$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: jlXAYrSNSKWjo/ePeQWCY9wSsqFoq7BPj8hvKvr4DsA= Subject key identifier: E7:1C:B8:30:2E:3F:9E:69:42:81:8E:F8:2F:93:78:9C:E3:D4:DA:9D Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 0349 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 0339 Signing time: Sun 27 Apr 2025 03:33:17 +0000 Manifest this update: Sun 27 Apr 2025 03:33:16 +0000 Manifest next update: Tue 29 Apr 2025 03:33:16 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: HTPWX+ahsmRbZ4avmtxRhpXE8fogeD2HECoLaQJyl3s=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Apr 27 03:33:16 2025 GMT Not After : Apr 29 03:33:16 2025 GMT Subject: CN=680da57d-57eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:e3:ee:dd:1c:77:f9:eb:58:d7:f8:23:df: 0b:cc:70:0f:13:43:b3:f1:80:ee:fd:f8:a3:2d:e2: e3:93:b1:b9:79:f8:f0:45:df:ae:83:72:e1:9e:5a: b5:25:ec:4a:1c:6f:ae:cd:e6:2b:fa:00:9c:99:23: ed:ad:32:60:11:27:2d:63:cd:45:d7:83:f4:a9:5e: bb:27:d3:3d:e7:ed:cd:f3:08:ae:8a:d4:14:0c:b1: bb:ff:aa:e8:37:ef:ae:c0:c0:eb:64:5a:3a:e1:a3: e5:6f:84:e8:e7:8b:84:34:93:95:e2:e0:f0:cb:52: e2:87:d5:c5:19:5e:fb:08:49:fd:2f:87:47:d9:f6: 44:04:be:28:89:80:4b:a4:67:a3:0d:2d:35:37:9d: c6:2e:a4:3d:57:40:b5:0f:10:be:1d:96:46:f7:82: 33:1b:ad:45:95:10:10:da:3d:97:65:36:db:f0:de: 56:6a:cc:f4:8b:1b:1d:86:4a:18:5d:f3:ed:86:66: db:80:73:47:cb:0d:15:b8:8a:e0:31:8b:de:79:05: 33:36:e1:a0:b4:90:c2:1d:6f:d4:e2:89:ec:0f:76: 2e:d2:99:2a:45:05:4b:5c:06:e2:33:7e:80:11:9b: 71:d1:2e:90:20:c8:8b:ed:fd:f2:21:7a:0c:43:43: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:B8:30:2E:3F:9E:69:42:81:8E:F8:2F:93:78:9C:E3:D4:DA:9D X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:af:31:6c:a8:6b:68:59:55:3a:93:c0:e3:bb:60:24:28:46: ee:73:fb:f8:22:2a:1a:90:26:b0:8f:db:3a:3c:bf:1c:bc:63: 22:c0:1a:6c:d9:56:32:30:50:9d:05:7e:55:84:43:dd:fa:9d: 8d:ec:f1:c6:df:9c:b8:f1:19:f4:28:4f:4c:3c:68:1d:a3:8f: 84:83:f5:ff:a2:3b:e3:25:ab:06:03:01:72:ad:94:4f:50:2f: f5:85:6b:10:9c:48:62:1a:61:fb:d6:3d:54:e3:e1:e8:c5:ab: 99:6f:bb:41:1a:58:bb:ac:8b:b1:9b:ce:b3:e9:15:01:f4:37: 3b:2b:cb:57:5e:d4:59:57:e7:5a:60:45:9b:c3:61:27:59:2a: 00:8d:d6:c2:b5:ce:5d:76:37:da:76:e0:f5:aa:f4:87:1c:c2: 16:db:ee:6f:47:34:65:1b:2e:6c:74:22:60:a8:a9:60:f1:1f: 12:f2:38:ba:83:8e:64:da:4f:b6:e5:5b:3d:be:70:6e:66:54: 2d:73:e2:64:f4:f3:fb:00:3b:93:74:5d:e7:96:0a:84:74:08: 9f:54:60:f9:87:2b:be:8b:46:17:3f:8e:6f:92:8a:43:e2:fe: 06:c2:b6:6e:64:3b:5a:34:1c:d0:18:14:33:1a:0d:c0:01:91: c0:cf:22:7b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA0MjcwMzMzMTZaFw0yNTA0MjkwMzMzMTZaMBgxFjAU BgNVBAMTDTY4MGRhNTdkLTU3ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC11ePu3Rx3+etY1/gj3wvMcA8TQ7PxgO79+KMt4uOTsbl5+PBF366DcuGe WrUl7Eocb67N5iv6AJyZI+2tMmARJy1jzUXXg/SpXrsn0z3n7c3zCK6K1BQMsbv/ qug3767AwOtkWjrho+VvhOjni4Q0k5Xi4PDLUuKH1cUZXvsISf0vh0fZ9kQEviiJ gEukZ6MNLTU3ncYupD1XQLUPEL4dlkb3gjMbrUWVEBDaPZdlNtvw3lZqzPSLGx2G Shhd8+2GZtuAc0fLDRW4iuAxi955BTM24aC0kMIdb9TiiewPdi7SmSpFBUtcBuIz foARm3HRLpAgyIvt/fIhegxDQ0QvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU5xy4 MC4/nmlCgY74L5N4nOPU2p0wHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBArzFsqGtoWVU6k8Dju2AkKEbuc/v4Iioa kCawj9s6PL8cvGMiwBps2VYyMFCdBX5VhEPd+p2N7PHG35y48Rn0KE9MPGgdo4+E g/X/ojvjJasGAwFyrZRPUC/1hWsQnEhiGmH71j1U4+HoxauZb7tBGli7rIuxm86z 6RUB9Dc7K8tXXtRZV+daYEWbw2EnWSoAjdbCtc5ddjfaduD1qvSHHMIW2+5vRzRl Gy5sdCJgqKlg8R8S8ji6g45k2k+25Vs9vnBuZlQtc+Jk9PP7ADuTdF3nlgqEdAif VGD5hyu+i0YXP45vkopD4v4GwrZuZDtaNBzQGBQzGg3AAZHAzyJ7 -----END CERTIFICATE-----Generated at Sun Apr 27 05:35:41 2025 by rpki-client on console.sobornost.net