
$ rpki-client -vvvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
File: 166002DF14C56775A516493F63DE105DB90809F3.mft (raw, json)
Hash identifier: jbvEFVz9MBmE/3tnKTa8milqFmMGNZEu0Y6O9X9udYA=
Subject key identifier: 2B:9B:FE:24:B4:78:12:0A:A8:84:0B:EE:4A:17:8E:DE:B9:15:6B:E9
Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
Certificate issuer: /CN=166002DF14C56775A516493F63DE105DB90809F3
Certificate serial: 59D21F7ED7003F506C4987D0373ED1E1BE84B1B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
Manifest number: 02F8
Signing time: Mon 02 Nov 2026 02:33:08 +0000
Manifest this update: Mon 02 Nov 2026 02:28:08 +0000
Manifest next update: Tue 03 Nov 2026 04:28:08 +0000
Files and hashes: 1: 3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa (hash: 7GLimDnbaEm9OfOyhfe+UB2Uo7amEjFTgGy/4hVMQik=)
2: 166002DF14C56775A516493F63DE105DB90809F3.crl (hash: EkX/nb351P/AvLtuivY/lhOvwZ9T4pDcD8xCblPozqI=)
3: 323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (hash: 0UTDzY9kja11mn8+bSp0w7XuOCuuZGpuDpAp/4WcVMU=)
4: 3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (hash: dBmQyEHk1QKOQTj2z+bL28t1HCKqDCGBjbMlLsYOEog=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 04:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d2:1f:7e:d7:00:3f:50:6c:49:87:d0:37:3e:d1:e1:be:84:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3
Validity
Not Before: Nov 2 02:28:08 2026 GMT
Not After : Nov 3 04:28:08 2026 GMT
Subject: CN=2B9BFE24B478120AA8840BEE4A178EDEB9156BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:42:28:ab:11:c5:a9:cf:08:74:24:95:00:
e4:82:84:8d:0a:17:f5:b7:c0:87:42:c9:91:aa:f2:
ff:c4:25:61:42:78:93:10:97:cf:5c:97:51:c9:a7:
55:53:75:2a:50:f3:14:8a:ee:1c:80:50:05:50:14:
de:cf:ff:16:8e:bb:31:4f:c1:2c:26:84:f0:e9:a6:
6f:43:e9:84:dc:a2:97:97:7a:e8:c9:72:5d:4e:b9:
9a:f7:16:31:18:d0:06:7d:3a:35:ac:27:62:0a:c3:
1d:bf:b3:53:45:7d:54:d0:98:08:46:2f:a7:66:68:
c6:0a:40:0a:65:66:b6:d5:d2:03:55:81:a7:7e:21:
a3:83:0e:ae:61:b4:66:3a:85:08:9c:81:0d:23:18:
0a:eb:7c:13:ac:c5:ac:e9:23:02:12:03:e5:f8:5c:
5b:1a:f1:47:e4:1e:0a:2a:b7:f9:53:09:4e:4a:d6:
ed:d4:36:68:d0:42:aa:e7:1f:26:94:c4:1f:a9:b8:
35:c3:bb:86:67:bb:69:05:31:1d:05:52:c8:cc:63:
55:a9:17:49:09:ab:57:ff:b5:70:ae:55:71:0e:15:
de:16:0d:f1:85:f4:71:d6:ae:39:46:1f:ea:f4:10:
c4:53:8b:ac:44:0a:ed:eb:a9:9e:c5:4b:9d:53:51:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:FE:24:B4:78:12:0A:A8:84:0B:EE:4A:17:8E:DE:B9:15:6B:E9
X509v3 Authority Key Identifier:
keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e9:1b:07:72:2e:94:f4:47:fd:5b:ae:d2:2a:fa:b0:4d:3c:
2f:7a:83:e6:e5:1d:90:4c:51:dd:47:bc:ca:b8:27:eb:41:6a:
45:8c:39:7e:47:7c:15:bc:51:d8:41:9c:86:b5:90:a2:4b:40:
77:e5:0e:d5:52:44:08:a0:b2:c6:11:e3:48:09:be:20:25:98:
1c:db:dc:d9:22:6c:89:8f:49:25:ae:04:fe:be:b9:15:42:9e:
f3:76:75:70:4c:9c:ac:7d:c2:9f:e7:27:e9:17:60:d7:fc:21:
c0:a9:d6:28:cc:69:f1:93:7a:6c:11:3c:44:cd:75:f3:04:ae:
f7:1e:b1:2b:f7:df:43:e3:48:d8:67:71:04:b7:f6:0f:70:08:
47:04:8d:a4:e5:9b:15:11:3f:0c:13:6a:aa:7a:bd:d8:ba:c0:
3a:6d:f8:05:49:5c:71:3f:84:88:2b:c4:20:e3:9f:1a:d1:89:
21:b7:14:80:3b:4b:dd:b6:dc:35:fd:59:1e:a6:35:55:f2:e6:
50:ee:27:0d:f0:ea:90:d6:6a:89:1b:a9:4c:ac:5d:aa:c8:1a:
c9:95:84:69:7c:c8:af:8b:d0:27:7d:49:9d:79:ea:43:6b:f8:
9d:39:25:71:13:ed:23:79:80:17:b6:9f:77:f7:09:7e:f4:5d:
52:bd:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:28:44 2026 by rpki-client