$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft File: SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json) Hash identifier: 5oO5DG6ImEPDAFyXaL6pKp2f95eUAGzu4OCfh4MzyTo= Subject key identifier: 5A:30:31:07:1F:0C:C5:F5:E9:98:E2:19:5B:E4:76:CE:42:46:25:DE Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Certificate serial: 032D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft Manifest number: 0321 Signing time: Mon 28 Apr 2025 03:41:58 +0000 Manifest this update: Mon 28 Apr 2025 03:41:57 +0000 Manifest next update: Wed 30 Apr 2025 03:41:57 +0000 Files and hashes: 1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: WSJ/agS4awBgTq6T7lWDMJg2ge7XA2NnixA6e6t2hVg=) 2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=) 3: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=) 4: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=) 5: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=) 6: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=) 7: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=) 8: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=) 9: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=) 10: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=) 11: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=) 12: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 30 Apr 2025 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Validity Not Before: Apr 28 03:41:57 2025 GMT Not After : Apr 30 03:41:57 2025 GMT Subject: CN=680ef906-49a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b7:af:0a:08:d0:90:5d:84:ff:82:16:da:c1: 65:9d:b5:2a:30:67:a0:5b:10:65:78:1c:6c:aa:cb: 4d:c1:e4:24:93:7b:03:73:84:5e:65:55:72:0b:38: 70:0d:33:e1:80:e5:c9:f8:49:10:f9:8f:76:32:be: 38:ac:25:6a:dc:fb:50:b3:ab:aa:c7:fc:3e:88:3f: 0e:aa:a4:86:09:64:0b:07:5c:23:b5:3d:a1:2e:5a: bf:32:38:df:d6:91:1e:6d:aa:51:bc:6b:db:fb:7d: 30:28:65:d5:ab:96:a2:df:68:f6:e8:40:f2:85:e8: 07:95:8c:9e:5e:77:b0:bf:03:e8:5e:ac:40:f5:ec: b6:84:28:04:e1:67:72:94:40:f6:32:55:1e:ce:27: f6:f7:21:db:53:68:f7:9a:26:a2:f9:d9:5f:73:d4: 81:cf:98:ae:da:1b:09:eb:80:46:37:1a:11:6a:47: 82:10:3c:55:ed:a9:38:51:f4:b8:8d:86:3f:1b:df: 88:70:ed:92:bc:56:fa:ce:83:9d:4e:73:bc:e6:f9: 0b:1b:4a:90:e7:3f:e6:43:47:5e:97:4a:55:cd:0e: 48:98:f0:d9:42:a0:8e:19:8f:55:dd:b8:5a:2e:f8: 79:d2:a9:b1:9d:06:23:cf:bf:36:c7:3f:23:de:93: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:31:07:1F:0C:C5:F5:E9:98:E2:19:5B:E4:76:CE:42:46:25:DE X509v3 Authority Key Identifier: keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a8:b3:80:b5:28:e1:cf:53:74:78:29:c8:14:fc:7f:8c:c9: 1e:ed:a4:2f:97:7b:87:97:c1:4f:4c:f0:32:5a:25:a5:c2:90: 83:4e:53:09:91:6e:59:e8:51:cf:1f:0e:8c:7b:64:e9:6e:0f: 73:6d:a7:25:30:14:d1:e7:95:05:ff:63:cd:79:8f:bf:e8:6b: 2c:9c:17:cb:66:c7:c5:96:32:e0:3f:44:ce:80:c4:57:e6:09: f8:d1:39:93:39:ea:05:04:40:ab:7b:20:96:ba:66:c8:36:97: a4:b1:01:83:7a:01:71:5c:b0:50:4a:55:e8:7d:c5:cc:99:c5: 26:ff:1b:dc:0f:15:e1:79:e7:2a:40:a6:ef:43:86:12:ed:d2: 21:b0:cc:65:75:3b:6e:7a:aa:bb:8a:ef:4f:3f:33:46:ab:7c: 0e:fe:6a:8c:21:e0:92:43:c7:cf:f2:20:48:9d:a1:1a:b6:12: d9:cc:3d:6b:cd:6b:fe:95:5a:8a:bb:64:61:a8:48:ed:c7:c9: ef:b8:72:3d:bc:f9:c1:a5:15:03:8a:e3:ec:97:ac:bc:8b:df: 08:15:f4:18:35:cf:ca:f3:23:c2:06:c2:9f:ed:08:29:d1:f4: 5c:72:67:44:ab:14:62:9f:f0:9d:4b:1a:8a:d2:19:d0:eb:30: a3:93:e7:17 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz RUI1ODdCNEM4MjAeFw0yNTA0MjgwMzQxNTdaFw0yNTA0MzAwMzQxNTdaMBgxFjAU BgNVBAMTDTY4MGVmOTA2LTQ5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQD0t68KCNCQXYT/ghbawWWdtSowZ6BbEGV4HGyqy03B5CSTewNzhF5lVXIL OHANM+GA5cn4SRD5j3YyvjisJWrc+1Czq6rH/D6IPw6qpIYJZAsHXCO1PaEuWr8y ON/WkR5tqlG8a9v7fTAoZdWrlqLfaPboQPKF6AeVjJ5ed7C/A+herED17LaEKATh Z3KUQPYyVR7OJ/b3IdtTaPeaJqL52V9z1IHPmK7aGwnrgEY3GhFqR4IQPFXtqThR 9LiNhj8b34hw7ZK8VvrOg51Oc7zm+QsbSpDnP+ZDR16XSlXNDkiY8NlCoI4Zj1Xd uFou+HnSqbGdBiPPvzbHPyPekxKpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWjAx Bx8MxfXpmOIZW+R2zkJGJd4wHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7 TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODFFRDAvNTI1MUMwNzhDRTI0MTFFREEwOTJEMEFDRjEy MjI0NjgvU29Qekd4c0dCTXB0QzNLa1U5cWo2MWg3VElJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzqLOAtSjhz1N0eCnIFPx/jMke7aQv l3uHl8FPTPAyWiWlwpCDTlMJkW5Z6FHPHw6Me2Tpbg9zbaclMBTR55UF/2PNeY+/ 6GssnBfLZsfFljLgP0TOgMRX5gn40TmTOeoFBECreyCWumbINpeksQGDegFxXLBQ SlXofcXMmcUm/xvcDxXheecqQKbvQ4YS7dIhsMxldTtueqq7iu9PPzNGq3wO/mqM IeCSQ8fP8iBInaEathLZzD1rzWv+lVqKu2RhqEjtx8nvuHI9vPnBpRUDiuPsl6y8 i98IFfQYNc/K8yPCBsKf7Qgp0fRccmdEqxRin/CdSxqK0hnQ6zCjk+cX -----END CERTIFICATE-----Generated at Mon Apr 28 06:02:34 2025 by rpki-client on console.sobornost.net