This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft
File: 4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft (raw, json)
Hash identifier: KfUyLaN2DkgImubgHSeqrT+vizsWnaOKfaZeEec8jiQ=
Subject key identifier: BC:BE:1C:53:42:9E:2F:AC:3E:6A:40:A7:F6:AE:21:39:83:7E:3B:AF
Authority key identifier: 4E:FC:29:A3:CA:C6:2D:B4:E3:A7:70:31:15:B3:41:CC:74:89:C9:D5
Certificate issuer: /CN=4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5
Certificate serial: 578F58AEC0FFD390D576383C9A82F458DAEB3B23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft
Manifest number: 07
Signing time: Thu 08 Jan 2026 19:31:58 +0000
Manifest this update: Thu 08 Jan 2026 19:26:58 +0000
Manifest next update: Fri 09 Jan 2026 23:22:58 +0000
Files and hashes: 1: 323830343a336432343a3a2f33322d313238203d3e20323636323536.roa (hash: NxTg1w8n8X0x8BKJRk9RFLy+0U2I5i7p8dxkUVjTniE=)
2: 3139322e3134302e3130302e302f32322d3332203d3e20323636323536.roa (hash: pWUSDaTMefyXoURX03APG0xKFXBlgtzI/ZV8wjitJyE=)
3: 4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl (hash: MMgt3iChfdY8xg3fVZG76paMsb0JtTNFt9+q3m68xZI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl
rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Jan 2026 23:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8f:58:ae:c0:ff:d3:90:d5:76:38:3c:9a:82:f4:58:da:eb:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5
Validity
Not Before: Jan 8 19:26:58 2026 GMT
Not After : Jan 9 23:22:58 2026 GMT
Subject: CN=BCBE1C53429E2FAC3E6A40A7F6AE2139837E3BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:cd:bc:84:ee:dc:f1:4b:0c:03:ed:40:81:
17:53:68:eb:71:71:49:70:7b:e5:35:0c:a2:b1:7a:
28:3d:7c:8e:e6:68:30:df:fb:a2:52:ec:43:77:73:
75:98:7c:30:54:b4:17:f9:7d:da:3b:9f:3c:61:bc:
c2:e2:c8:52:78:7e:36:d9:f7:03:31:c0:15:45:1c:
52:5e:d4:f0:2a:aa:e3:bd:7d:2c:57:da:26:b3:5f:
8d:3f:ab:2b:e0:cc:2e:c5:b0:c2:9c:77:d5:42:c1:
5d:48:43:c0:77:b2:cd:76:4f:03:37:57:c1:e8:2d:
9a:0c:52:10:d1:71:41:f1:9e:bd:fb:05:63:8a:3d:
c9:f3:69:87:5a:90:30:3d:77:c7:e0:72:46:4a:19:
45:18:21:8a:9a:6c:a9:35:0c:84:af:4a:d2:48:e2:
6a:ce:49:c1:b8:38:6b:95:d5:4d:c1:b4:21:9b:b3:
98:dd:93:27:7b:fb:a8:e6:42:d3:1c:5a:b4:99:3f:
5b:d5:eb:f1:5e:a1:90:93:87:5d:5a:4a:77:88:43:
01:c9:b4:b5:87:d7:86:27:96:7d:75:18:51:13:98:
7e:3c:7f:fa:b0:b5:4c:9c:1b:d3:39:a7:8e:0c:f4:
d5:fc:8a:b4:9c:8d:73:eb:c0:6a:b9:ec:64:b4:e0:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:1C:53:42:9E:2F:AC:3E:6A:40:A7:F6:AE:21:39:83:7E:3B:AF
X509v3 Authority Key Identifier:
keyid:4E:FC:29:A3:CA:C6:2D:B4:E3:A7:70:31:15:B3:41:CC:74:89:C9:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/0/4EFC29A3CAC62DB4E3A7703115B341CC7489C9D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:54:ee:5a:3f:fb:88:9c:fd:11:5c:3b:8c:b2:09:bd:9d:9d:
98:8d:bc:9e:73:4c:18:40:6e:cc:b0:72:e8:47:18:9d:f0:86:
b7:2c:bb:f0:08:5f:6f:5a:a9:7b:f8:b9:65:d7:24:5a:19:d1:
c8:0e:4b:19:22:e2:6d:31:c6:7b:22:93:17:57:8b:1f:34:92:
bc:1c:af:04:7f:ce:06:b6:00:83:40:4b:7a:0f:bb:c3:d7:5a:
62:38:47:3e:55:de:d8:c5:3a:91:38:eb:6a:1d:6b:26:34:e7:
b3:fc:5b:cf:a3:c4:11:96:d9:13:c7:9b:9f:4e:e2:a2:3f:0b:
c5:9d:d7:5a:24:ad:dc:89:42:e0:44:c2:75:a0:3f:76:99:ae:
76:b3:ce:67:17:d2:9f:42:81:ea:19:2a:dc:b5:99:4d:cf:ae:
6c:ec:91:c4:ba:c1:88:1e:b0:43:4e:10:e3:e0:14:c1:fa:fd:
a2:c6:a5:e9:4e:68:d2:55:cb:3d:d9:fb:88:6b:74:23:f4:24:
48:86:53:4a:5d:94:5c:33:66:92:64:27:af:78:a7:6c:a8:0c:
65:88:b0:56:1c:cd:03:96:30:13:3a:6b:ee:72:92:52:83:bc:
d0:a2:c9:9c:be:df:fd:16:5a:9d:d8:2f:c6:41:f9:65:d5:14:
1f:04:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 05:52:39 2026 by rpki-client