Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          E4YpfAuiD9T3OV4f+Ojks3Utq6RXURowG30cvxjHVpU=
Subject key identifier:   76:DA:AD:3A:D0:6B:D2:BB:63:3A:98:89:5F:C9:29:D5:DB:E3:46:D2
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0FCB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0FC2
Signing time:             Mon 30 Mar 2026 00:35:13 +0000
Manifest this update:     Mon 30 Mar 2026 00:35:11 +0000
Manifest next update:     Wed 01 Apr 2026 00:35:11 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: AwC6XtE/ei0onKVHHdS/3OpSf5qdPBq6pGJw2l6tVrU=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 01 Apr 2026 00:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4043 (0xfcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Mar 30 00:35:11 2026 GMT
            Not After : Apr  1 00:35:11 2026 GMT
        Subject: CN=69c9c53f-a394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:b2:16:5f:57:7a:25:8f:99:0c:46:1a:14:
                    74:59:c3:55:9d:3a:26:9f:cb:16:61:39:0b:a6:66:
                    86:48:21:eb:58:13:24:97:97:17:da:9e:ac:c5:b2:
                    27:d8:f5:a2:62:e9:f4:fb:a9:8c:ba:64:b6:84:85:
                    fb:5b:b2:cb:19:7b:f8:3b:73:51:9a:10:a0:38:0c:
                    1e:c1:02:ae:9a:d0:98:43:4f:b1:1f:7e:d5:f4:be:
                    bd:97:27:48:9e:d7:72:a7:5e:07:44:8c:1e:89:fa:
                    d5:23:a1:9e:44:93:12:3d:07:ff:77:57:15:1a:7e:
                    2a:ba:51:d4:bf:e3:e9:e0:c0:62:8b:c7:84:e1:d2:
                    7b:c9:52:73:d9:50:d1:65:2f:b2:f8:90:e8:d3:00:
                    0a:fa:e8:0e:39:4c:81:fd:9a:13:a5:e6:6b:df:6e:
                    c3:2b:61:04:62:bd:26:d2:9b:5b:ac:56:a9:9c:98:
                    0c:6c:16:3e:74:b9:06:1d:ac:85:8f:e9:7f:e2:68:
                    98:29:e0:3c:07:1b:d4:cb:54:ba:66:26:63:c6:10:
                    25:5d:05:af:79:91:ba:7b:ef:35:80:d7:36:5b:1d:
                    1f:3c:f5:48:bc:77:e9:ff:41:37:84:04:13:4b:f4:
                    af:25:93:e5:62:5a:67:99:83:63:f1:f6:ca:8c:05:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DA:AD:3A:D0:6B:D2:BB:63:3A:98:89:5F:C9:29:D5:DB:E3:46:D2
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:99:0a:39:b4:1b:50:2d:4d:91:b6:7d:f3:ff:26:48:7e:
         a7:21:70:1d:96:9e:5e:c7:af:af:08:d9:b1:c7:7f:96:3d:d0:
         d3:0c:49:e5:45:c8:fa:03:19:1d:57:b7:47:ff:a9:89:90:ee:
         a7:ca:82:e1:46:91:b7:c7:13:d1:86:d2:e3:30:5f:1a:75:1d:
         ac:ce:be:95:af:ee:78:6e:f4:64:ba:90:f0:2c:04:b8:63:cc:
         60:a4:38:b4:2a:1e:4c:aa:e9:6b:c4:31:b1:31:7e:10:67:58:
         b8:bc:3b:b6:12:ea:2a:c4:5f:62:d2:11:42:a5:9b:93:f4:2d:
         90:2c:f1:eb:22:ef:33:83:35:76:37:71:5d:fb:f8:1d:05:a2:
         76:1f:ca:d1:6d:52:c6:73:ea:99:5b:3c:28:92:a4:06:7a:ec:
         c6:d6:a6:e3:37:a2:f0:af:39:ee:6a:8b:9a:aa:4d:ce:82:3d:
         8d:01:81:48:74:d4:90:5e:08:7e:f1:46:7f:8e:8a:89:83:e5:
         69:65:11:2b:52:32:c7:26:bd:14:dd:ea:47:69:00:e2:2c:69:
         bf:bb:c6:92:db:c8:2a:b9:4c:42:0f:30:c6:af:bd:6b:f8:4b:
         ef:28:60:77:6a:93:b9:e5:76:aa:86:07:ed:af:7c:47:68:13:
         d3:a6:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 02:24:54 2026 by rpki-client