$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft File: oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json) Hash identifier: 37ABUH7ddQBfNm6f9bkPhnBv0RrsFl8Mx6ehybyp0QA= Subject key identifier: 2E:45:DB:E3:76:99:5A:B4:6B:8A:51:3B:A6:BA:BE:59:24:BD:A6:3D Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Certificate serial: 0D00 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft Manifest number: 0CD0 Signing time: Sun 27 Apr 2025 01:06:03 +0000 Manifest this update: Sun 27 Apr 2025 01:06:02 +0000 Manifest next update: Tue 29 Apr 2025 01:06:02 +0000 Files and hashes: 1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: qCqOW8oOzudp/cXffcjSakXiN0oiDr4Ur9PmcWbuE5A=) 2: 688FF63C70EA11EBB58E686CF8AEA228.roa (hash: mnhwlEYLBW14RTC3favyxPOzROufnwHo5mG4Z0mXmcE=) 3: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=) 4: FF8AE3A2D27511EBA434AC13F8AEA228.roa (hash: 5+HC4jv4qZLLiwXnjuwHxqCdddSlDf0nEOGWfUV5PQQ=) 5: 316A8CAAEAD711EBBF227926D8A014CE.roa (hash: yxveE6pApv0ntB+dr/mwCV5WzRHfetSEdQFEmXgoicI=) 6: 2A0F92DAF65311EABA5EBE2FF8AEA228.roa (hash: THMJd5DgFhWv0Jk+1OcRnImey6Na8xQ3AsnqGvmdW70=) 7: 7454200CCAC611EB8443867EF8AEA228.roa (hash: hzz/vJ+aqnVoQNL7Q9fjlul0hrPt6hbCLM46iL+BL7I=) 8: C0A9CF84CAC511EBAD8F747DF8AEA228.roa (hash: 32bh8lnMpMvqyS9cax+2bQBhBK15D7Xt6pmKKyWGT1I=) 9: 48EF3A4CCAC511EBA25AC67CF8AEA228.roa (hash: akzUSGdVFPvN0ulPbNTi4W3s+HlY+6W8WohYYTP53AQ=) 10: 8E9FB58ACAC511EB9B981F7DF8AEA228.roa (hash: i2XbNZNySL6bjfPeeqcwKUmZc1PB1OXmHSBcuRJ9wok=) 11: 0B623002CAC611EBA5FDE97DF8AEA228.roa (hash: 7vqWPa/FVhwLVFvDKi4nljJ6iFh6Jfsi7spX+XnzJ70=) 12: 4E58D686CAC611EB9365587EF8AEA228.roa (hash: 4ThPqE6/bQdWLeN6MKhRWORK90ZVKeZ9eefEc7xOcFU=) 13: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=) 14: 97B6F442464111ECBD1F4A20D8A014CE.roa (hash: WFh81Czx23ss3LjWPFRZ0ox6H/FOzyhXrzAkY9AMcyE=) 15: FBDC85FE280211EFA2470CDD7CDC24C2.roa (hash: N2LzgJndLmvz3cDIsfFkVtUTemoZkwL0xxlWsp4hwb0=) 16: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=) 17: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=) 18: F2BA97A6CAC511EBB828B97DF8AEA228.roa (hash: MND7CmipLpfeKz1+bS7srpKpnj7/a7fnv2q2oc1dXDk=) 19: 6EE63CF0CAC511EBB74A097DF8AEA228.roa (hash: WPe/RcweAEsw7x1mmDsXfOpYOObfldXDxTckbMWoLT4=) 20: 9474CF86ED9E11EA9B405A41F8AEA228.roa (hash: 1ODaBYEbZc5lz2DA8RW3VSuCv0cfBzMfZN9Q4vPucaM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Validity Not Before: Apr 27 01:06:02 2025 GMT Not After : Apr 29 01:06:02 2025 GMT Subject: CN=680d82fb-74a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:cf:dc:34:e5:0e:56:12:d5:75:f4:83:f3: 20:62:4c:a4:da:25:2c:e5:88:f3:02:ee:d4:30:4a: 2d:95:19:c2:f0:9d:d0:40:60:a7:79:b1:ac:4f:de: 95:1b:1f:84:a1:2b:46:cf:9a:41:4f:0c:d3:9e:27: 43:5d:97:42:9e:35:b1:de:af:bb:29:f6:37:ca:06: