This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft File: 58A28FA55A129B3ED7724531E87F15ECD22B918D.mft (raw, json) Hash identifier: c78fHZ4tuU4un/KrwqSvFcn/A3PQI9vB9jBuQYiLixA= Subject key identifier: 6B:65:D6:EB:EB:E7:3F:E1:CD:B7:04:4F:63:DF:F6:EB:8B:07:83:2A Authority key identifier: 58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D Certificate issuer: /CN=58A28FA55A129B3ED7724531E87F15ECD22B918D Certificate serial: 39550441A4F0E9B10E5311D72067C7E0E55C1A46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft Manifest number: 0148 Signing time: Thu 01 Jan 2026 18:23:01 +0000 Manifest this update: Thu 01 Jan 2026 18:18:01 +0000 Manifest next update: Fri 02 Jan 2026 18:50:01 +0000 Files and hashes: 1: 323830343a393336343a3a2f33322d3332203d3e20323734373734.roa (hash: OO7Z6diGpEfL/MFcTxHKDmseZGAvPEOiht5SQidTcN0=) 2: 58A28FA55A129B3ED7724531E87F15ECD22B918D.crl (hash: QrBriD/Db/j0nDP+kJ5BdJAQYB7UNjl107jbPBdD++g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 18:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:55:04:41:a4:f0:e9:b1:0e:53:11:d7:20:67:c7:e0:e5:5c:1a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A28FA55A129B3ED7724531E87F15ECD22B918D Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jan 2 18:50:01 2026 GMT Subject: CN=6B65D6EBEBE73FE1CDB7044F63DFF6EB8B07832A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:43:c3:48:8c:5d:22:65:da:b1:db:ca:2b: 0d:06:63:0c:1f:2e:6c:67:a4:8e:48:7d:89:d7:a8: 58:87:b8:96:0c:9d:eb:01:1d:8d:2d:bd:3f:04:ee: eb:48:18:ca:2c:6d:18:d1:65:8a:4d:43:6c:33:9c: 85:22:e8:eb:9b:d3:2f:97:df:77:a4:b1:05:76:f0: e8:ee:67:72:d6:12:2d:b0:a3:c5:c4:32:a7:93:b6: d9:0f:56:cc:5a:41:a8:14:cf:aa:86:02:a3:32:da: 89:40:7e:f3:a7:fa:55:dc:f0:fa:32:e3:73:05:78: c4:42:c3:ce:c7:50:ab:44:03:b1:33:46:c2:8b:9b: bb:ea:cb:2d:c6:4b:e0:e5:c4:8c:04:e4:92:e3:17: dd:39:5b:0a:b0:ad:95:78:1b:c4:78:77:91:b5:1b: 76:8d:e4:55:58:db:9d:f2:1c:5c:5b:b4:6f:59:a6: 07:10:57:9a:34:24:06:93:74:31:d9:87:7f:eb:64: c6:6d:33:dd:63:2e:da:af:da:56:03:64:58:e6:ce: 01:a9:c5:ac:b0:c5:7e:13:1b:d3:4f:a6:4e:76:bd: e0:a1:50:e8:f4:22:a1:6a:9c:16:c8:1f:43:eb:bc: d7:6f:1e:c7:29:10:f5:34:0b:51:a7:e3:eb:29:19: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:65:D6:EB:EB:E7:3F:E1:CD:B7:04:4F:63:DF:F6:EB:8B:07:83:2A X509v3 Authority Key Identifier: keyid:58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:db:6b:0c:01:ff:0b:39:ca:29:93:9a:85:ca:7c:da:55: 64:8b:4b:39:97:c2:dc:12:10:3c:ec:d0:35:03:8d:3c:09:45: