$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft File: ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json) Hash identifier: Zz9hpO49rIAVE31gOZWi++6QqkewySr6ZOC5faUt9i0= Subject key identifier: D2:79:8C:C6:71:D4:A5:81:D4:83:37:D1:FA:5B:F0:80:CB:96:53:57 Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Certificate serial: EC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft Manifest number: E2 Signing time: Sun 27 Apr 2025 04:55:43 +0000 Manifest this update: Sun 27 Apr 2025 04:55:42 +0000 Manifest next update: Tue 29 Apr 2025 04:55:42 +0000 Files and hashes: 1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: UEIHm4bZmyWtfKNzTYy9pQcLg5bBy7NoULXQGUMWOrY=) 2: C562E1227FE511EFA4266193762E951A.roa (hash: MeKHI1JwEO0dNY503adBbALC+TfZ50BQKRjHS6uYj7k=) 3: E1E725E27FE511EF94A66F93762E951A.roa (hash: kXVFpXwBX0moo6oFgHbW2bzPwFLvjsGItQkg+knk97g=) 4: 36D17E507FE511EF8E9D278F762E951A.roa (hash: isW05Vri1NVUUzw8M3SoRzzmQ8K529eo9pAlq8XeeUQ=) 5: 11E302C07FE611EF881E5295762E951A.roa (hash: 145rdnt1Cxjywczq9gDypBeUgWkI++ibIUuOEMfQqyk=) 6: 7A8C97107FE511EFB8E44791762E951A.roa (hash: AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=) 7: FA5E14007FE511EFBDA17893762E951A.roa (hash: HOWJLbvAbWrETIKjPES8sLpxeGRDhtV+tpL6Pi7P71U=) 8: 1A60E94A7FE511EFBEBA208F762E951A.roa (hash: A/mV4GlRLg3sT0E/c0AS8I1cypmKjG6MSwcDjeLas4Y=) 9: 517885647FE511EF83F2F690762E951A.roa (hash: NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=) 10: 455EACFA7FE411EF9A858F8A762E951A.roa (hash: FAEa1S962bIhXo4SwmCRjWz4N6IRQhTzTWTA+es1RJY=) 11: A97B972E7FE511EF83081793762E951A.roa (hash: mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Validity Not Before: Apr 27 04:55:42 2025 GMT Not After : Apr 29 04:55:42 2025 GMT Subject: CN=680db8ce-15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:74:56:2e:5d:e3:1b:0b:02:3d:e9:22:09: 13:9f:f1:95:4b:95:12:4b:38:74:99:d9:c0:32:d6: 64:59:c4:81:c8:a2:91:20:87:98:42:53:b6:10:d8: e2:7a:bc:f5:27:d7:ee:3f:7c:0a:59:59:5a:ce:21: 94:df:a5:73:cb:c4:36:a6:5c:c6:6e:2c:33:aa:df: 1b:4b:60:d7:7a:24:f1:df:f2:63:16:8d:a6:e4:24: f7:6d:14:2c:11:00:a6:32:17:37:72:d9:ad:0c:bd: 76:d4:61:d1:72:e1:36:5e:85:19:02:f2:4a:ba:9d: 7a:c8:8d:75:90:f6:08:3a:68:e1:57:96:50:c3:c8: 6d:b4:1d:1b:2e:b2:80:16:61:f9:af:e2:32:e2:b2: 67:f6:4c:d6:d2:58:d9:69:a1:54:ff:0b:24:5d:7b: 8b:8c:ce:ad:7d:5f:d5:6a:f6:e8:7d:2f:d1:e9:ed: 3a:76:2f:5f:88:3b:4f:32:21:a1:3a:59:3f:3e:73: 7a:33:4d:de:28:ef:0a:0d:94:25:fa:1c:73:47:1e: 35:65:99:fa:e3:71:22:a3:f8:1c:e7:c3:52:a1:0b: 