7:99:be:25:77:73:58:36:20:51:55: dc:c6:d1:bb:55:5f:2e:a9:09:42:ad:d7:57:f1:18: d5:97:33:31:96:ef:b5:cc:97:3b:ef:09:56:58:b7: 11:fe:0d:18:9c:05:c7:43:e2:54:d9:f6:f7:b1:c0: 00:da:80:1f:ed:1f:c5:87:d1:b1:33:2a:84:a9:48: 8c:fa:d2:ad:6d:4b:11:0d:35:ff:86:ff:ef:3a:bd: c5:b1:a2:93:98:67:7e:48:49:17:da:6f:62:f3:ff: 41:60:78:5f:7d:9a:1e:ea:05:49:f3:86:44:8f:f7: a0:52:1c:ba:b6:af:c5:1a:08:2d:a5:6e:51:4b:41: e8:9c:17:c2:02:8c:80:5b:ba:a8:38:7f:e3:90:f6: fd:5a:44:e2:4a:05:82:52:b9:89:9c:27:5a:dd:fe: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:5D:38:81:2B:F5:91:E0:63:18:BB:6F:41:5E:0E:E4:BA:40:9B X509v3 Authority Key Identifier: keyid:BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:01:bf:d6:78:3e:12:06:77:04:62:0a:c0:bc:29:99:b1:ab: 63:50:ee:41:74:a3:dd:25:9b:b1:9c:0c:c6:fd:2b:4a:3b:89: d8:54:2a:e6:41:cc:56:34:07:33:74:6d:2d:83:c0:67:b6:c0: 92:fb:18:ea:5d:17:e5:3e:33:90:6a:08:10:b6:ab:f8:16:3c: e9:6b:05:9c:69:40:a9:d3:45:a0:b9:88:09:ff:c8:5b:82:6d: 9b:17:21:70:28:fa:fd:33:5a:ed:6e:e7:e3:93:12:fb:15:97: e7:bb:62:b4:9b:8a:46:59:6d:a1:1e:55:36:e9:99:6d:aa:f0: 46:d1:9d:10:8f:ec:a9:c6:5d:b2:ee:58:81:3b:5c:4e:44:e0: 20:4e:f9:fe:49:6d:75:d8:65:50:84:68:ba:75:db:0c:9d:5e: 5b:4e:a5:50:bb:00:a1:63:8d:93:7f:f8:bd:71:e9:2c:59:fa: 21:e9:5e:d2:48:89:88:22:bf:6f:de:4e:d2:79:2a:b7:96:66: 6d:03:1d:0e:d8:44:58:74:d9:d2:d0:e5:03:fa:c0:50:7c:2c: c6:2f:84:dd:d8:65:9d:5b:70:f2:4f:7b:01:4e:92:01:1c:1c: c2:31:3d:e9:c2:e7:02:43:42:d2:7d:26:aa:92:ff:54:18:d7: 44:48:29:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD+pOpGwuQ0i9ehsJ+/iYYGD7mjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQxMTEyNTcyNENCOEM1NDMwRTYwNUU4NjI4QzYyMzVC MEVDRDAzNzAeFw0yNjAxMTIxMjM1MDFaFw0yNjAxMTMxNDU2MDFaMDMxMTAvBgNV BAMTKERFNkY1RDM4ODEyQkY1OTFFMDYzMThCQjZGNDE1RTBFRTRCQTQwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7temtuf//mpxZZiX3uyAlKEV /KlFVd5w6K7IwJ1D/a5uJnKCwr6y8MHaJ+ZCDlELrvPfJUcYokYFV99ZScPHooL9 W46w4eR8+ZCq89DhN81HKSD+Rvo8xFubsaenmb4ld3NYNiBRVdzG0btVXy6pCUKt 11fxGNWXMzGW77XMlzvvCVZYtxH+DRicBcdD4lTZ9vexwADagB/tH8WH0bEzKoSp SIz60q1tSxENNf+G/+86vcWxopOYZ35ISRfab2Lz/0FgeF99mh7qBUnzhkSP96BS HLq2r8UaCC2lblFLQeicF8ICjIBbuqg4f+OQ9v1aROJKBYJSuYmcJ1rd/tERAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3m9dOIEr9ZHgYxi7b0FeDuS6QJswHwYDVR0j BBgwFoAUvRESVyTLjFQw5gXoYoxiNbDs0DcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhF dWMvMC9CRDExMTI1NzI0Q0I4QzU0MzBFNjA1RTg2MjhDNjIzNUIwRUNEMDM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMTExMjU3MjRDQjhDNTQz MEU2MDVFODYyOEM2MjM1QjBFQ0QwMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhFdWMvMC9C RDExMTI1NzI0Q0I4QzU0MzBFNjA1RTg2MjhDNjIzNUIwRUNEMDM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcAG/1ng+EgZ3BGIKwLwpmbGrY1DuQXSj3SWbsZwMxv0rSjuJ2FQq5kHMVjQH M3RtLYPAZ7bAkvsY6l0X5T4zkGoIELar+BY86WsFnGlAqdNFoLmICf/IW4Jtmxch cCj6/TNa7W7n45MS+xWX57titJuKRlltoR5VNumZbarwRtGdEI/sqcZdsu5YgTtc TkTgIE75/kltddhlUIRounXbDJ1eW06lULsAoWONk3/4vXHpLFn6Iele0kiJiCK/ b95O0nkqt5ZmbQMdDthEWHTZ0tDlA/rAUHwsxi+E3dhlnVtw8k97AU6SARwcwjE9 6cLnAkNC0n0mqpL/VBjXREgpNg== -----END CERTIFICATE-----Generated at Mon Jan 12 17:27:40 2026 by rpki-client