Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: ejNi8yZqvfR+LNDAOuHjtxQsu6DiOG5s4cZ8WY8753g=
Subject key identifier: 30:33:CE:AD:5B:DF:EB:2F:C8:E9:27:2E:06:C8:93:83:D7:A7:5D:81
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0F26
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0F1E
Signing time: Mon 20 Oct 2025 00:35:16 +0000
Manifest this update: Mon 20 Oct 2025 00:35:14 +0000
Manifest next update: Wed 22 Oct 2025 00:35:14 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: vJrYb9sgs+Tk1F3Y0iKeL9YxC6Kbcq/Nq5HD7ka405o=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3878 (0xf26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Oct 20 00:35:14 2025 GMT
Not After : Oct 22 00:35:14 2025 GMT
Subject: CN=68f583c2-790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:17:b9:4a:37:55:8a:97:ff:1f:33:e8:00:
56:17:af:16:0c:81:09:98:8c:9d:9f:a7:60:7c:fb:
8b:e1:1f:fc:9b:ef:91:f1:17:02:a4:1e:57:0b:b7:
fb:62:33:b4:35:98:a1:b4:08:8c:13:47:8c:da:c6:
a9:1b:cd:e5:3d:9d:43:bc:d9:f9:9e:88:2b:fa:9f:
61:d2:4d:30:69:8e:5d:9f:4c:e6:c0:51:55:f1:31:
fb:88:48:44:91:d5:e7:9d:be:c9:ce:ca:6a:b1:a1:
3d:44:00:6d:0e:13:39:c9:76:14:70:0f:c1:60:be:
a8:72:5a:70:4b:5b:fc:eb:08:1d:5d:d5:1c:59:94:
b7:ac:0e:31:0e:b0:39:82:af:91:e7:79:4d:44:5e:
7f:57:26:12:ba:d9:95:24:a2:c4:db:fa:b6:4e:23:
70:eb:06:6a:f6:ab:c6:34:91:5e:79:cb:2d:9d:35:
df:42:50:91:db:27:3e:64:6b:48:c7:fc:f6:5f:fa:
40:d0:12:4f:61:2a:a4:b2:c1:14:8f:59:de:7b:07:
46:a4:f4:a4:7e:49:3a:65:d0:5a:75:77:63:b9:ee:
6f:2e:bf:85:08:14:8f:d2:b5:f0:3a:77:89:3b:e7:
a1:c1:29:bd:33:de:b5:c0:cb:f4:d3:e7:36:ea:c0:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:CE:AD:5B:DF:EB:2F:C8:E9:27:2E:06:C8:93:83:D7:A7:5D:81
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:58:84:0f:bc:88:47:2f:05:28:50:03:c7:4b:22:55:6f:32:
9a:65:a7:63:af:8c:b2:d4:cd:b8:6f:b8:54:d9:28:bd:b4:7e:
43:e9:01:96:98:0d:d9:d6:e9:1f:a5:63:35:9d:fb:4c:94:1b:
d9:07:c7:91:1d:9e:b8:40:2c:e8:e8:1a:28:8b:1b:b9:7a:1a:
36:b3:16:f2:c0:ee:74:5a:7a:1d:04:8f:a9:b6:b5:42:c7:b4:
01:b1:83:90:91:2f:14:9c:d1:de:9e:cf:d8:cb:0c:27:eb:d1:
59:cc:c4:c5:ec:60:ae:14:6d:1c:e0:d8:ef:f6:04:a4:f1:6d:
68:8c:45:a8:bd:16:7e:8c:e8:42:6f:a9:dc:c4:70:33:10:6c:
85:9e:78:3c:90:9c:f0:77:90:fc:1b:c8:06:66:e2:f2:a8:b0:
be:2e:2a:4f:b1:21:29:d8:54:37:bb:df:2e:2f:9a:03:ed:6f:
a8:85:14:6f:83:85:51:b4:09:47:bb:45:7d:aa:05:49:84:77:
cf:6b:ad:6f:64:ea:19:0e:56:4c:ad:e5:56:22:ce:df:3f:36:
07:69:92:c4:d4:78:13:9c:b2:fb:ae:1c:ea:d8:1b:5c:73:49:
77:08:88:fe:9d:41:a4:15:e1:c9:e1:cb:e6:80:46:31:db:ef:
db:52:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:17:58 2025 by rpki-client