Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: ad2h8LgXy87itzVhFgtfAWw1KI8AGQ66XkxD5I0AvR8=
Subject key identifier: 97:17:39:70:68:31:B9:93:6D:4A:D3:4D:1B:81:6C:94:B8:90:AD:27
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0F1A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0F12
Signing time: Wed 08 Oct 2025 00:35:16 +0000
Manifest this update: Wed 08 Oct 2025 00:35:13 +0000
Manifest next update: Fri 10 Oct 2025 00:35:13 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: R8sv68b6/w9+sxvy4Y/DosdMEV4UvePDzaTwb4lBnBQ=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 00:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Oct 8 00:35:13 2025 GMT
Not After : Oct 10 00:35:13 2025 GMT
Subject: CN=68e5b1c1-1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:24:88:01:f9:4f:e9:f7:6b:04:81:9d:2b:
d8:7a:f7:c5:2d:f7:26:95:b8:49:cc:6d:b9:5d:37:
de:44:2d:59:6d:49:53:09:8a:9f:7f:fe:0d:78:a8:
9d:5d:d5:a0:b4:a3:a0:75:26:7c:15:4b:ca:c8:04:
87:dc:aa:76:43:8e:ec:1d:4c:f8:25:be:ef:28:b3:
63:eb:94:b6:7f:19:36:b2:b6:c2:8a:0c:22:4a:b2:
d1:38:0b:43:1e:3e:5b:9d:6d:f3:1e:fb:65:28:67:
eb:48:83:57:e4:c9:51:b5:ba:e2:c3:d8:2d:66:52:
f0:ab:10:61:61:ca:26:47:b1:97:d8:06:d4:3c:cb:
3f:8f:99:0e:c2:d0:44:8a:51:7c:99:74:67:c4:1a:
2d:ab:14:5c:b1:60:0f:55:95:07:13:8b:aa:e5:b4:
fa:75:95:8e:eb:7c:45:0a:f6:ad:4d:f8:50:e4:8f:
b1:6f:ed:eb:2e:43:4d:34:5c:e7:35:be:dc:0d:32:
c9:ce:be:b5:d6:d8:81:fa:21:b7:e1:01:dc:c9:a6:
e5:34:ba:50:4d:16:5a:6b:fd:09:d5:d4:ba:2a:1d:
59:56:9b:e7:10:14:42:7e:01:83:1a:5d:75:83:50:
a3:0b:c2:16:ef:b4:82:a3:ca:80:d2:a7:fa:84:b7:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:39:70:68:31:B9:93:6D:4A:D3:4D:1B:81:6C:94:B8:90:AD:27
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:a4:4c:36:44:46:be:42:b7:4d:35:d4:34:df:7d:00:ee:cd:
89:7e:d9:af:3a:70:c6:60:24:73:9a:03:c9:78:7d:26:54:f6:
af:61:d9:dc:eb:7a:03:2c:17:07:62:ed:53:c4:66:7a:ec:55:
9b:cf:6b:ab:f9:aa:31:ed:3a:ce:25:9c:71:21:c4:b3:4d:77:
9d:a2:9c:80:ec:21:34:89:e9:7b:d7:b1:37:52:fe:bd:1e:f1:
23:cc:58:f7:ea:d4:e9:3c:b2:32:9a:70:48:13:63:c2:05:13:
3d:e2:db:82:31:d3:03:bf:bf:e3:e7:b0:8f:ee:09:52:2b:b0:
ef:44:40:94:45:c3:92:b9:20:5e:95:2b:91:10:cc:f8:22:98:
57:d4:7e:c3:48:1d:da:2f:cc:e4:e1:c9:5a:f4:61:a3:bc:cf:
0e:f4:54:91:bf:4f:58:7e:cb:97:f5:7b:58:df:3c:5b:61:56:
c6:40:81:11:d4:ba:70:a0:a5:53:65:35:15:75:d9:5c:07:ef:
9f:0b:02:dd:1f:46:5b:39:8e:88:0b:fb:f1:12:0c:68:a6:d2:
8d:f9:b0:27:12:b3:e8:d1:d8:04:12:95:83:cc:9f:34:32:7d:
f6:98:03:63:73:7c:d3:df:d5:11:66:b6:40:09:17:f0:90:a0:
0e:85:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:30:35 2025 by rpki-client