This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          olTpZNj4SzM8r6KOzJ5ooqGhPuZd8CFrYarQdNJkicU=
Subject key identifier:   22:0F:E4:D5:02:ED:08:DE:0C:AB:49:95:A9:0C:72:19:9A:B7:87:71
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0F98
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0F8F
Signing time:             Sat 07 Feb 2026 00:35:14 +0000
Manifest this update:     Sat 07 Feb 2026 00:35:12 +0000
Manifest next update:     Mon 09 Feb 2026 00:35:12 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: nbobiGwhMMrehoOd+Zz+24ubd2hiSxueMdei2B00nTQ=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3992 (0xf98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Feb  7 00:35:12 2026 GMT
            Not After : Feb  9 00:35:12 2026 GMT
        Subject: CN=698688c0-dbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:5a:1a:89:b0:bb:f0:5f:40:98:d9:39:73:
                    5b:51:e9:66:10:69:fe:54:a1:ab:c9:bc:f4:f2:8a:
                    7f:c6:60:60:12:3d:4d:e7:d3:f8:2c:9b:84:75:d5:
                    ec:09:61:1c:e4:c9:39:b9:43:1e:b5:01:7f:db:75:
                    63:2c:2a:01:07:a0:15:14:38:db:c5:8f:14:9d:87:
                    30:b9:08:5c:64:ad:9e:94:6c:50:4a:ce:a6:00:84:
                    83:70:9a:a3:c2:54:e9:60:49:c7:50:f2:26:8c:c5:
                    2f:34:2f:bd:74:39:37:11:45:8c:4c:fb:3c:65:4c:
                    ec:c7:84:0e:5a:a3:7c:f7:7a:e0:d7:ae:3d:6f:7f:
                    4a:c7:d2:3e:15:a7:14:ff:f6:12:65:04:81:82:88:
                    69:0f:66:21:4a:11:45:c9:bf:e9:7a:8e:77:f2:0a:
                    7d:1e:9c:8a:2a:7f:cd:e2:7b:c3:47:47:f4:1f:6e:
                    ba:81:dc:ab:d8:d4:d0:60:03:82:dd:a5:18:8d:80:
                    12:c5:bd:ca:c3:23:fc:c0:1b:64:77:a3:f2:2e:6e:
                    cd:5a:f6:34:f3:22:43:c5:38:9d:53:56:25:5c:cb:
                    87:6e:ed:6e:7c:c5:6b:42:a9:36:34:45:ad:7c:7b:
                    0b:5b:84:12:c3:dd:7b:ad:94:19:c0:c1:25:30:3b:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:E4:D5:02:ED:08:DE:0C:AB:49:95:A9:0C:72:19:9A:B7:87:71
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:da:f5:41:17:cc:a3:21:8d:59:04:34:ad:8e:d5:6e:90:
         18:f8:af:b5:b6:f2:6e:06:50:bf:07:70:8d:20:ca:e2:d9:53:
         a6:c8:db:29:df:13:1b:c7:f4:a1:5f:dd:24:cd:3e:e9:82:ba:
         99:00:d7:6e:7f:ae:15:0d:7e:36:2f:cd:9a:fc:be:cf:9f:ac:
         38:92:69:63:22:00:40:47:ef:1f:8b:60:52:47:8b:b7:d2:16:
         c6:3c:a3:43:e2:54:f1:b4:d3:5f:40:28:bd:3b:46:f7:f7:b6:
         b1:d1:81:6b:46:83:a7:d0:ea:80:47:d5:e6:96:4c:27:9d:d5:
         94:b7:72:38:2c:58:56:e2:f2:23:7d:57:37:3d:f9:24:14:06:
         f9:ac:ee:57:7a:42:a5:8f:b5:2d:bd:b2:c7:19:f3:0f:00:aa:
         d8:9e:5f:7f:2a:45:12:fb:68:28:10:82:1a:ad:35:8d:2e:c0:
         97:a4:2b:b7:8c:7f:db:07:6e:6f:2c:ef:9a:50:ec:81:4d:b3:
         9f:1e:dc:5d:da:34:a3:50:b8:fc:02:4b:a4:76:66:3e:71:7c:
         98:5b:55:9c:cb:20:24:ca:a9:3f:89:82:a9:b4:45:ac:94:77:
         33:79:cf:b6:c1:6c:8f:a0:80:43:48:fb:15:70:ed:c5:50:0a:
         c3:60:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 05:45:00 2026 by rpki-client