Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: NDfUqNRWEzWBUt7fF5hl9TUKZQ2vhkw0UCfDu/u31lg=
Subject key identifier: 44:C3:DB:0F:D1:42:85:F6:FE:FC:F0:72:B9:E9:09:9A:A7:25:C4:D2
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0FDD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 00:35:14 +0000
Manifest this update: Fri 17 Apr 2026 00:35:12 +0000
Manifest next update: Sun 19 Apr 2026 00:35:12 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: MPitV9q9FVktbcrWmUUvNu7NOLpg0Wi2wcqoebnxgAc=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4061 (0xfdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Apr 17 00:35:12 2026 GMT
Not After : Apr 19 00:35:12 2026 GMT
Subject: CN=69e18040-4931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:4f:47:a4:72:08:42:1e:d8:ae:16:49:72:
57:f4:fa:13:34:2d:49:65:90:8a:a4:aa:63:5d:aa:
cc:c8:da:d7:d7:78:6f:1c:9f:2d:b8:d7:c8:78:aa:
4b:4b:06:d7:c0:28:71:67:ba:cb:38:79:72:b4:fc:
08:d1:45:9f:26:a4:8c:3b:88:4b:95:b4:e7:3e:75:
48:89:3b:cb:8e:22:87:c1:71:b6:db:00:36:1b:9a:
12:c6:0c:9e:30:74:13:53:95:a9:91:77:4a:dd:29:
97:6c:c5:b7:5c:15:f7:e8:18:d1:ab:11:ba:37:2f:
15:c5:0a:37:07:a0:fa:6c:21:20:8b:14:17:10:7a:
ac:43:38:d2:64:7e:2e:a5:69:ad:41:6a:99:21:e7:
d8:96:42:da:74:b5:1f:28:a6:db:e3:c3:12:72:c9:
9b:02:88:2a:dc:43:d7:97:4b:61:a0:5a:7e:ca:3d:
6f:43:bd:66:80:f6:94:0c:38:87:70:d7:65:52:74:
31:41:ed:b9:6a:51:a8:1a:73:2e:e9:14:ad:f8:da:
02:dd:be:23:3a:60:d0:9e:7b:80:e3:ea:e8:4d:ba:
f2:5d:4e:21:14:19:73:68:dd:f6:55:9f:39:f1:8c:
ff:ec:33:48:d4:38:d2:4b:1f:c9:04:5b:a8:03:6f:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:DB:0F:D1:42:85:F6:FE:FC:F0:72:B9:E9:09:9A:A7:25:C4:D2
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:e7:3d:08:90:a2:b6:93:6a:62:a7:d3:56:d1:f8:92:0f:
5e:10:da:2a:32:40:1e:ed:be:67:9b:6c:29:9d:af:a5:b4:82:
50:65:fc:25:3e:4d:25:92:7c:d9:45:5b:51:74:6c:37:5c:b0:
a4:00:7c:8d:63:10:e2:25:b0:97:ec:a0:15:81:ea:24:21:83:
bf:76:76:d0:ca:7d:7d:18:d5:78:c3:e9:da:96:69:95:90:9a:
72:14:c0:e8:fd:ec:84:8b:17:79:3a:63:27:60:4b:61:a7:8d:
77:06:4f:1d:ef:ce:fc:f6:0a:86:9e:55:95:dd:0c:82:63:3a:
63:f5:f0:d5:3f:4c:9d:57:3f:2c:0d:15:2c:31:26:eb:2d:9b:
18:24:28:53:5a:ce:26:7c:58:e6:09:dc:d2:e0:f2:5b:5f:ea:
34:d9:22:90:65:66:82:13:6f:f9:4c:78:c2:5c:c8:eb:6a:f4:
3e:4a:22:9a:30:e0:1c:36:a8:ac:34:47:69:15:7c:61:0e:5a:
53:8d:f0:7d:83:9b:e7:24:83:3a:34:aa:d9:03:88:d5:65:3d:
fe:c5:1f:67:c0:1b:c4:a7:7f:b9:7d:ab:84:28:6f:07:03:c1:
ce:30:12:a9:8f:7b:4e:29:91:35:52:90:4a:f6:37:b8:41:48:
3a:7f:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:02 2026 by rpki-client