$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: +gs4vZoOqSpFvBWxOUdnxmbicTffeP8uTZEqmCidliA= Subject key identifier: C7:9C:71:25:27:E1:54:33:6F:54:6E:D3:2D:61:0A:8A:DA:14:EE:FB Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 06C8 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 0661 Signing time: Thu 24 Apr 2025 02:12:55 +0000 Manifest this update: Thu 24 Apr 2025 02:12:54 +0000 Manifest next update: Sat 26 Apr 2025 02:12:54 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: 06SODzLX9+blZHYGsCncfrg5/ISv3THIaKWKdiUTE5E=) 2: B8419F060BA911F0AE291B6E762E951A.roa (hash: m8Bb8NoO1D+xiWKOmt0v+8wQGL39FsFRi5rMWWAs3Nk=) 3: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=) 4: 61E6EBC23A2911EF83088748762E951A.roa (hash: iFBYzRfE/E2YvLoXLa2uiVHfBVaThKSU03QGnik9L4A=) 5: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 6: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 7: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=) 8: 12A476563A2911EFA2721E48762E951A.roa (hash: e3V5AAsj+AntU1+tap+GSIMt0rdBfXlp80uPXMWrRDA=) 9: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 10: D45146480BA811F0965DEC69762E951A.roa (hash: /38gf9L/lK+aNxVRmRr+WwErxz1SgWT4QmXDrhoLlwc=) 11: 7C4F95340BA911F0B72BFF6D762E951A.roa (hash: wQsXfcY17ALNj3m3NpLuAW/uC5x5FHlFx/tv0frZ2aQ=) 12: 02EF1DC60BAA11F09DB9FB71762E951A.roa (hash: inZXUhfqreSJFiRhNzpeSLsmYXgoI2B/ekZfVg0es18=) 13: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) 14: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 26 Apr 2025 00:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: Apr 24 02:12:54 2025 GMT Not After : Apr 26 02:12:54 2025 GMT Subject: CN=68099e27-1197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:02:b4:a2:0c:58:a3:e7:14:12:4c:91:73:01: 19:73:30:af:ce:5c:33:5c:98:95:f4:a9:d7:12:c5: 94:e8:ef:d1:87:7e:bd:ab:63:3e:c2:db:57:3e:ca: 23:45:20:4b:39:3a:5a:41:e2:e0:88:22:2f:1f:b3: 09:70:dd:c9:46:0a:21:c3:97:42:83:ad:b1:4f:9c: 73:dc:74:78:57:b4:51:46:fb:4c:50:7f:0c:23:4a: 54:c2:50:11:7b:2d:19:bf:93:72:9e:2f:e9:b4:89: d0:69:89:2e:d9:e2:f6:98:bc:29:5b:d9:7a:44:4a: 43:d4:6c:0e:00:50:67:6a:30:98:e3:c9:92:52:80: 2b:63:73:61:15:ae:9d:fd:56:c8:c9:88:80:31:8e: b8:88:17:13:cb:83:34:bd:c4:ae:9d:db:65:33:2d: eb:c9:bd:9c:cd:83:8c:38:4c:b2:9a:38:41:33:10: 2a:b8:6d:f5:0a:70:60:9a:c2:3c:1d:40:e4:9d:3f: 3e:63:2d:cf:35:61:1c:02:c3:84:78:e3:af:66:9b: 36:79:38:93:9f:c1:8f:c2:df:0b:33:68:54:f4:ea: f4:0f:5c:f8:67:fa:80:ca:39:73:43:de:2a:2b:1b: bc:f3:a6:54:fd:25:ac:c6:c6:79:2f:3b:0b:b8:7b: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9C:71:25:27:E1:54:33:6F:54:6E:D3:2D:61:0A:8A:DA:14:EE:FB X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:72:9a:b2:4c:0a:cb:01:8c:78:ef:17:47:57:1b:a4:18:63: 06:e4:af:9e:40:26:e1:5b:e9:16:2f:d7:1c:01:16:30:8e:eb: 64:09:01:a0:4e:ed:3c:e9:a3:b9:52:5e:07:ac:b3:dd:a8:4e: bd:5e:fb:c8:1e:80:20:72:0a:bb:98:9d:50:dd:df:3a:64:ba: 9e:63:4c:16:d1:b1:b1:b7:1d:97:d1:2e:5c:78:b0:ed:c8:48: c4:2d:02:8d:72:39:c5:ab:37:7a:44:b2:3a:69:8c:4f:fe:93: 15:4e:b4:08:00:13:c5:07:56:ae:01:57:7f:32:b1:fd:08:73: cc:7c:c2:c7:db:2a:b1:bf:df:7d:d0:a6:e6:4c:e0:57:12:27: 23:75:b6:59:a5:e7:ab:f0:34:81:40:0c:91:2c:0b:45:d7:c1: 33:92:30:e9:6b:8c:2e:42:21:6b:88:5f:7f:62:c6:3f:10:0e: 1b:dd:8d:bf:30:50:ed:d6:1f:90:73:cf:5d:7b:13:16:8f:99: 39:76:0b:b8:b4:59:02:9b:4e:8e:5d:4e:36:8a:bc:bf:79:d3: 9b:d8:36:81:f2:37:4e:69:a6:e1:c2:16:23:2f:b7:00:13:b3: 6c:41:36:37:b1:7e:9c:79:d0:c3:14:93:4b:c1:17:a9:73:f3: 3e:db:87:6f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA0MjQwMjEyNTRaFw0yNTA0MjYwMjEyNTRaMBgxFjAU BgNVBAMTDTY4MDk5ZTI3LTExOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCbArSiDFij5xQSTJFzARlzMK/OXDNcmJX0qdcSxZTo79GHfr2rYz7C21c+ yiNFIEs5OlpB4uCIIi8fswlw3clGCiHDl0KDrbFPnHPcdHhXtFFG+0xQfwwjSlTC UBF7LRm/k3KeL+m0idBpiS7Z4vaYvClb2XpESkPUbA4AUGdqMJjjyZJSgCtjc2EV rp39VsjJiIAxjriIFxPLgzS9xK6d22UzLevJvZzNg4w4TLKaOEEzECq4bfUKcGCa wjwdQOSdPz5jLc81YRwCw4R4469mmzZ5OJOfwY/C3wszaFT06vQPXPhn+oDKOXND 3iorG7zzplT9JazGxnkvOwu4e1JxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx5xx JSfhVDNvVG7TLWEKitoU7vswHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPcpqyTArLAYx47xdHVxukGGMG5K+e QCbhW+kWL9ccARYwjutkCQGgTu086aO5Ul4HrLPdqE69XvvIHoAgcgq7mJ1Q3d86 ZLqeY0wW0bGxtx2X0S5ceLDtyEjELQKNcjnFqzd6RLI6aYxP/pMVTrQIABPFB1au AVd/MrH9CHPMfMLH2yqxv9990KbmTOBXEicjdbZZpeer8DSBQAyRLAtF18EzkjDp a4wuQiFriF9/YsY/EA4b3Y2/MFDt1h+Qc89dexMWj5k5dgu4tFkCm06OXU42iry/ edOb2DaB8jdOaabhwhYjL7cAE7NsQTY3sX6cedDDFJNLwRepc/M+24dv -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:58 2025 by rpki-client on console.sobornost.net