This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/E70248B79F351C03511929F60DE507E193427128.mft
File: E70248B79F351C03511929F60DE507E193427128.mft (raw, json)
Hash identifier: HkGn1S5mo5+UR8Goh1evnWnz2ZYZppWJYS2boM7pd+w=
Subject key identifier: 4D:B0:C9:89:45:8E:FE:74:8D:98:ED:C5:CE:07:51:B2:F4:31:9A:5E
Authority key identifier: E7:02:48:B7:9F:35:1C:03:51:19:29:F6:0D:E5:07:E1:93:42:71:28
Certificate issuer: /CN=E70248B79F351C03511929F60DE507E193427128
Certificate serial: 629711341EEDD53F0E169E5EF6A1E16841E568AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E70248B79F351C03511929F60DE507E193427128.cer
Subject info access: rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/E70248B79F351C03511929F60DE507E193427128.mft
Manifest number: 9B
Signing time: Sun 25 Jan 2026 20:30:34 +0000
Manifest this update: Sun 25 Jan 2026 20:25:34 +0000
Manifest next update: Mon 26 Jan 2026 20:59:34 +0000
Files and hashes: 1: 323830343a383762343a3a2f33322d313238203d3e20323732373237.roa (hash: lyFMyeTaJ9Q+QZKCTwPNvikbKwldoW/r/Z6C2lPviW4=)
2: E70248B79F351C03511929F60DE507E193427128.crl (hash: cdxGqr6S7uHmIBlngiuVkXN5XvqKMV03GrgQpNgrTxU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/E70248B79F351C03511929F60DE507E193427128.crl
rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/E70248B79F351C03511929F60DE507E193427128.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E70248B79F351C03511929F60DE507E193427128.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:97:11:34:1e:ed:d5:3f:0e:16:9e:5e:f6:a1:e1:68:41:e5:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E70248B79F351C03511929F60DE507E193427128
Validity
Not Before: Jan 25 20:25:34 2026 GMT
Not After : Jan 26 20:59:34 2026 GMT
Subject: CN=4DB0C989458EFE748D98EDC5CE0751B2F4319A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:84:b6:dc:12:8b:59:de:a6:ac:85:70:c3:
e8:e4:25:d9:03:ca:c7:e7:92:9d:81:9f:72:d1:ac:
54:93:f7:e9:fa:5f:b2:e9:3f:7b:5f:05:7b:b6:62:
b0:1d:37:a7:91:23:16:c8:b0:17:bc:91:fc:55:33:
a8:47:d3:04:6a:97:14:66:b3:2e:b5:38:70:d1:7c:
91:9b:db:38:b8:f2:3a:c5:61:1b:e9:65:1c:0c:15:
bd:b1:ba:b5:03:e5:14:76:f5:de:ac:19:9d:12:ba:
fb:93:dd:cb:7d:32:92:1e:c8:ac:85:5b:00:03:40:
e2:bc:3f:35:39:f6:cf:31:a5:67:e3:6a:af:92:9e:
67:89:7d:28:6c:f2:9d:e5:19:b9:97:3c:26:d9:55:
91:0c:86:60:c4:cc:b1:05:9f:e1:94:88:fa:3c:70:
b5:9d:20:ba:cd:39:d4:71:de:e3:c7:df:a7:e1:c0:
ed:0a:22:8c:81:aa:8f:eb:bc:12:f1:3f:3a:71:08:
dd:67:af:c9:19:ac:19:21:16:e8:57:0c:a5:e7:77:
0c:c2:3a:43:e6:f7:76:45:94:a8:9e:da:9a:ff:23:
88:85:8e:b5:7a:f5:5b:48:b5:9c:ad:18:58:b5:67:
49:6d:54:04:55:68:73:56:82:9f:e4:92:a3:f5:c3:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:C9:89:45:8E:FE:74:8D:98:ED:C5:CE:07:51:B2:F4:31:9A:5E
X509v3 Authority Key Identifier:
keyid:E7:02:48:B7:9F:35:1C:03:51:19:29:F6:0D:E5:07:E1:93:42:71:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/E70248B79F351C03511929F60DE507E193427128.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E70248B79F351C03511929F60DE507E193427128.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/mvQxTgRYxUmATKcgCqe64MdDCKGNk3kiVLp1UKNwhRN/0/E70248B79F351C03511929F60DE507E193427128.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:b1:02:09:ea:d5:f3:00:d7:33:78:e9:1f:09:c5:f8:1c:
1b:d4:d4:9c:ec:0d:7c:89:48:3a:fc:f1:e1:90:90:d5:ad:5d:
a1:7f:bd:45:72:27:60:fd:44:4e:2f:0b:fb:65:e2:95:90:90:
43:c3:fd:67:14:f2:ed:0e:fc:fb:c8:8c:0f:38:0d:83:57:de:
03:e7:80:f5:f4:84:38:7d:52:62:b7:1d:6c:12:ed:d3:c8:a9:
9a:b5:4b:90:a3:9c:b1:4a:a4:47:19:8f:c0:3a:35:98:47:c7:
a2:70:ff:8a:e7:24:90:70:a1:b0:f1:fc:83:80:d5:77:58:2a:
62:f1:df:c9:e9:19:6e:14:25:4b:5a:64:77:6b:f6:cc:66:a8:
d3:3d:2b:63:73:c5:49:cb:77:d6:dd:13:34:49:aa:a9:00:67:
76:4e:13:17:34:ca:bc:5d:ae:8c:7f:bb:85:28:35:ea:4b:2f:
4f:78:2b:c6:c7:d2:fa:34:5d:b5:d1:3d:81:f7:60:65:a3:53:
72:c0:50:e1:c1:a9:3b:d0:48:10:48:77:13:16:65:29:52:39:
f2:4f:55:f2:df:a5:28:a0:7e:4e:ed:0e:95:5f:56:43:a9:3b:
08:0d:2c:d1:dd:56:2a:11:a7:23:1a:d7:61:57:68:0f:f9:0b:
61:6b:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:20:05 2026 by rpki-client