This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
File: 5068952903F5F17C21FA5B2EC1BE472DF306072C.mft (raw, json)
Hash identifier: 0KLiG4oQBMrilys+ZnKUwWWdS2Eq1Jkd4mt/WqA3qa4=
Subject key identifier: BB:AA:C0:1F:CE:75:FE:07:B9:50:26:B7:E9:F7:4F:25:0B:6E:66:8A
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Certificate issuer: /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial: 373FC3FD3302C86D19B5A28FD8A0E325FBCAEB50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
Manifest number: 0326
Signing time: Sun 25 Jan 2026 04:05:11 +0000
Manifest this update: Sun 25 Jan 2026 04:00:11 +0000
Manifest next update: Mon 26 Jan 2026 06:35:11 +0000
Files and hashes: 1: 323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (hash: BXkrp2Mvx2nWGCFFgusdd+uwhU+HbeeOijlRUAvUL8s=)
2: 5068952903F5F17C21FA5B2EC1BE472DF306072C.crl (hash: vMj3s9qVmBfktE92ROZtCUxhlg7z8zJwBUFAqNO4j60=)
3: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (hash: 3UcJp+sAAG3um4LkAt+wonBgw14MEtXK+Iy70mF7x7c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 06:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3f:c3:fd:33:02:c8:6d:19:b5:a2:8f:d8:a0:e3:25:fb:ca:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Validity
Not Before: Jan 25 04:00:11 2026 GMT
Not After : Jan 26 06:35:11 2026 GMT
Subject: CN=BBAAC01FCE75FE07B95026B7E9F74F250B6E668A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:86:6c:01:21:14:56:8c:4b:9e:6c:68:53:
f3:fb:38:fb:9c:8d:ba:9f:08:75:2f:b6:4e:bf:b4:
00:05:4d:d0:68:b0:4e:68:d8:25:ca:5d:08:19:4e:
08:c9:c0:37:8d:c7:ec:09:f2:d8:8a:cf:45:13:ad:
2a:5e:f7:be:8a:d3:88:82:17:a7:55:86:6a:cc:8c:
51:ee:25:59:dc:dc:19:8b:46:b1:f2:8a:3d:f9:4e:
ff:20:7d:94:c3:64:b2:fc:3a:e7:38:b7:86:28:83:
f7:13:e3:17:34:16:63:ec:29:9d:9b:50:61:e9:a4:
e0:90:63:36:44:47:da:12:5b:7f:0c:31:71:36:85:
c7:1b:12:81:6d:aa:ef:71:18:27:56:a3:d5:43:f4:
b7:d3:2c:cd:ae:82:3c:fd:13:18:03:89:47:b0:28:
3f:61:e4:7b:80:2a:62:d2:8c:b2:7c:b6:f0:c7:09:
74:36:d2:4d:08:7b:56:ad:c4:b9:2f:e4:29:73:eb:
4a:ab:e6:6a:85:12:15:1e:19:49:38:1e:55:56:28:
8f:95:79:4c:b5:ec:8b:1f:43:9e:66:8d:fb:43:35:
91:11:43:89:99:76:6d:51:9a:b6:f4:cc:9c:b9:9e:
ad:ae:b5:58:d4:bb:0d:06:d8:81:dc:9f:7b:cb:47:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:C0:1F:CE:75:FE:07:B9:50:26:B7:E9:F7:4F:25:0B:6E:66:8A
X509v3 Authority Key Identifier:
keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a5:13:20:ac:34:31:82:2f:5f:6d:0a:3f:8c:3a:12:f0:ac:
b7:7d:c9:01:e6:c1:f7:1c:ea:7b:7e:f8:b9:b6:3b:d2:de:81:
eb:3a:1e:1e:6c:f3:dd:8a:b3:a5:c8:68:8d:c2:ac:12:04:8a:
39:a5:40:1d:b8:fa:9c:ae:b0:94:ff:1e:76:63:c0:dd:79:49:
e6:60:8b:9c:63:ee:35:47:86:2f:1a:9c:0b:33:29:36:59:0e:
b7:a2:18:d2:d2:07:38:21:aa:2e:42:6c:c0:18:d0:85:50:98:
76:e5:f6:f0:28:8c:e6:0e:36:f5:a4:e0:95:08:f8:b1:38:d8:
8c:32:a0:45:f6:89:c2:56:e5:13:df:f6:49:87:63:c0:00:69:
84:f1:a4:42:51:70:0f:6f:3a:8e:2e:5a:83:b2:84:27:da:fe:
83:d3:dd:1d:da:c4:4e:52:67:7f:a8:8f:00:f2:7a:35:3d:56:
47:08:8e:80:54:fc:e5:57:e1:d3:0a:e1:ce:41:6d:01:bc:31:
aa:c3:59:da:39:fd:6e:cc:65:a7:68:e3:a7:96:dd:8d:6c:bd:
3f:ed:1e:eb:9a:8f:be:cc:46:5c:6f:47:eb:eb:f3:72:4a:3c:
c1:c6:0d:10:35:66:f5:b3:93:c9:7d:91:10:85:3f:9a:32:7d:
e8:f5:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:48:29 2026 by rpki-client