Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: l87uCM/sA3uibF26MjTtUfgfbhlG6r4DRRKvtGLFljY=
Subject key identifier: 3C:50:13:C6:80:D8:8B:8F:EC:A5:C2:AB:BF:13:0F:66:4C:7D:F8:A5
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0EDF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0ED7
Signing time: Sat 09 Aug 2025 00:35:15 +0000
Manifest this update: Sat 09 Aug 2025 00:35:12 +0000
Manifest next update: Mon 11 Aug 2025 00:35:12 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: px6Py+sYD9p1oqgUGg2nQnHEOYpfbAKUfvKZEVxt5t4=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3807 (0xedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Aug 9 00:35:12 2025 GMT
Not After : Aug 11 00:35:12 2025 GMT
Subject: CN=689697c1-c507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:d4:17:c6:df:de:6f:7e:79:c8:82:b6:27:
e4:04:df:bc:0f:9a:36:b6:2a:9f:06:1e:9a:dd:a0:
8d:d2:fc:7b:36:13:2e:72:f7:6e:87:86:c1:97:c0:
ce:c2:0e:45:f1:18:2f:d8:7a:99:8b:e2:3b:58:16:
05:e3:de:1d:95:cf:8f:7a:12:98:92:36:32:82:df:
69:b4:d3:a9:ed:f8:6d:e5:ad:e1:6f:72:d8:67:a8:
a1:f7:8a:ff:33:bd:54:90:bd:c8:e0:09:2a:dc:8b:
7e:54:8a:e7:79:df:01:3a:0b:da:e3:df:72:e8:ce:
91:f6:6e:3e:b8:e9:48:96:e8:ca:86:b3:ca:22:50:
fb:cb:e5:df:72:b7:d4:7d:5e:83:67:92:6c:df:bc:
d6:d0:bd:13:8e:54:7a:cc:0c:03:0d:dd:af:fa:31:
f9:84:3f:28:bb:9f:1a:35:4d:24:34:70:bb:bb:e5:
56:3f:bb:f7:bd:ef:f5:74:34:32:60:04:68:f2:2d:
68:97:7f:a3:30:d9:1a:1c:69:1a:e1:0f:d8:2a:2d:
8d:6c:e6:90:ca:10:04:51:0f:e5:46:08:ab:48:4d:
92:ec:ad:ff:d0:84:ec:ba:85:5e:07:e4:74:c6:24:
9e:bb:51:5f:36:b3:d2:2b:1f:53:f4:d3:34:dc:9e:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:13:C6:80:D8:8B:8F:EC:A5:C2:AB:BF:13:0F:66:4C:7D:F8:A5
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:28:54:4b:2d:38:20:0d:89:56:ae:31:0a:15:5e:69:c0:4e:
b0:35:98:d5:3e:2d:c6:ba:00:d8:99:ac:f9:51:b3:1c:6e:51:
6f:58:d1:21:5a:bc:10:7d:2a:5e:46:96:9a:75:0c:78:48:4c:
04:b6:71:bd:36:85:62:59:83:d4:a0:b0:8b:fb:3f:24:5a:54:
9d:f1:aa:e5:06:dc:0c:49:9b:b7:14:0b:bb:4a:2e:4a:b6:5a:
f3:54:ee:fa:e0:8a:d0:1f:c4:eb:7a:d8:58:5e:c7:e6:68:f5:
7e:58:29:3d:c6:c3:07:ad:4f:49:55:da:e1:13:91:ea:83:3e:
2f:0b:fa:4d:c3:b8:27:ff:fd:52:07:ab:98:1d:2b:66:f9:44:
37:e5:38:67:11:be:89:e5:01:51:f8:66:c2:fa:66:25:0f:e0:
fb:9a:97:e6:83:2d:11:77:d3:1d:2b:37:04:8c:cd:b1:a3:b7:
a9:a8:6c:25:8c:77:6a:b8:d1:6d:28:6d:c3:e8:e5:d8:4e:7b:
0e:2d:25:2c:2d:eb:15:44:a0:2d:1d:70:7b:b4:2f:9d:13:34:
85:8f:88:5d:c8:05:84:b8:5a:2c:a2:36:78:a2:26:3b:0a:18:
8d:0f:ff:fb:74:d0:75:ac:c9:43:c0:c1:88:35:a4:3c:52:8e:
e2:b8:d9:26
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgICDt8wDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD
TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF
M0JERDg1QkNEMzlEMkVCMB4XDTI1MDgwOTAwMzUxMloXDTI1MDgxMTAwMzUxMlow
GDEWMBQGA1UEAxMNNjg5Njk3YzEtYzUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBE1BfG395vfnnIgrYn5ATfvA+aNrYqnwYemt2gjdL8ezYTLnL3
boeGwZfAzsIORfEYL9h6mYviO1gWBePeHZXPj3oSmJI2MoLfabTTqe34beWt4W9y
2GeoofeK/zO9VJC9yOAJKtyLflSK53nfAToL2uPfcujOkfZuPrjpSJboyoazyiJQ
+8vl33K31H1eg2eSbN+81tC9E45UeswMAw3dr/ox+YQ/KLufGjVNJDRwu7vlVj+7
973v9XQ0MmAEaPItaJd/ozDZGhxpGuEP2CotjWzmkMoQBFEP5UYIq0hNkuyt/9CE
7LqFXgfkdMYknrtRXzaz0isfU/TTNNyezN0CAwEAAaOCAlYwggJSMB0GA1UdDgQW
BBQ8UBPGgNiLj+ylwqu/Ew9mTH34pTAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj
vdhbzTnS6zAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbGFjbmljLzFiLUgyalJteUMy
TWJZNDA0NzNZVzgwNTB1cy5jcmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAC
hlpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9sYWNuaWMtdG8tYWZyaW5pYy5jZXIwTwYD
VR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jw
a2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ8GCCsGAQUFBwELBIGSMIGP
MFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9y
eS9sYWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLm1mdDA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiKFRLLTggDYlWrjEKFV5pwE6w
NZjVPi3GugDYmaz5UbMcblFvWNEhWrwQfSpeRpaadQx4SEwEtnG9NoViWYPUoLCL
+z8kWlSd8arlBtwMSZu3FAu7Si5KtlrzVO764IrQH8TrethYXsfmaPV+WCk9xsMH
rU9JVdrhE5Hqgz4vC/pNw7gn//1SB6uYHStm+UQ35ThnEb6J5QFR+GbC+mYlD+D7
mpfmgy0Rd9MdKzcEjM2xo7epqGwljHdquNFtKG3D6OXYTnsOLSUsLesVRKAtHXB7
tC+dEzSFj4hdyAWEuFosojZ4oiY7ChiND//7dNB1rMlDwMGINaQ8Uo7iuNkm
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:25:42 2025 by rpki-client