
$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
File: 166002DF14C56775A516493F63DE105DB90809F3.mft (raw, json)
Hash identifier: 6URKvPWmkHoJSc48HLorGlP7uNVaA+eMpXIk9x9zqvw=
Subject key identifier: 38:B9:38:DA:10:F5:39:E4:0F:FD:BC:9B:9D:A4:DC:0C:89:68:D5:4D
Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
Certificate issuer: /CN=166002DF14C56775A516493F63DE105DB90809F3
Certificate serial: 6E6EB1D0427044BFBC6DB28C4B965D2CE6B16C56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
Manifest number: 01B4
Signing time: Mon 02 Mar 2026 11:20:27 +0000
Manifest this update: Mon 02 Mar 2026 11:15:27 +0000
Manifest next update: Tue 03 Mar 2026 12:35:27 +0000
Files and hashes: 1: 323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (hash: PHSDjfnBHkB9HmZhbGZ5q3XuKfWc/d8jLBkmMXoaauc=)
2: 166002DF14C56775A516493F63DE105DB90809F3.crl (hash: yxtURApb/FKZ7YwOhX/fMxdJLoa99Z8UBAtAw+WOWKw=)
3: 3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (hash: iQm1N7IdGlMcbLJXDQpyRNEhSnB/X9hAFXnkCV0tsnw=)
4: 3137302e3233392e3137362e302f32322d3332203d3e20323635323339.roa (hash: mUHah8NtMU4Mwl/oVJwau4tBwzo8P/nJRcYyoHkAOes=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:b1:d0:42:70:44:bf:bc:6d:b2:8c:4b:96:5d:2c:e6:b1:6c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3
Validity
Not Before: Mar 2 11:15:27 2026 GMT
Not After : Mar 3 12:35:27 2026 GMT
Subject: CN=38B938DA10F539E40FFDBC9B9DA4DC0C8968D54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:c4:dd:6c:b4:fe:fa:01:94:6b:c6:7e:8a:
a0:3d:2c:84:2f:ae:8b:d1:49:02:c1:94:84:5d:27:
af:1f:db:a4:01:e0:e7:41:f6:d5:6e:5d:3f:4f:9f:
5b:46:d8:e4:c9:f1:94:09:a5:03:e3:c5:2d:71:38:
0c:5e:5b:e8:fe:01:b9:8e:55:91:a6:42:8f:be:80:
4a:dd:cc:d0:0e:96:71:1a:de:58:7e:ae:fd:7b:5d:
7c:2e:00:6e:4f:6e:01:b8:e0:a1:43:f9:ee:05:ab:
f5:7a:65:1b:27:a1:c3:90:6e:14:6d:57:b5:39:a6:
eb:b7:63:81:cc:ff:9f:cd:8d:7d:ec:1e:ac:06:f2:
55:89:8f:7e:67:8d:2e:41:dd:df:db:31:e4:72:61:
15:36:f8:fa:c9:59:e0:fe:c2:12:08:65:12:3f:55:
4f:09:5f:ba:9b:21:10:16:b9:85:28:1a:95:01:f3:
50:d9:5e:19:fb:72:3c:ab:48:fc:f7:51:5a:0f:69:
50:a0:aa:00:89:19:1a:cb:54:5a:2e:1d:55:98:ea:
75:f8:2a:6c:80:c6:2f:a8:b8:56:32:71:14:d0:a8:
2e:44:76:9a:a3:2c:d0:f7:9c:08:e5:73:f3:3f:96:
7a:0f:15:c9:48:9d:bc:46:a0:af:25:cf:7a:9f:ca:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:38:DA:10:F5:39:E4:0F:FD:BC:9B:9D:A4:DC:0C:89:68:D5:4D
X509v3 Authority Key Identifier:
keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:c0:a2:0e:f9:e8:34:7f:4f:28:74:34:1e:ce:99:fe:32:
00:98:9e:17:75:20:29:5e:3f:3b:30:f1:4b:cb:6b:83:5c:57:
70:3e:46:bc:69:95:b7:ab:ae:3b:7e:d2:74:5f:63:97:aa:a2:
ce:3c:fd:25:9a:67:d6:31:0d:1a:43:78:70:e4:60:b5:f7:72:
07:5c:f4:40:ab:02:68:f2:d4:33:fd:02:54:4b:be:1d:d5:04:
eb:81:f9:0e:f8:eb:0b:91:13:a4:1a:f9:9b:10:0b:9e:7d:86:
c6:99:e5:b0:2c:13:77:00:d7:c7:41:9a:b5:1f:bc:7d:09:2c:
a1:84:6c:f9:22:d8:12:2d:67:8a:d8:7d:ea:99:24:96:ab:86:
6b:1e:29:34:58:20:55:c9:99:41:4b:a4:81:35:7b:55:7c:84:
5a:54:78:8d:1e:4a:6a:a4:1a:47:75:b4:ad:44:67:0f:d4:28:
46:8d:54:e1:f7:a2:f8:83:c2:d3:c3:cb:19:e1:3a:9e:53:71:
16:04:e8:f6:42:2e:bd:f7:2c:93:82:d8:75:42:86:11:c8:ec:
4c:d4:46:46:b4:bd:68:27:b9:f9:79:b0:ca:bb:33:6e:de:63:
c7:ee:1d:cb:60:9d:4c:a0:ec:fb:b7:c4:01:1f:90:59:ff:38:
37:6f:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:39 2026 by rpki-client