c2:7c:40:cf:ed:6f:58:49:7b:9b:1c:03:86:d8:ab:35:a3:1b: d5:fe:e7:2d:52:5b:fa:20:53:bd:58:d6:a2:2b:2a:ba:22:70: 86:f4:a8:c1:b5:92:67:b8:c9:7e:fc:14:30:c8:fb:64:56:b2: 15:19:b8:75:9c:c7:16:42:e0:6d:12:73:77:5f:21:8e:49:e0: 9c:ee:d9:44:08:2d:4b:67:0d:3d:c5:76:a9:7f:7e:a5:21:cd: 34:fa:90:ba:a0:11:f2:ae:cd:4f:ea:c2:0f:bf:45:e6:b3:a7: 97:91:92:25:98:8d:09:7a:48:4f:d2:64:49:0b:7f:65:bc:a9: 2b:e6:17:aa:a0:03:c5:47:ff:3e:cc:79:35:5b:5f:d3:81:0e: df:48:38:c7:cd:c8:12:c7:2b:a9:c6:e7:b6:64:f3:cd:c3:17: 80:39:98:10:19:b1:de:30:87:38:da:a7:57:98:77:af:81:de: 1a:08:14:f8:57:39:c4:da:a2:b6:79:6a:39:ee:5e:4b:cb:7e: 18:51:a1:de:3b:7f:29:5f:2f:d4:f2:47:eb:42:ce:74:aa:e7: 72:92:24:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOVUEQaTw6bEOUxHXIGfH4OVcGkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBMjhGQTU1QTEyOUIzRUQ3NzI0NTMxRTg3RjE1RUNE MjJCOTE4RDAeFw0yNjAxMDExODE4MDFaFw0yNjAxMDIxODUwMDFaMDMxMTAvBgNV BAMTKDZCNjVENkVCRUJFNzNGRTFDREI3MDQ0RjYzREZGNkVCOEIwNzgzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpk0PDSIxdImXasdvKKw0GYwwf LmxnpI5IfYnXqFiHuJYMnesBHY0tvT8E7utIGMosbRjRZYpNQ2wznIUi6Oub0y+X 33eksQV28OjuZ3LWEi2wo8XEMqeTttkPVsxaQagUz6qGAqMy2olAfvOn+lXc8Poy 43MFeMRCw87HUKtEA7EzRsKLm7vqyy3GS+DlxIwE5JLjF905WwqwrZV4G8R4d5G1 G3aN5FVY253yHFxbtG9ZpgcQV5o0JAaTdDHZh3/rZMZtM91jLtqv2lYDZFjmzgGp xaywxX4TG9NPpk52veChUOj0IqFqnBbIH0PrvNdvHscpEPU0C1Gn4+spGY/vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa2XW6+vnP+HNtwRPY9/264sHgyowHwYDVR0j BBgwFoAUWKKPpVoSmz7XckUx6H8V7NIrkY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQk1Wd0oySEFRaThyekdpdjFWaTlQbUNBb0ZxaUNocG5pNlQyU3pKcloy NEcvMC81OEEyOEZBNTVBMTI5QjNFRDc3MjQ1MzFFODdGMTVFQ0QyMkI5MThELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4QTI4RkE1NUExMjlCM0VE NzcyNDUzMUU4N0YxNUVDRDIyQjkxOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qk1Wd0oySEFRaThyekdpdjFWaTlQbUNBb0ZxaUNocG5pNlQyU3pKcloyNEcvMC81 OEEyOEZBNTVBMTI5QjNFRDc3MjQ1MzFFODdGMTVFQ0QyMkI5MThELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ93bawwB/ws5yimTmoXKfNpVZItLOZfC3BIQPOzQNQONPAlFwnxAz+1vWEl7 mxwDhtirNaMb1f7nLVJb+iBTvVjWoisquiJwhvSowbWSZ7jJfvwUMMj7ZFayFRm4 dZzHFkLgbRJzd18hjkngnO7ZRAgtS2cNPcV2qX9+pSHNNPqQuqAR8q7NT+rCD79F 5rOnl5GSJZiNCXpIT9JkSQt/ZbypK+YXqqADxUf/Psx5NVtf04EO30g4x83IEscr qcbntmTzzcMXgDmYEBmx3jCHONqnV5h3r4HeGggU+Fc5xNqitnlqOe5eS8t+GFGh 3jt/KV8v1PJH60LOdKrncpIkig== -----END CERTIFICATE-----Generated at Thu Jan 1 19:56:36 2026 by rpki-client