Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          jouWJ6Sr5m9sBVavR4kvwRsWxRVwU/jzwsDBNffOtn8=
Subject key identifier:   AC:35:85:5E:58:05:A1:98:8D:DC:16:E1:33:48:59:88:60:3D:1C:1F
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       108B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          1082
Signing time:             Wed 07 Oct 2026 00:35:14 +0000
Manifest this update:     Wed 07 Oct 2026 00:35:12 +0000
Manifest next update:     Fri 09 Oct 2026 00:35:12 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: pnuJqQn6V4hDOAPI2gxSd2+z07Yih7feP153VZ/LbYY=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Oct  7 00:35:12 2026 GMT
            Not After : Oct  9 00:35:12 2026 GMT
        Subject: CN=6ac593c0-c80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:3d:8e:1a:e1:29:90:f7:bf:c8:d6:6c:06:
                    92:98:63:69:ed:78:c7:72:5f:2c:f9:22:68:15:8f:
                    05:60:1d:48:f6:95:1f:fc:ed:f9:d1:8f:9e:db:85:
                    bd:e5:71:17:11:94:7a:22:97:65:75:73:fe:3e:ad:
                    8b:db:bb:37:d4:7d:79:eb:f1:a9:fb:2b:1b:4d:e8:
                    19:4f:23:e4:65:4f:4f:1f:88:5f:dc:b3:7b:0d:d2:
                    db:33:f8:2d:24:5b:c8:0a:39:07:7d:fc:92:1f:66:
                    53:af:ce:28:e9:5c:a7:8e:36:dd:84:69:a5:82:72:
                    d5:13:a6:bb:99:10:59:61:ac:bd:a3:26:31:47:bd:
                    1d:0b:a9:33:45:5c:8c:1f:95:bf:42:be:e9:a3:e7:
                    aa:41:6a:83:65:db:4d:0c:0a:ee:67:55:cd:b7:12:
                    f2:2c:d1:21:79:70:d8:66:7e:14:e0:2e:c2:65:52:
                    4d:ee:3c:dd:2c:0c:43:80:e5:2f:04:ce:7e:5f:27:
                    c7:26:cd:35:8c:40:b9:db:24:6a:dc:02:0b:36:25:
                    2a:27:7c:ae:b6:11:b4:b1:0e:30:9d:7b:fe:0c:44:
                    7b:60:00:07:c4:04:16:ae:74:3a:06:de:d4:d2:67:
                    b0:a4:bf:df:bf:3a:e0:30:5d:a3:4c:23:07:33:73:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:85:5E:58:05:A1:98:8D:DC:16:E1:33:48:59:88:60:3D:1C:1F
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:78:f7:e0:fc:99:0a:b6:ca:ff:df:f2:14:4e:bb:c1:06:1a:
         83:b8:ff:10:d1:3b:08:cf:07:99:33:ac:04:65:e3:cb:df:81:
         d2:d3:3f:41:dd:49:cb:5d:74:f7:8e:05:78:de:97:8f:7f:1a:
         ad:8a:ac:d4:ec:11:9e:c6:6e:a6:96:fc:32:52:f9:b8:ab:e7:
         77:75:bb:45:25:f9:69:f3:4c:82:e9:4f:a7:f5:9e:39:dd:b2:
         6c:64:72:31:11:89:7a:6a:48:c5:ec:2f:41:c1:14:2f:01:eb:
         99:12:12:03:08:2d:0f:43:2f:b2:a8:11:43:0b:c0:72:a6:11:
         19:9d:24:14:9e:4d:37:28:6b:61:c7:55:61:f6:55:61:e5:66:
         8b:96:5c:29:5b:1d:61:1b:39:ca:29:6b:cf:3c:51:7d:cb:a0:
         90:0c:35:3e:d7:de:57:33:b0:4f:fb:0d:ed:08:f2:7c:aa:cf:
         cb:de:87:75:bf:61:c4:a2:ca:76:ab:a2:ff:c9:7a:9d:63:56:
         08:5d:42:e5:60:d4:fb:9e:8b:dd:74:89:63:0e:e1:bd:2c:5c:
         15:04:ec:e1:e0:ae:ae:cd:82:c6:3d:a5:4e:5f:87:33:8a:ac:
         74:c0:b4:a4:0d:0f:af:65:d5:be:2b:58:73:c4:33:3a:76:48:
         f5:56:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----