Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: S+eXr8Y27ANhmmvgQFre7a32ndXhcv/1K0MKW6UUhZg=
Subject key identifier: 13:1A:8F:24:8C:DE:6C:EA:C1:40:AE:D1:49:E0:FB:E6:CA:9D:AE:A6
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0E9C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0E94
Signing time: Wed 04 Jun 2025 00:35:29 +0000
Manifest this update: Wed 04 Jun 2025 00:35:22 +0000
Manifest next update: Fri 06 Jun 2025 00:35:22 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: 7WPAzFU/0E1hW9aHSfxKoEFvcl33DO7KukT+QoTV4Bo=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3740 (0xe9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Jun 4 00:35:22 2025 GMT
Not After : Jun 6 00:35:22 2025 GMT
Subject: CN=683f94ca-b991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:7f:66:b2:1e:b1:4b:75:e6:51:da:80:d9:
48:f6:ea:df:fb:0d:ef:72:fe:56:b6:e4:73:f7:33:
6c:d2:2f:b1:af:fe:6b:90:33:6e:a0:41:24:a7:69:
3b:37:89:50:c6:ad:41:a7:6f:ee:49:ad:36:be:31:
0b:39:f1:7c:31:29:e7:40:92:4e:22:76:c3:40:18:
7c:75:25:fa:c4:e9:d9:95:da:ec:84:a3:01:dc:06:
c0:ea:31:e6:e6:b6:5a:a9:18:a8:9a:c2:64:ab:91:
5a:4e:47:e3:38:a4:64:18:5a:3c:7e:1a:2d:97:57:
35:c3:3f:c6:89:8f:63:60:5e:0d:3b:3b:aa:c5:3a:
50:69:d7:d2:6a:23:da:ac:30:6e:b9:00:bd:04:f2:
5c:33:0b:bd:83:97:16:7e:7e:c0:b8:79:5f:03:c5:
2c:3b:ac:a4:5c:d6:98:40:12:a8:c7:d9:84:80:23:
43:c6:0a:86:3c:a4:38:9b:dd:cf:0c:df:f5:1a:21:
8b:49:ef:c6:af:03:d6:a9:ee:ae:2c:c1:71:ad:ea:
d9:76:b4:96:c4:5d:39:4f:82:1c:16:45:0f:c3:89:
b3:19:a2:cc:fb:11:f3:af:4b:85:51:0d:04:ee:9d:
1b:4a:ef:01:ec:e2:6a:12:1d:cf:37:a8:a8:e2:a4:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:8F:24:8C:DE:6C:EA:C1:40:AE:D1:49:E0:FB:E6:CA:9D:AE:A6
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:f1:33:37:a1:36:f0:2b:b2:1c:1d:22:48:28:5c:f3:a6:
67:58:09:c4:23:2f:76:43:84:0e:fa:9f:1f:5f:35:03:df:10:
c8:7a:24:95:b7:97:29:5a:2b:09:33:2f:b1:ef:2d:f2:e8:69:
1b:1c:a1:fc:3b:61:70:b9:b9:a6:b5:01:7d:53:aa:e8:80:15:
ff:a8:8f:f5:72:fc:bb:12:75:2c:cb:20:77:c0:59:2b:36:97:
b5:fc:1f:49:68:ad:47:92:eb:f3:58:9b:d5:97:60:d3:7a:6c:
a3:9a:f2:41:d8:ab:4c:66:cf:70:49:02:de:6c:d4:ea:8c:2e:
37:77:59:25:0d:f2:88:3b:84:07:5d:97:75:9e:fb:08:ed:b8:
75:55:00:39:39:7a:66:d3:ab:dc:a1:b5:22:b8:20:bb:df:00:
91:e0:26:a4:e7:9b:ed:7a:dd:c0:49:5b:f2:50:58:b7:2a:a0:
f0:44:df:ec:84:bd:63:51:1b:3d:f3:b0:6e:ba:b0:fe:b7:93:
87:9a:fd:0d:c1:cf:98:59:b9:bc:f1:25:2f:f0:fa:8f:b7:be:
a1:e6:84:8a:62:bd:3c:02:f0:f6:cc:91:75:e2:1a:18:78:dd:
c6:4c:d0:5e:51:53:c2:e4:fa:47:44:ae:10:cc:df:46:69:ac:
34:7c:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:17:18 2025 by rpki-client