Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          vYQRSm9xohvhxLH0JwlVxmOraZyxCJGvp/lCBN3Ch1E=
Subject key identifier:   A0:3D:07:ED:C1:45:61:5C:AF:25:5C:AC:26:0B:03:58:38:26:7E:D1
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       107B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          1072
Signing time:             Mon 21 Sep 2026 00:35:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:35:12 +0000
Manifest next update:     Wed 23 Sep 2026 00:35:12 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: uMKQcI+xp0nJnhpBKkM6RYf+Jx/et/whOs1Xd6p5V+k=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4219 (0x107b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Sep 21 00:35:12 2026 GMT
            Not After : Sep 23 00:35:12 2026 GMT
        Subject: CN=6ab07bc0-1eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:ad:c4:ff:3a:fb:e5:6a:e0:7e:b7:f5:e5:
                    aa:15:c4:b9:c4:1c:3f:d4:98:0c:0c:d8:e6:60:90:
                    b7:dd:a3:9b:f0:a7:df:78:f5:44:20:59:76:a0:e6:
                    47:e1:9f:e3:95:e3:f4:88:14:66:2c:5b:24:24:87:
                    56:4f:bc:a4:1f:13:e1:29:1f:e0:d6:3b:11:6a:bd:
                    cb:17:b5:6d:1d:ff:ad:ac:e4:01:aa:74:3f:e3:5e:
                    b9:9c:d4:f2:20:42:7a:c1:74:b5:ea:46:89:15:32:
                    da:f3:b5:4b:e6:88:b9:81:7a:e2:3c:dc:26:7f:15:
                    d1:ba:23:bb:23:2c:10:27:db:85:07:32:0c:4c:8d:
                    60:00:0e:98:04:7c:46:2c:a4:68:7f:d7:0d:08:0d:
                    2d:29:0d:74:a7:8b:d0:63:06:72:79:42:d4:44:aa:
                    e5:70:cd:ac:ec:56:53:5b:7c:a1:04:08:b4:6e:fc:
                    55:b4:d2:6c:17:ed:b7:e1:14:ff:05:82:eb:7b:f5:
                    80:6f:d5:ab:f8:ab:4b:0f:79:f4:e2:dc:9f:bf:ca:
                    f1:59:27:46:91:ea:09:2b:d2:d2:4d:9d:a4:e1:3f:
                    27:cc:08:32:46:bd:e6:df:30:d3:79:e7:c0:aa:e2:
                    aa:8b:95:98:2c:12:86:7b:52:61:d9:d0:27:21:11:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3D:07:ED:C1:45:61:5C:AF:25:5C:AC:26:0B:03:58:38:26:7E:D1
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:64:11:0c:28:0a:3c:c9:33:37:1d:c2:00:98:4c:e8:8b:c5:
         07:a8:5e:67:eb:6e:83:82:6f:5b:0d:c6:35:05:47:a8:74:d1:
         c9:c6:1b:f5:e7:35:80:8e:f4:c0:33:ed:3a:d6:ba:35:69:b5:
         c7:57:e7:05:52:c3:dd:32:65:fc:0a:eb:25:ec:de:bf:49:ee:
         ca:5f:e5:ab:78:44:a9:67:a5:9c:fe:ea:6a:47:ce:45:bd:97:
         96:29:2b:df:cf:ea:02:21:5c:68:1d:48:66:e3:d7:5d:e0:f1:
         6b:6b:69:b8:ca:c3:be:78:81:96:4f:47:b1:10:fd:fe:46:17:
         93:83:8a:4e:b0:86:f9:f6:d5:aa:d1:77:e7:d1:57:09:14:69:
         76:da:85:1f:93:e1:0f:8e:62:ac:9d:a4:98:da:09:67:fd:10:
         46:47:4f:32:74:9b:87:31:43:59:da:8c:68:17:1c:ac:1b:fe:
         3b:07:8b:4d:b8:56:c5:bb:9e:f2:f3:f1:7b:cd:75:d2:ab:b0:
         46:bb:24:15:64:c9:fc:07:8b:d6:9b:8f:b6:67:1a:00:2c:4e:
         20:3b:38:ac:8a:d1:53:e4:3c:7b:b0:3c:95:37:be:6c:41:b1:
         b1:f7:af:a4:65:8b:a1:b1:ce:85:d1:21:a9:ca:9a:e9:6e:5f:
         06:6b:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----