This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
File: 4959F557EDB40C3E3B7D450A5F4FE57884600618.mft (raw, json)
Hash identifier: bO6t9Q3N4k9FgxAVFi19k/kZVNe4brebkF4FUEgbsto=
Subject key identifier: 8A:08:B5:C7:96:48:B3:FB:6B:55:5B:CD:40:36:C0:B5:72:51:6D:F6
Authority key identifier: 49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
Certificate issuer: /CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Certificate serial: 1FAAF414543E04CBBFEE00752E21D9D2AD6D9098
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
Manifest number: 02AA
Signing time: Sun 11 Jan 2026 21:56:06 +0000
Manifest this update: Sun 11 Jan 2026 21:51:06 +0000
Manifest next update: Mon 12 Jan 2026 23:53:06 +0000
Files and hashes: 1: 3230302e31302e35362e302f32322d3234203d3e203631393330.roa (hash: IeXUMqTD+Japny11NJhGMFTRJW0pIY9flSE1LpaOesQ=)
2: 323830343a313836383a3a2f33322d313238203d3e203631393330.roa (hash: womes7nW6j6cJzPaigMdTVDQyMe9VIOJq6T7IXcSnzo=)
3: 4959F557EDB40C3E3B7D450A5F4FE57884600618.crl (hash: oFFCnfMTPfpEWl8YNJzzvIgm5R2TQ/3Uz++MDKpF85k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Jan 2026 23:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:aa:f4:14:54:3e:04:cb:bf:ee:00:75:2e:21:d9:d2:ad:6d:90:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Validity
Not Before: Jan 11 21:51:06 2026 GMT
Not After : Jan 12 23:53:06 2026 GMT
Subject: CN=8A08B5C79648B3FB6B555BCD4036C0B572516DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:7f:76:94:ef:88:97:9f:e7:83:9f:f8:6c:
a9:51:8b:86:ef:5a:70:c5:ca:27:0b:35:ae:49:c3:
67:79:f6:b2:95:45:08:45:5d:66:86:6e:a5:77:ff:
db:93:4e:46:0d:06:81:0d:7c:ef:f6:6b:c5:b7:ca:
e7:c3:93:15:d1:ff:2b:2c:19:e0:3c:04:d9:eb:92:
9c:bb:3d:30:8e:26:78:b0:b7:90:6d:d4:85:f8:40:
a4:c1:82:ea:80:9f:b2:a0:82:6c:a8:1e:17:c4:0a:
09:36:3b:39:8c:55:b2:a4:35:70:0f:b2:25:cf:22:
34:f3:be:17:69:7b:9c:89:d5:72:56:2e:8c:95:8b:
84:cd:a6:94:b4:ba:22:39:7f:49:69:5e:56:1f:4c:
f5:7f:51:28:78:3f:d6:e0:6e:d0:8d:1e:6c:d7:f5:
3b:d8:f6:56:21:bb:1e:46:6b:c8:87:e6:83:f0:c6:
35:07:58:be:e0:86:60:96:da:3d:43:ad:13:04:32:
73:52:98:2c:a9:cb:97:dc:31:15:ce:ed:c3:9f:cc:
09:d0:a1:cd:de:e0:2b:29:2e:e2:ce:6c:68:ea:0f:
fd:07:89:5a:69:e0:2b:4b:76:43:5c:ce:f0:80:79:
57:49:44:7e:21:fe:8b:38:d8:f1:24:ee:fd:6f:fd:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:B5:C7:96:48:B3:FB:6B:55:5B:CD:40:36:C0:B5:72:51:6D:F6
X509v3 Authority Key Identifier:
keyid:49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:48:2e:fd:bf:9e:91:c0:4a:95:da:50:fd:cd:7b:34:ab:00:
71:ae:2b:f4:2c:20:c9:25:c0:08:d5:76:bd:ad:59:b4:84:ba:
32:20:ef:00:fb:a8:ed:e7:6c:8e:46:8f:ac:81:c6:84:81:ea:
94:bf:a0:21:6e:b4:c0:a5:83:d5:fe:f4:6a:99:be:9c:09:cd:
7c:a2:7a:77:f6:1e:6d:07:1a:07:b0:d5:0c:c7:aa:6f:a9:25:
76:5e:ad:6f:55:94:d7:af:0e:57:f6:96:bd:e5:5d:db:bc:cb:
71:d8:68:c2:e2:70:04:aa:aa:49:92:c7:f3:e0:0f:c3:52:bf:
47:9a:1f:71:e6:f9:d1:c2:10:e0:06:84:d0:41:b6:ad:94:f0:
01:ce:84:41:a8:d3:96:d6:b7:24:fd:c1:69:b4:4b:6e:73:9d:
d8:08:7e:68:c9:bc:97:77:29:41:6b:98:bd:c9:0b:b4:06:ee:
0c:3c:4b:d0:22:a7:30:04:f1:a0:22:77:7b:b1:d1:91:a3:cd:
ff:74:8a:aa:80:42:c7:ee:f6:a3:23:f9:bb:23:c9:09:ea:d1:
a9:10:d2:21:e2:14:7e:29:5c:bc:fe:70:fc:2e:56:cf:0c:c4:
23:cb:41:77:e4:0f:80:44:5c:bd:18:72:91:26:24:56:93:02:
17:66:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:45:18 2026 by rpki-client