c2:d1:ff:84:0c:28:ac:a7:a6:07:7d:44:20:f9:60: c8:07:66:50:0c:2c:09:01:ad:d2:9d:83:da:64:14: db:b1:41:65:b7:33:e3:10:c0:07:1f:78:5a:eb:e6: 23:6b:5c:a8:bc:18:37:47:c8:94:0d:81:ae:39:72: 9b:0c:96:5c:a0:7c:23:37:6a:67:bb:88:7b:d0:ab: ac:b4:13:08:a4:b0:8b:f3:25:2e:dd:d5:26:ea:a7: 53:46:1a:5b:04:da:18:24:67:3f:3f:36:fb:21:81: 15:cc:23:3a:55:a9:08:b0:aa:e8:32:2a:78:fd:c3: c3:a1:1e:a1:1f:24:4d:04:52:58:c5:3c:fd:f8:59: 2f:51:3b:f4:62:c4:73:ec:7f:3f:10:b1:6c:6b:18: 1c:00:28:ee:fe:1f:65:83:27:7a:19:0d:fb:a2:36: d6:c8:3f:16:7b:a5:d3:4b:a0:95:43:1b:80:38:92: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:DB:E3:76:99:5A:B4:6B:8A:51:3B:A6:BA:BE:59:24:BD:A6:3D X509v3 Authority Key Identifier: keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:49:82:6d:91:ba:9c:79:84:f8:18:66:4f:2c:52:83:8b:fa: 65:05:10:32:3b:1f:4e:b2:61:b7:cb:0f:f4:9d:75:ae:d0:7b: cf:62:9b:13:11:86:93:eb:95:1b:3c:b9:54:ca:7c:09:ed:91: ab:8c:e5:b1:b0:66:87:c1:d7:a0:30:80:1a:f5:a8:71:07:10: 59:38:e3:2e:a8:c8:e0:96:b7:03:28:1b:25:23:85:5c:cb:4b: f1:ae:94:5d:61:97:0e:74:d2:18:c7:aa:75:ca:c8:66:c5:0d: db:db:a5:9c:ce:51:e0:aa:0d:e9:80:3b:f7:b1:a6:04:71:7a: 3f:99:9d:f3:45:bd:25:2b:7a:69:ff:db:fa:e1:dc:ea:3c:d6: 82:fa:af:86:a7:9c:10:60:3f:17:e5:c9:3d:4b:3f:86:e4:ea: ea:7f:8e:cb:7b:2e:bd:ec:8b:78:68:63:c5:cc:0c:50:ea:7b: 23:a7:db:6a:6a:83:d6:a8:2e:b9:00:a6:3f:27:2a:f5:bb:79: b7:bd:99:69:80:0b:a4:0c:1e:89:dd:a4:0e:12:28:a2:77:1a: d0:cd:cb:61:3b:69:c0:7d:39:d1:43:3b:7e:0c:e6:56:e0:b9: 45:cb:b1:c2:f4:76:68:b3:31:8d:a7:79:bf:8c:7d:1a:a3:a3: 6e:85:c5:fb -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx MTkzNjE4Mjg1MTAeFw0yNTA0MjcwMTA2MDJaFw0yNTA0MjkwMTA2MDJaMBgxFjAU BgNVBAMTDTY4MGQ4MmZiLTc0YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCbbc/cNOUOVhLVdfSD8yBiTKTaJSzliPMC7tQwSi2VGcLwndBAYKd5saxP 3pUbH4ShK0bPmkFPDNOeJ0Ndl0KeNbHer7sp9jfKBsLR/4QMKKynpgd9RCD5YMgH ZlAMLAkBrdKdg9pkFNuxQWW3M+MQwAcfeFrr5iNrXKi8GDdHyJQNga45cpsMllyg fCM3ame7iHvQq6y0EwiksIvzJS7d1Sbqp1NGGlsE2hgkZz8/NvshgRXMIzpVqQiw qugyKnj9w8OhHqEfJE0EUljFPP34WS9RO/RixHPsfz8QsWxrGBwAKO7+H2WDJ3oZ DfuiNtbIPxZ7pdNLoJVDG4A4ksypAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULkXb 43aZWrRrilE7prq+WSS9pj0wHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkUzOUUvMjAwMTkxODQ4MEFCMTFFNkExMTdBRTYzRjhB RUEyMjgvb1RhT2lfeUE5T3Bhc0pjVzBsY2hHVFlZS0ZFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRSYJtkbqceYT4GGZPLFKDi/plBRAy Ox9OsmG3yw/0nXWu0HvPYpsTEYaT65UbPLlUynwJ7ZGrjOWxsGaHwdegMIAa9ahx BxBZOOMuqMjglrcDKBslI4Vcy0vxrpRdYZcOdNIYx6p1yshmxQ3b26WczlHgqg3p gDv3saYEcXo/mZ3zRb0lK3pp/9v64dzqPNaC+q+Gp5wQYD8X5ck9Sz+G5Orqf47L ey697It4aGPFzAxQ6nsjp9tqaoPWqC65AKY/Jyr1u3m3vZlpgAukDB6J3aQOEiii dxrQzcthO2nAfTnRQzt+DOZW4LlFy7HC9HZoszGNp3m/jH0ao6NuhcX7 -----END CERTIFICATE-----Generated at Sun Apr 27 05:35:39 2025 by rpki-client on console.sobornost.net