Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: 0TEVClmvRQpS1lEt9pm2VepZmb8snWvL5NQ6Zuo+Kl8=
Subject key identifier: C4:38:68:D2:EA:8B:E9:52:62:BB:86:CB:2A:76:B4:ED:C1:EE:D8:09
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0FF9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0FF0
Signing time: Wed 13 May 2026 00:35:14 +0000
Manifest this update: Wed 13 May 2026 00:35:12 +0000
Manifest next update: Fri 15 May 2026 00:35:12 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: aBdScnr62xx/tEgIm1nqBiKLA0mpMeGH6tUJs0Q/t8Q=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4089 (0xff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: May 13 00:35:12 2026 GMT
Not After : May 15 00:35:12 2026 GMT
Subject: CN=6a03c740-38ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:0f:12:2b:cf:1d:c7:96:90:05:24:09:c5:
ce:27:b1:1d:36:be:74:a1:6e:2d:5e:ec:e7:d8:64:
6e:42:b8:81:48:1c:43:e1:fe:3d:a1:a6:f8:1f:4c:
7f:f0:cd:98:d3:4c:9c:cd:e5:5a:9c:ac:ac:9a:35:
44:d7:1b:35:25:1b:9b:d5:02:12:7d:c6:c4:16:e7:
01:04:d2:40:05:02:5a:82:3e:fa:5c:1e:10:fd:ad:
8f:18:76:27:31:6a:50:cc:c0:eb:91:60:1a:69:1d:
8a:96:0d:b4:fa:3e:08:16:4c:45:6e:79:4a:53:b4:
11:25:1e:c8:e0:70:a2:30:18:a5:55:2d:1e:6a:a9:
cc:49:e9:00:c3:21:f6:26:ef:7c:e6:4f:34:dc:cd:
58:41:18:eb:6b:40:e2:b4:f0:72:67:2a:52:1c:f9:
53:93:93:2f:ef:0a:ee:73:1f:4a:14:86:30:df:48:
80:4e:a2:a6:bd:05:20:6b:87:a9:bc:8c:b6:fa:3a:
3b:3c:a2:bf:8f:10:5f:07:a5:d9:b8:3b:01:66:27:
54:cd:48:25:ef:61:3b:71:ee:fd:6a:1a:dc:af:2a:
ba:a4:0e:09:e3:2d:3b:dd:c6:e2:fd:df:6d:0d:6f:
a1:1e:77:87:cf:8c:d0:fe:41:97:7e:50:d6:1d:0a:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:38:68:D2:EA:8B:E9:52:62:BB:86:CB:2A:76:B4:ED:C1:EE:D8:09
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:8f:42:f0:ab:ae:00:8d:2a:37:b9:25:31:36:58:bf:33:
cc:b0:85:56:f8:b7:29:67:1f:db:0e:ac:6f:a2:ca:79:9f:4f:
49:19:a6:ae:88:61:77:8c:e9:68:c6:17:1b:ab:bc:33:8c:fc:
9f:a4:2a:4a:91:14:3b:e7:74:f4:71:f7:52:f4:cb:51:50:0a:
5d:57:71:4d:73:e1:49:b1:00:80:a8:cc:16:6a:bc:5f:dc:b5:
52:cc:ce:6f:a3:c8:41:ba:fb:66:c9:07:9f:6f:06:a7:b4:a0:
7b:98:34:d4:1c:e1:5d:48:da:94:d4:c3:1a:57:ef:c4:84:a5:
b0:8b:75:8b:64:05:3a:34:c5:c5:46:8a:97:d1:41:82:ad:b2:
dd:06:7d:13:b0:fd:b8:5b:19:6d:1d:60:ff:7e:b5:08:00:ed:
a6:08:27:25:9a:1f:ed:fa:2d:8d:6d:e6:8c:05:3d:90:b8:a6:
6d:18:67:fe:02:19:64:1e:45:69:37:83:cb:6e:d9:4f:67:00:
f8:50:1b:0e:14:6e:e6:83:af:83:92:95:1f:e6:fe:ff:39:cb:
55:47:5a:a0:92:99:2d:da:3d:27:61:e9:6a:a7:64:54:d2:b7:
28:e6:78:96:97:5c:41:07:f6:93:3d:d1:7d:f4:cd:c8:08:09:
67:f5:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:27 2026 by rpki-client