This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          k7qyAqNFKVjggO+ylMFY0OOwRADsAuXBZjcj0iRJPuQ=
Subject key identifier:   BB:F4:30:0D:6C:94:82:8E:EE:10:8D:5A:CE:1C:D3:1A:76:60:9A:A2
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0F57
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0F4F
Signing time:             Sat 06 Dec 2025 00:35:15 +0000
Manifest this update:     Sat 06 Dec 2025 00:35:12 +0000
Manifest next update:     Mon 08 Dec 2025 00:35:12 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: a+HoVlq8mLzeGTa2Adf7LsSRysI3JJPgQxjE7rZ5Bio=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3927 (0xf57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Dec  6 00:35:12 2025 GMT
            Not After : Dec  8 00:35:12 2025 GMT
        Subject: CN=69337a41-6d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:c8:ff:c3:0f:05:53:62:63:a1:19:5c:6f:
                    bc:c2:26:24:6c:14:2c:03:31:94:eb:a0:2d:e4:67:
                    bf:ee:a1:93:bd:90:37:43:f6:88:92:c1:28:7f:fd:
                    fd:39:de:3c:ec:20:d3:dc:dc:d4:25:8f:87:94:90:
                    dc:df:47:44:f0:43:a8:83:33:56:ac:8b:a5:ca:c3:
                    f9:44:6a:d6:77:d2:cc:dc:a8:96:0c:fe:7d:f2:a6:
                    1c:ca:0a:9e:72:28:e4:28:5d:c6:79:1e:dd:22:0b:
                    08:aa:2c:47:83:5d:01:bb:67:36:5a:f1:ce:ef:9d:
                    cd:49:35:56:bf:fd:e1:13:9d:8e:f6:0b:8b:d7:54:
                    bc:03:2c:bb:87:5b:9b:06:f1:82:f8:d8:02:bc:59:
                    b8:2e:fd:51:ae:e4:50:e5:d2:96:5c:ae:f8:96:24:
                    e6:bb:34:5c:cf:f3:90:a0:c9:ea:ee:bc:19:3e:84:
                    63:e1:dd:cc:d4:84:74:b9:5a:be:fb:37:73:df:d1:
                    c3:51:97:3f:48:eb:29:a1:cb:a5:33:97:1f:92:f4:
                    40:80:bb:4f:2c:1f:79:dc:30:51:e8:67:67:0c:ce:
                    c2:b5:2e:17:5d:25:aa:bd:a6:d9:3b:8b:2d:ce:2f:
                    0b:35:bf:bf:4f:18:2b:5d:0a:3c:84:50:74:12:eb:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F4:30:0D:6C:94:82:8E:EE:10:8D:5A:CE:1C:D3:1A:76:60:9A:A2
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:85:99:5e:e0:d5:fa:1a:16:73:40:09:b5:86:da:c1:4b:
         27:f3:7c:b9:fe:69:de:8f:87:3e:c9:2d:c9:16:7b:f1:d3:ba:
         69:69:75:8e:2a:58:d1:1a:cb:60:82:08:7b:cd:d6:3f:87:b0:
         f2:d9:42:ed:8e:3f:b1:a9:33:c6:e2:93:79:c3:c9:2c:fe:f8:
         54:09:4b:a4:10:53:c0:b0:46:2f:4c:90:30:6d:f9:b8:39:12:
         12:3d:f0:b0:ce:84:b8:7a:6b:a6:ae:23:c9:0b:b3:c2:4a:03:
         64:4f:d6:37:a9:09:bf:5c:8f:ec:a2:dc:39:83:65:e5:fd:d0:
         32:ad:8a:f9:08:a3:05:df:68:4d:c9:b9:3e:74:a2:01:8a:3f:
         64:8a:b7:b5:5b:6a:e6:d1:33:24:d6:bc:c4:e2:50:7f:05:68:
         29:6d:26:d6:83:21:d9:3f:21:07:be:37:f2:c2:84:0d:37:c5:
         6a:4d:54:dd:7e:c1:5a:f0:fc:21:0f:df:46:92:0b:19:0c:7c:
         13:cc:d8:57:d8:ca:19:27:dc:c8:5d:de:75:e1:93:81:9d:3b:
         02:a4:71:ed:67:b4:22:48:03:96:80:be:99:f8:25:ab:dd:39:
         78:ec:f8:12:c4:80:20:26:33:e8:39:b4:a6:a6:01:74:58:c9:
         11:1e:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:07 2025 by rpki-client