This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          DFgZch17/ph64KprVe5i39/xHkmenZbO+VWSXc5PsZg=
Subject key identifier:   2E:5F:A2:4E:EC:FF:5F:0A:4B:6F:AE:75:D0:B2:86:3E:AE:DE:C9:74
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0F8B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0F82
Signing time:             Sun 25 Jan 2026 00:35:15 +0000
Manifest this update:     Sun 25 Jan 2026 00:35:13 +0000
Manifest next update:     Tue 27 Jan 2026 00:35:13 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: 9CeJ+B8CI4/gYl4s+Xf5MVAcUH+HqwXKJauHvZkLjHA=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3979 (0xf8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Jan 25 00:35:13 2026 GMT
            Not After : Jan 27 00:35:13 2026 GMT
        Subject: CN=69756541-6894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:3e:30:17:96:7a:08:30:55:a1:ff:08:c8:
                    a6:ee:dd:1b:0a:af:92:06:86:ba:6d:2a:a6:47:b8:
                    45:79:c9:98:35:c8:de:5b:0a:91:8a:ee:16:18:88:
                    db:49:9b:b0:77:45:e7:5d:c3:f0:94:87:68:66:94:
                    b2:ba:8f:92:d7:f6:4e:f5:b0:12:c5:1e:a3:75:eb:
                    b4:a8:ae:fb:ae:59:68:ef:9b:f0:25:93:48:12:17:
                    91:e3:eb:db:5b:f9:61:57:c3:0b:3f:ac:37:fb:53:
                    ce:2c:91:a0:e7:be:38:70:80:01:1b:dc:80:ff:f3:
                    95:6f:57:fb:cf:29:a8:6a:eb:aa:9e:94:c8:cf:55:
                    ff:9f:a2:ad:d7:d6:05:15:0a:ff:05:29:e3:36:05:
                    22:29:82:83:b3:05:b0:4b:ea:2a:1f:df:3e:44:c5:
                    33:4f:70:b0:9f:39:4f:62:64:e3:25:dc:12:30:10:
                    bb:03:01:4b:63:ff:08:d2:f5:15:9c:01:b6:09:0a:
                    fe:e8:2b:ed:01:bb:e8:c8:2c:4a:82:50:3b:15:69:
                    b1:08:93:a7:c6:85:35:fa:f3:59:74:1a:90:df:4a:
                    b2:bf:73:19:0c:ad:6b:22:27:94:c7:9a:22:58:82:
                    fc:6c:04:6c:ee:71:9d:52:64:4b:8f:c5:26:aa:4a:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5F:A2:4E:EC:FF:5F:0A:4B:6F:AE:75:D0:B2:86:3E:AE:DE:C9:74
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:7f:7a:35:c1:48:04:23:f0:d8:8d:f0:d3:57:63:38:60:7e:
         72:91:64:c9:29:cc:0c:aa:3b:d9:57:2d:40:45:60:d9:75:58:
         04:c9:fa:ff:ba:d3:f2:a5:a9:6c:48:e1:b5:4e:e4:94:5f:dd:
         fe:a6:95:a8:3b:58:2c:ee:cd:3b:15:ee:0f:87:88:9a:17:3b:
         7a:9b:8f:2e:0e:41:a8:04:82:a5:50:cf:0f:41:7b:66:dc:63:
         fa:0d:8b:ab:b4:39:d1:bc:53:5b:3a:49:15:40:35:1d:57:f9:
         de:e2:3d:b8:19:6b:b3:24:a1:e1:a7:d0:73:dc:11:a6:3d:c1:
         47:22:42:5e:4f:2e:78:9b:50:0c:3b:90:33:86:35:c4:95:31:
         7c:82:f3:2a:ca:84:72:8a:b6:35:a1:8a:f1:55:bc:c4:57:64:
         46:61:d7:55:91:c7:63:5f:68:b9:88:1b:31:f6:9b:de:0c:ba:
         13:8a:c7:eb:02:7b:b4:90:68:e9:77:b9:1f:e1:b2:0f:99:ac:
         c2:73:d8:6e:ec:bd:fc:af:47:b2:09:a3:ec:79:53:b9:c6:49:
         56:c4:15:93:cb:6e:a4:dc:c6:64:60:01:35:5c:ac:de:3b:e5:
         d2:08:48:a4:1d:2d:90:b4:59:d0:a7:da:ae:6f:58:4f:b8:a2:
         2d:76:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:19:03 2026 by rpki-client