
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: fxUr00lNvsAkAcoFHf6L8gHH97V6gVdnloYnKgMcZio=
Subject key identifier: 2E:EC:A9:22:7E:32:38:72:7F:DD:53:AF:48:8A:01:E1:6E:B2:C1:47
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0ED4
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0ECC
Signing time: Tue 29 Jul 2025 00:35:15 +0000
Manifest this update: Tue 29 Jul 2025 00:35:13 +0000
Manifest next update: Thu 31 Jul 2025 00:35:13 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: vnvTRreYDXPY0xxilAgxXeFoTqnIXMC+DVgRpbgSNgk=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 31 Jul 2025 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3796 (0xed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Jul 29 00:35:13 2025 GMT
Not After : Jul 31 00:35:13 2025 GMT
Subject: CN=68881741-b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:3e:5a:74:c3:e5:13:9c:33:d3:0c:6e:7b:
30:64:55:de:e4:63:c4:c0:df:ad:ba:2d:44:38:1e:
6b:dd:c5:61:b0:24:73:45:e1:f5:6d:4a:e3:43:30:
f7:13:78:ba:b2:39:81:02:f6:c3:18:6a:93:c5:99:
33:3b:40:b3:8a:21:4a:f0:7d:d1:68:b2:b5:2e:dc:
ea:e6:69:ca:09:47:87:96:c2:a8:87:98:89:6c:42:
f9:c9:83:cd:d2:53:4c:98:27:f5:e8:61:97:63:88:
50:d3:93:dc:77:c3:f6:76:17:8e:bf:b4:5b:8a:69:
54:5b:46:2e:0c:ee:63:f1:16:7a:16:05:8f:87:5d:
eb:90:e0:01:b8:a8:c9:12:8d:bf:9e:cb:3a:0b:4d:
08:2c:6c:c1:cf:0c:3f:96:06:90:40:83:e2:55:3d:
d3:5b:ed:6c:cb:7b:10:46:63:c1:96:62:5d:74:11:
77:c7:b3:39:d7:ff:95:32:03:8a:35:1e:79:54:c7:
41:b0:ef:fb:0f:98:84:e7:ce:57:ba:36:c1:3d:f9:
93:ea:37:22:cd:65:a3:38:fa:87:df:0e:a9:e6:7e:
7b:e5:8b:74:83:f5:06:d3:a7:fc:fd:09:23:3d:c5:
73:48:51:95:f9:9d:f8:88:b3:cc:92:12:d4:c6:2b:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:A9:22:7E:32:38:72:7F:DD:53:AF:48:8A:01:E1:6E:B2:C1:47
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:80:d6:4e:ce:9f:0a:4e:23:76:77:d3:c5:d9:e3:f8:98:ac:
ba:59:ff:f8:54:6a:59:00:c8:37:ae:17:c8:b2:b7:f2:52:59:
a9:92:3b:51:53:6b:cb:cc:80:4f:44:37:a8:4a:e4:1d:26:50:
b9:2a:c7:f6:3a:89:a0:9b:c9:93:de:00:83:9d:75:9e:93:85:
d1:7c:c8:a8:41:be:1b:88:8b:e9:fc:c4:76:27:90:2b:34:ba:
31:73:15:1b:38:d0:92:e6:22:a9:26:e5:db:64:a7:aa:3c:7a:
fd:c0:6d:53:b7:99:f0:dd:20:01:e7:ca:bb:83:37:56:50:c4:
84:71:ca:f5:83:61:46:4a:f0:84:58:0f:83:b7:41:c0:5f:02:
b9:ab:c5:d9:81:4b:60:b3:c8:80:b2:ea:a2:ed:72:61:f2:57:
0c:31:ac:f7:84:94:39:e3:7f:72:cb:12:90:32:ed:30:5a:c0:
18:15:66:82:86:ac:76:d2:7d:d1:cd:d7:e0:e4:87:69:37:95:
66:e4:6e:77:6b:12:f7:1d:c8:ed:03:c4:5c:26:59:e3:c8:b0:
56:3f:0f:d3:bb:ab:51:91:df:61:71:c4:3c:0d:b9:f4:da:e0:
5d:eb:95:1c:32:2f:5f:19:1f:88:26:7a:86:b1:83:24:3d:bc:
47:0c:cc:8c
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgICDtQwDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD
TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF
M0JERDg1QkNEMzlEMkVCMB4XDTI1MDcyOTAwMzUxM1oXDTI1MDczMTAwMzUxM1ow
GDEWMBQGA1UEAxMNNjg4ODE3NDEtYjNjNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOFtPlp0w+UTnDPTDG57MGRV3uRjxMDfrbotRDgea93FYbAkc0Xh
9W1K40Mw9xN4urI5gQL2wxhqk8WZMztAs4ohSvB90WiytS7c6uZpyglHh5bCqIeY
iWxC+cmDzdJTTJgn9ehhl2OIUNOT3HfD9nYXjr+0W4ppVFtGLgzuY/EWehYFj4dd
65DgAbioyRKNv57LOgtNCCxswc8MP5YGkECD4lU901vtbMt7EEZjwZZiXXQRd8ez
Odf/lTIDijUeeVTHQbDv+w+YhOfOV7o2wT35k+o3Is1lozj6h98OqeZ+e+WLdIP1
BtOn/P0JIz3Fc0hRlfmd+IizzJIS1MYr6dMCAwEAAaOCAlYwggJSMB0GA1UdDgQW
BBQu7KkifjI4cn/dU69IigHhbrLBRzAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj
vdhbzTnS6zAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbGFjbmljLzFiLUgyalJteUMy
TWJZNDA0NzNZVzgwNTB1cy5jcmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAC
hlpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9sYWNuaWMtdG8tYWZyaW5pYy5jZXIwTwYD
VR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jw
a2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ8GCCsGAQUFBwELBIGSMIGP
MFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9y
eS9sYWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLm1mdDA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCngNZOzp8KTiN2d9PF2eP4mKy6
Wf/4VGpZAMg3rhfIsrfyUlmpkjtRU2vLzIBPRDeoSuQdJlC5Ksf2Oomgm8mT3gCD
nXWek4XRfMioQb4biIvp/MR2J5ArNLoxcxUbONCS5iKpJuXbZKeqPHr9wG1Tt5nw
3SAB58q7gzdWUMSEccr1g2FGSvCEWA+Dt0HAXwK5q8XZgUtgs8iAsuqi7XJh8lcM
Maz3hJQ5439yyxKQMu0wWsAYFWaChqx20n3Rzdfg5IdpN5Vm5G53axL3HcjtA8Rc
JlnjyLBWPw/Tu6tRkd9hccQ8Dbn02uBd65UcMi9fGR+IJnqGsYMkPbxHDMyM
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:22 2025 by rpki-client