Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          3XiyCYo5vtwNA4wUhg8TFXeRH2kaZLe2Mf276eP8yXc=
Subject key identifier:   78:9B:A0:B7:D0:FD:F7:54:C0:04:10:17:D3:15:39:0B:E1:B5:E2:57
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0FC7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0FBE
Signing time:             Thu 26 Mar 2026 00:35:14 +0000
Manifest this update:     Thu 26 Mar 2026 00:35:12 +0000
Manifest next update:     Sat 28 Mar 2026 00:35:12 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: jGEcKL6lGM3BcBj2FxF2bqg6Ys6Hi/cleyXKKSyCz8g=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4039 (0xfc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Mar 26 00:35:12 2026 GMT
            Not After : Mar 28 00:35:12 2026 GMT
        Subject: CN=69c47f40-11c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:d4:aa:fd:7d:cc:ac:83:29:ba:d7:23:52:
                    47:65:b0:13:00:e9:aa:e4:e0:2c:fd:13:8a:56:c4:
                    e4:29:5c:e1:76:a1:50:82:53:17:1a:3e:45:d6:0c:
                    6d:c3:bf:62:de:49:09:01:14:a8:a1:67:51:87:98:
                    5f:13:4b:06:84:fc:55:e5:6e:bf:ef:fe:45:3e:1e:
                    b2:4a:5e:7d:45:63:cd:d6:69:fb:e1:a0:3d:ea:36:
                    8b:2d:1d:df:bf:23:75:f6:51:6b:9b:80:46:5a:42:
                    da:df:1f:16:c4:77:12:22:47:3e:0d:8d:a4:f9:56:
                    7b:9d:50:78:f0:cb:e6:63:0e:fa:98:86:d2:34:1f:
                    08:9e:91:62:9b:13:1e:c4:3a:7f:db:79:19:b4:15:
                    52:ea:68:b4:05:2f:aa:5d:20:2c:4a:0d:01:b2:69:
                    d5:4b:14:cb:ed:0d:11:b6:4d:09:d3:79:56:a8:ad:
                    48:b6:65:f9:db:53:7d:07:82:6d:fc:04:df:67:e2:
                    d0:82:fc:bb:be:34:24:45:21:64:9a:c8:9b:7f:2f:
                    5f:01:15:a9:a6:cd:75:8b:6e:1a:e6:8b:6e:bc:f7:
                    93:4e:e9:43:ba:a7:08:42:d1:8c:e0:40:1b:dc:6b:
                    c3:13:ed:20:69:bd:f6:cd:4d:74:d0:0b:48:40:5a:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:A0:B7:D0:FD:F7:54:C0:04:10:17:D3:15:39:0B:E1:B5:E2:57
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:26:ea:93:10:17:e0:a6:cb:13:7b:9d:8a:92:10:bb:59:
         33:d6:38:39:3a:f0:70:fa:26:93:c0:bd:e1:fa:1b:b7:18:e0:
         25:ce:9c:58:cf:10:4c:5f:47:9e:e3:4f:4b:07:24:1b:07:05:
         b5:38:18:ad:fd:04:82:15:35:e9:cb:52:02:6e:71:62:29:0d:
         b4:c7:19:06:5c:b1:83:b1:0d:a3:b9:27:61:a0:30:9b:3b:d4:
         82:93:64:1f:bc:82:0e:07:bd:a4:38:c9:fa:1a:48:ec:67:33:
         9a:db:53:16:8f:93:94:7b:7c:8a:5b:c9:d0:3c:2a:51:59:54:
         08:6c:cf:ed:eb:56:05:51:17:ee:ef:68:5b:6a:ca:b1:17:35:
         f9:f2:b4:09:a5:4a:56:40:a7:6d:13:35:7c:f4:aa:07:a8:ef:
         c2:05:2c:ea:cb:7d:aa:f7:e0:f7:12:7a:e2:40:38:87:ed:50:
         1e:46:5d:23:bd:e7:8c:a2:ce:fe:8d:a0:df:f3:08:58:d1:b6:
         74:e2:50:dd:10:f3:b3:c5:24:34:05:78:94:ad:64:aa:a6:04:
         4f:8a:81:ac:74:bb:7c:e9:54:b8:74:18:0b:4c:ec:d5:89:19:
         a7:a9:9a:ab:5f:70:1f:aa:3a:04:d8:b0:eb:d2:ca:51:04:d0:
         e0:c0:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:13:28 2026 by rpki-client