This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
File: 913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft (raw, json)
Hash identifier: mTbXdNeOLVpmlBZviBQoxFEloOt2G7w6S8UH423oqK0=
Subject key identifier: A1:6E:4F:D5:E9:77:17:A5:2B:FA:4F:C8:3F:11:C9:60:03:65:15:74
Authority key identifier: 91:3A:AE:9C:A3:1D:8F:F4:27:D4:01:DC:A3:B9:8D:28:24:83:6A:FD
Certificate issuer: /CN=913AAE9CA31D8FF427D401DCA3B98D2824836AFD
Certificate serial: 5A5FF5461E695B09AFDE383B1A189C0F5CC05CF5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
Manifest number: 0352
Signing time: Thu 01 Jan 2026 02:02:57 +0000
Manifest this update: Thu 01 Jan 2026 01:57:57 +0000
Manifest next update: Fri 02 Jan 2026 03:14:57 +0000
Files and hashes: 1: 34352e3137392e32342e302f32322d3234203d3e20323639303633.roa (hash: e5Qzp3t3T8ThEG5tL3dNRzs/1J/VWNDWpvxtGUlGu7E=)
2: 913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl (hash: jXNzEsulmSqiVgPE5aWMnJCEif2WhCZpuJN+PncmLUw=)
3: 323830343a356565343a3a2f33322d3438203d3e20323639303633.roa (hash: s4I15+99T7jREHxVh6byuk1GRay3KxmEWW5jjWd4CJ4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl
rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 02 Jan 2026 03:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5f:f5:46:1e:69:5b:09:af:de:38:3b:1a:18:9c:0f:5c:c0:5c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913AAE9CA31D8FF427D401DCA3B98D2824836AFD
Validity
Not Before: Jan 1 01:57:57 2026 GMT
Not After : Jan 2 03:14:57 2026 GMT
Subject: CN=A16E4FD5E97717A52BFA4FC83F11C96003651574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:4a:bf:7b:2b:e3:ae:5e:e4:77:1c:a9:2d:
49:44:92:ae:fc:7c:44:db:56:d8:55:47:34:65:1c:
24:0f:73:4f:db:b9:9d:68:c8:fb:08:51:3b:06:72:
9a:4a:2d:af:05:f9:55:9f:f9:17:31:17:70:f6:84:
e4:e9:2c:b4:ac:f2:0a:a8:5a:70:18:c0:78:c9:59:
73:85:cd:ab:70:d6:1b:6f:51:c3:f1:74:04:7e:93:
80:e9:58:46:06:f9:ce:43:ed:cd:4c:59:e1:44:15:
76:1c:c8:e4:c0:ea:f1:b3:bc:21:f3:e0:6b:b6:29:
b6:43:18:d9:c9:cb:cc:ed:d5:6a:c6:8f:a8:57:4c:
13:fd:3b:40:4f:0c:36:e9:53:cd:69:6b:7f:d0:53:
c8:b0:ac:28:bc:91:82:08:17:64:4a:50:e5:69:d1:
8d:98:82:f8:cd:c2:8e:2c:6f:a1:b6:cb:44:9f:7a:
57:4e:3f:81:da:8f:14:0c:8d:18:9c:59:97:ff:11:
16:cc:d5:42:3b:20:23:91:f1:05:84:10:1b:78:e2:
13:a0:33:b9:ae:0b:51:7e:3b:f4:29:0b:a9:d8:23:
b9:d8:9a:b2:77:64:87:0d:c4:46:30:42:21:ec:37:
ad:ff:69:22:d1:29:5a:e3:60:dc:fb:9e:d3:47:ed:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:4F:D5:E9:77:17:A5:2B:FA:4F:C8:3F:11:C9:60:03:65:15:74
X509v3 Authority Key Identifier:
keyid:91:3A:AE:9C:A3:1D:8F:F4:27:D4:01:DC:A3:B9:8D:28:24:83:6A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:2d:b0:b3:63:ee:48:f0:2e:59:72:24:37:47:bc:37:22:
5d:16:9c:19:66:04:3a:dd:40:2e:3c:bf:b8:0e:ad:0e:12:60:
ba:2a:c1:27:30:69:ba:22:22:91:73:39:fe:9d:28:17:5d:55:
f3:4e:84:29:7b:70:06:90:59:bb:a8:7c:01:55:83:88:c4:ec:
ff:c2:d0:78:35:aa:ba:81:6f:ba:1b:ac:4d:39:00:71:d7:f6:
7c:cd:15:3c:51:5b:47:92:50:a4:f6:23:99:ea:d7:5a:5e:14:
54:38:ce:ec:04:11:53:55:05:72:12:9a:58:24:9b:39:ae:c8:
c6:98:a0:6b:ea:82:c1:5d:b5:c2:31:eb:2e:37:fb:cd:de:79:
df:cd:9d:9f:fb:14:79:b9:a4:98:cd:eb:67:12:fe:c2:32:7e:
b7:0b:e0:30:9a:c4:b4:5d:da:0c:63:e5:dc:0c:6b:eb:1f:7b:
76:75:d5:2c:e5:73:5f:ae:e6:bc:a8:24:b6:93:3d:42:7e:ff:
76:90:cb:eb:e0:fc:20:d2:c0:08:9f:d3:bb:e3:f2:9d:82:87:
08:07:7f:31:93:d7:a2:b5:fd:a0:6a:ad:c0:ee:a8:f7:31:7a:
aa:c0:f0:d0:cb:d3:27:5b:63:d0:94:69:61:ec:d0:75:2d:24:
4b:a3:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 06:23:10 2026 by rpki-client