$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json) Hash identifier: RMAzwqz8Woe9IGMqPffvAXHhLkH1r/+URCaydNUBJfw= Subject key identifier: 83:EC:D3:BC:0D:64:10:29:50:4C:D3:58:72:1C:E2:7E:64:FB:34:5C Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Certificate serial: 05BA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft Manifest number: 05A3 Signing time: Sat 26 Apr 2025 02:26:36 +0000 Manifest this update: Sat 26 Apr 2025 02:26:36 +0000 Manifest next update: Mon 28 Apr 2025 02:26:36 +0000 Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: HKC9rheAYbAZxws1MyGQIQaGyH+De0IEnxRmPRBLd4U=) 2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=) 3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=) 4: 43501FBAE8A711EC8C7A6F7CF1222468.roa (hash: pmf9iadVEq9Xd7tUK+UVEKXTVEUvEAAd43Ocd7osxBg=) 5: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=) 6: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=) 7: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=) 8: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=) 9: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=) 10: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=) 11: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=) 12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=) 13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=) 14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=) 15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 00:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Validity Not Before: Apr 26 02:26:36 2025 GMT Not After : Apr 28 02:26:36 2025 GMT Subject: CN=680c445c-f71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:0b:4a:9a:2d:e4:53:c0:10:56:42:68:03: 28:aa:67:34:00:ad:63:f7:cb:ca:8f:9d:c9:c8:44: 70:aa:12:21:a9:e8:b4:cc:d2:ca:f3:ff:fa:0e:1e: 50:95:d3:86:4b:b5:a4:ca:5c:7e:03:46:55:50:4e: a6:35:cb:3b:6e:0d:b5:7b:13:88:e6:e0:b2:fa:c8: 78:c8:a4:67:a5:44:40:25:11:98:db:a7:a9:79:13: 19:f0:aa:9e:32:15:a5:96:25:77:5b:80:20:8d:75: 2b:1b:0d:9c:8e:95:de:d3:68:9e:22:50:a0:49:0d: b6:fb:7b:c8:19:54:74:31:32:9f:84:41:c1:b9:2a: 06:4a:1a:16:56:53:55:c7:1c:43:34:fd:66:27:08: 32:39:1c:93:0b:65:da:5f:32:1b:3b:ae:f2:1a:09: 93:d5:f9:00:e0:b4:70:c0:7c:e5:5e:c4:1c:b6:27: d3:ad:d5:d3:e3:5f:7f:63:0b:07:ae:59:c7:73:a4: 9c:e0:a9:c9:bb:58:69:cc:b0:19:91:b3:52:5e:dc: 8c:a9:84:4c:63:25:01:52:f0:4d:57:4a:6b:4c:b5: 16:2e:da:e8:6e:e3:15:7b:13:d3:93:47:59:dc:f7: ec:c4:53:a9:5e:a7:b2:fe:cf:13:ca:8e:bd:cb:95: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:D3:BC:0D:64:10:29:50:4C:D3:58:72:1C:E2:7E:64:FB:34:5C X509v3 Authority Key Identifier: keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:31:fe:67:3c:4c:fe:20:9b:24:e8:3b:69:28:69:c8:1f:a5: aa:13:74:11:b4:62:cf:77:85:78:0f:75:36:78:1a:d1:92:7f: be:02:1b:5c:c1:de:a2:86:14:d5:64:0b:29:2b:a3:80:c2:4a: d8:49:54:58:09:d0:08:8d:16:f6:3c:59:7b:e6:06:8c:44:1e: 57:73:10:9c:4b:1c:63:0b:b3:bd:ce:0b:20:db:b4:55:de:5e: 55:3f:ac:b3:82:e0:e8:47:db:a2:0d:62:c6:a8:02:ad:08:e7: b7:c4:2b:4d:60:44:54:a3:ad:a8:3d:bb:8d:cc:05:e6:53:94: b7:ae:72:c5:b8:7a:2c:d6:b5:c5:73:55:9b:a1:0b:95:87:a3: 4f:2d:e9:a7:cd:d9:10:10:d6:d3:c1:c5:40:f9:03:cd:70:b9: 76:d4:43:9e:5d:d8:20:96:df:43:2f:86:50:bf:f5:11:36:7c: 3c:12:db:71:e9:fb:00:cb:66:6f:56:c1:04:90:e2:40:5f:24: a1:30:64:e5:17:0f:4d:4e:08:f6:39:cd:52:45:6f:0d:8c:8b: 6f:74:ef:bb:a3:f7:66:1e:63:1c:52:23:b5:64:8b:72:8a:66: 19:88:1c:7d:6b:d6:b1:1e:d8:a6:83:74:94:d6:e9:a2:4a:10: 9e:96:7b:2d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0 OTg0MkM4RDZBMDAeFw0yNTA0MjYwMjI2MzZaFw0yNTA0MjgwMjI2MzZaMBgxFjAU BgNVBAMTDTY4MGM0NDVjLWY3MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC9vgtKmi3kU8AQVkJoAyiqZzQArWP3y8qPncnIRHCqEiGp6LTM0srz//oO HlCV04ZLtaTKXH4DRlVQTqY1yztuDbV7E4jm4LL6yHjIpGelREAlEZjbp6l5Exnw qp4yFaWWJXdbgCCNdSsbDZyOld7TaJ4iUKBJDbb7e8gZVHQxMp+EQcG5KgZKGhZW U1XHHEM0/WYnCDI5HJMLZdpfMhs7rvIaCZPV+QDgtHDAfOVexBy2J9Ot1dPjX39j CweuWcdzpJzgqcm7WGnMsBmRs1Je3IyphExjJQFS8E1XSmtMtRYu2uhu4xV7E9OT R1nc9+zEU6lep7L+zxPKjr3LlR6FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUg+zT vA1kEClQTNNYchzifmT7NFwwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI 1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCMf5nPEz+IJsk6DtpKGnIH6WqE3QR tGLPd4V4D3U2eBrRkn++Ahtcwd6ihhTVZAspK6OAwkrYSVRYCdAIjRb2PFl75gaM RB5XcxCcSxxjC7O9zgsg27RV3l5VP6yzguDoR9uiDWLGqAKtCOe3xCtNYERUo62o PbuNzAXmU5S3rnLFuHos1rXFc1WboQuVh6NPLemnzdkQENbTwcVA+QPNcLl21EOe Xdgglt9DL4ZQv/URNnw8Ettx6fsAy2ZvVsEEkOJAXyShMGTlFw9NTgj2Oc1SRW8N jItvdO+7o/dmHmMcUiO1ZItyimYZiBx9a9axHtimg3SU1umiShCelnst -----END CERTIFICATE-----Generated at Sat Apr 26 06:21:07 2025 by rpki-client on console.sobornost.net