29:32:c5:4a:69:92:c3:37:b7:cc:24:26:f9:a7:90: 41:bd:55:04:24:34:dd:b3:cf:4a:d5:c3:94:62:26: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:79:8C:C6:71:D4:A5:81:D4:83:37:D1:FA:5B:F0:80:CB:96:53:57 X509v3 Authority Key Identifier: keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:90:88:4c:84:b0:9e:12:6f:5c:e5:26:17:5f:6c:80:1d:06: 5e:10:85:09:54:7a:8f:9c:26:30:99:03:ba:63:b1:23:ce:b6: c9:e4:1a:52:87:11:03:b5:7f:9b:34:c0:b7:76:85:68:83:af: e0:ea:2a:9c:ca:1e:7a:25:3c:1b:14:47:72:13:b7:2b:99:4c: ab:e8:dd:02:08:91:91:75:5e:c3:8f:30:fb:2f:9e:b0:b1:ec: 88:51:60:73:a5:25:84:05:2c:ab:52:63:64:1e:21:08:b3:5f: 8f:d3:32:00:11:f7:99:0c:20:67:9d:73:7c:1c:36:af:39:07: 9e:69:b7:39:3c:dc:dd:95:96:be:69:3e:ab:98:eb:75:6c:b9: ba:58:a5:1b:5c:6f:ce:45:c1:af:2a:3a:78:66:11:15:aa:fc: 74:23:d1:4f:50:4e:ec:5a:2c:db:b9:c6:66:3c:fe:49:22:7c: e1:5b:a3:d3:18:b1:99:50:00:48:0d:f3:2e:d1:10:be:b6:c2: 29:05:3e:8e:9d:13:0d:2f:d9:d5:19:23:42:9a:37:8c:21:59: 10:0c:90:2e:de:af:56:3b:bb:1e:5c:32:f1:a8:70:7b:c8:c9: 70:0a:f5:00:58:8f:c1:8a:4c:44:8d:59:4c:c2:42:05:16:58: f6:a1:59:22 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MzM3RTVBRjExMC8GA1UEBRMoQzlDMTI5RkJDM0M4MjczQTQ2Mjk1NUE5NTI4RTBB QUMyRjJFOTgyQzAeFw0yNTA0MjcwNDU1NDJaFw0yNTA0MjkwNDU1NDJaMBgxFjAU BgNVBAMTDTY4MGRiOGNlLTE1ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCkunRWLl3jGwsCPekiCROf8ZVLlRJLOHSZ2cAy1mRZxIHIopEgh5hCU7YQ 2OJ6vPUn1+4/fApZWVrOIZTfpXPLxDamXMZuLDOq3xtLYNd6JPHf8mMWjabkJPdt FCwRAKYyFzdy2a0MvXbUYdFy4TZehRkC8kq6nXrIjXWQ9gg6aOFXllDDyG20HRsu soAWYfmv4jLismf2TNbSWNlpoVT/CyRde4uMzq19X9Vq9uh9L9Hp7Tp2L1+IO08y IaE6WT8+c3ozTd4o7woNlCX6HHNHHjVlmfrjcSKj+Bznw1KhCykyxUppksM3t8wk JvmnkEG9VQQkNN2zz0rVw5RiJs6pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0nmM xnHUpYHUgzfR+lvwgMuWU1cwHwYDVR0jBBgwFoAUycEp+8PIJzpGKVWpUo4KrC8u mCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2MkU5NTFBL3ljRXAt OFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ljRXAtOFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy RTk1MUEveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZkIhMhLCeEm9c5SYXX2yAHQZeEIUJ VHqPnCYwmQO6Y7EjzrbJ5BpShxEDtX+bNMC3doVog6/g6iqcyh56JTwbFEdyE7cr mUyr6N0CCJGRdV7DjzD7L56wseyIUWBzpSWEBSyrUmNkHiEIs1+P0zIAEfeZDCBn nXN8HDavOQeeabc5PNzdlZa+aT6rmOt1bLm6WKUbXG/ORcGvKjp4ZhEVqvx0I9FP UE7sWizbucZmPP5JInzhW6PTGLGZUABIDfMu0RC+tsIpBT6OnRMNL9nVGSNCmjeM IVkQDJAu3q9WO7seXDLxqHB7yMlwCvUAWI/BikxEjVlMwkIFFlj2oVki -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:37 2025 by rpki-client on console.sobornost.net