This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: k7qyAqNFKVjggO+ylMFY0OOwRADsAuXBZjcj0iRJPuQ=
Subject key identifier: BB:F4:30:0D:6C:94:82:8E:EE:10:8D:5A:CE:1C:D3:1A:76:60:9A:A2
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0F57
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0F4F
Signing time: Sat 06 Dec 2025 00:35:15 +0000
Manifest this update: Sat 06 Dec 2025 00:35:12 +0000
Manifest next update: Mon 08 Dec 2025 00:35:12 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: a+HoVlq8mLzeGTa2Adf7LsSRysI3JJPgQxjE7rZ5Bio=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3927 (0xf57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Dec 6 00:35:12 2025 GMT
Not After : Dec 8 00:35:12 2025 GMT
Subject: CN=69337a41-6d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:c8:ff:c3:0f:05:53:62:63:a1:19:5c:6f:
bc:c2:26:24:6c:14:2c:03:31:94:eb:a0:2d:e4:67:
bf:ee:a1:93:bd:90:37:43:f6:88:92:c1:28:7f:fd:
fd:39:de:3c:ec:20:d3:dc:dc:d4:25:8f:87:94:90:
dc:df:47:44:f0:43:a8:83:33:56:ac:8b:a5:ca:c3:
f9:44:6a:d6:77:d2:cc:dc:a8:96:0c:fe:7d:f2:a6:
1c:ca:0a:9e:72:28:e4:28:5d:c6:79:1e:dd:22:0b:
08:aa:2c:47:83:5d:01:bb:67:36:5a:f1:ce:ef:9d:
cd:49:35:56:bf:fd:e1:13:9d:8e:f6:0b:8b:d7:54:
bc:03:2c:bb:87:5b:9b:06:f1:82:f8:d8:02:bc:59:
b8:2e:fd:51:ae:e4:50:e5:d2:96:5c:ae:f8:96:24:
e6:bb:34:5c:cf:f3:90:a0:c9:ea:ee:bc:19:3e:84:
63:e1:dd:cc:d4:84:74:b9:5a:be:fb:37:73:df:d1:
c3:51:97:3f:48:eb:29:a1:cb:a5:33:97:1f:92:f4:
40:80:bb:4f:2c:1f:79:dc:30:51:e8:67:67:0c:ce:
c2:b5:2e:17:5d:25:aa:bd:a6:d9:3b:8b:2d:ce:2f:
0b:35:bf:bf:4f:18:2b:5d:0a:3c:84:50:74:12:eb:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:30:0D:6C:94:82:8E:EE:10:8D:5A:CE:1C:D3:1A:76:60:9A:A2
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ff:85:99:5e:e0:d5:fa:1a:16:73:40:09:b5:86:da:c1:4b:
27:f3:7c:b9:fe:69:de:8f:87:3e:c9:2d:c9:16:7b:f1:d3:ba:
69:69:75:8e:2a:58:d1:1a:cb:60:82:08:7b:cd:d6:3f:87:b0:
f2:d9:42:ed:8e:3f:b1:a9:33:c6:e2:93:79:c3:c9:2c:fe:f8:
54:09:4b:a4:10:53:c0:b0:46:2f:4c:90:30:6d:f9:b8:39:12:
12:3d:f0:b0:ce:84:b8:7a:6b:a6:ae:23:c9:0b:b3:c2:4a:03:
64:4f:d6:37:a9:09:bf:5c:8f:ec:a2:dc:39:83:65:e5:fd:d0:
32:ad:8a:f9:08:a3:05:df:68:4d:c9:b9:3e:74:a2:01:8a:3f:
64:8a:b7:b5:5b:6a:e6:d1:33:24:d6:bc:c4:e2:50:7f:05:68:
29:6d:26:d6:83:21:d9:3f:21:07:be:37:f2:c2:84:0d:37:c5:
6a:4d:54:dd:7e:c1:5a:f0:fc:21:0f:df:46:92:0b:19:0c:7c:
13:cc:d8:57:d8:ca:19:27:dc:c8:5d:de:75:e1:93:81:9d:3b:
02:a4:71:ed:67:b4:22:48:03:96:80:be:99:f8:25:ab:dd:39:
78:ec:f8:12:c4:80:20:26:33:e8:39:b4:a6:a6:01:74:58:c9:
11:1e:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:07 2025 by rpki-client