Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: Q54E/0et8s+MmrKzgmfc9zpLEAuKhkuH2OQlzj3osWk=
Subject key identifier: 1D:4B:F8:4D:E1:70:38:04:43:6A:A5:94:C0:99:2B:D0:81:47:E8:D9
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0EB9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0EB1
Signing time: Wed 02 Jul 2025 00:35:28 +0000
Manifest this update: Wed 02 Jul 2025 00:35:21 +0000
Manifest next update: Fri 04 Jul 2025 00:35:21 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: rntkZwScgKbhMkLyWE7BlfFoJycX76bfZZ2ry6cCuwo=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3769 (0xeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Jul 2 00:35:21 2025 GMT
Not After : Jul 4 00:35:21 2025 GMT
Subject: CN=68647ec9-c647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:d4:99:5a:a0:e2:ed:65:a4:9d:02:9c:17:
4a:36:73:6b:58:02:8f:f7:f5:4c:4f:df:ea:83:47:
07:b6:8e:09:0c:b7:9f:21:f5:d8:08:78:8e:c2:1e:
9e:97:87:48:b2:93:8c:fd:9b:6e:8a:d4:d4:51:72:
ea:28:ff:33:9e:4f:75:5f:cf:ac:b0:8b:aa:83:9a:
b4:56:1b:2b:37:f6:1c:e8:0e:58:df:4e:19:49:95:
8a:3f:a8:4c:3f:29:83:d1:1d:e9:89:81:e6:f7:c1:
46:70:16:a5:b8:d1:35:b9:e8:e0:28:ad:72:06:75:
e7:df:8d:31:4f:48:7b:fe:46:ab:20:3a:f7:70:1b:
2a:8c:1d:67:c0:eb:37:b0:16:03:e7:f5:5f:6e:d3:
f1:43:b6:b5:32:e4:1d:4c:09:f4:09:13:16:1b:dc:
c0:41:8a:29:87:08:cf:59:4d:d2:21:47:6a:62:f9:
9a:ac:9a:a3:fa:31:2e:c6:49:e2:b2:57:84:45:59:
ca:fc:1f:4e:2f:ff:ba:0a:11:ad:1d:a8:ab:30:f1:
62:03:16:5f:e2:42:31:5a:34:2e:dd:27:a5:df:4c:
ab:7e:74:2b:63:8a:58:4b:d8:86:5d:bb:ba:9b:d2:
63:c7:c4:d0:fa:19:28:7b:78:34:dd:16:e5:93:cb:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4B:F8:4D:E1:70:38:04:43:6A:A5:94:C0:99:2B:D0:81:47:E8:D9
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:fc:f0:65:28:11:ef:1a:9c:4d:ec:2a:89:a6:46:4b:cd:95:
e1:c9:31:1d:09:4d:f7:e8:c1:8a:8e:d5:eb:54:1b:e2:23:a6:
10:5f:09:7b:5b:5c:55:6a:dd:df:39:7c:8c:dd:cf:1a:f7:0d:
99:dd:d5:f9:99:a3:83:19:9f:ab:0d:50:2b:dc:c7:3e:7a:9c:
08:d6:59:57:ee:3d:ba:96:0a:e6:2b:03:ea:ff:09:cd:f2:50:
ca:59:f8:ef:7a:62:2a:e7:fb:84:d0:4a:79:b2:a8:97:b9:80:
e4:7c:a0:f3:9a:7a:a4:b6:1e:8e:f4:69:92:65:7f:f8:5f:f1:
b1:49:b2:78:4b:70:fa:7d:a2:c6:e2:16:b1:c1:6a:01:dc:26:
0d:3e:41:f1:8d:2b:c7:c5:15:52:9a:64:d7:aa:3a:63:da:db:
b6:a3:33:c3:12:a8:c6:23:ed:b0:74:71:9c:0c:43:a6:09:84:
e4:af:7b:39:aa:2d:3e:fc:be:e2:0a:5c:08:27:bc:53:7a:bd:
f7:87:9e:2f:24:e2:b9:cd:f9:e0:43:62:d6:7b:83:cf:cb:1e:
f0:e5:19:99:76:2a:48:4f:16:fb:68:3a:63:79:51:ec:6a:62:
f2:89:f1:dd:94:78:e6:1b:bc:00:d2:71:02:19:49:a6:24:37:
20:0a:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:44:36 2025 by rpki-client