$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json) Hash identifier: kOn4sEWnNA38sQDu3o0fOgsKqo/WXD+eGEi9fxu9O64= Subject key identifier: C7:CF:1A:0E:94:1E:1A:10:FF:96:98:6E:D4:06:9D:F5:FD:9A:7A:6C Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Certificate serial: 07B2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft Manifest number: 07A2 Signing time: Sun 27 Apr 2025 01:48:28 +0000 Manifest this update: Sun 27 Apr 2025 01:48:27 +0000 Manifest next update: Tue 29 Apr 2025 01:48:27 +0000 Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: 4kxNRs5utEW0vV2wJk/BfaoKBLecmTy1+lddFKpauwM=) 2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=) 3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=) 4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=) 5: 924F80688A4E11EC8639028F5A40D577.roa (hash: tnumgrytmuyUCUVB2UaM2OC8r2VqINNEld+/gxdsqJk=) 6: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=) 7: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=) 8: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=) 9: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=) 10: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=) 11: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=) 12: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=) 13: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Validity Not Before: Apr 27 01:48:27 2025 GMT Not After : Apr 29 01:48:27 2025 GMT Subject: CN=680d8cec-713e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e5:ea:be:63:b2:05:9c:1c:22:03:e9:1b:9f: 82:9c:8a:45:4c:d0:8c:21:62:34:9b:9b:b3:3c:1b: 56:01:45:ca:9a:1a:82:09:d9:0e:d4:97:86:75:a1: 7b:c1:72:d7:a3:b5:00:bd:71:d5:3f:d0:08:a5:45: aa:60:66:91:64:0a:eb:3c:f7:70:11:0c:0c:a5:db: 36:95:e9:2a:bf:e7:ff:b3:5a:3a:c0:09:bd:65:88: 22:c4:1c:e8:c6:25:4c:ca:5d:56:c6:19:cd:3d:42: 82:93:0f:f3:76:47:aa:d3:0a:14:0e:74:85:fb:ed: b6:0e:bd:b2:f9:8b:31:f0:bf:86:9d:db:f8:ef:e9: 62:64:0e:18:66:00:41:bc:2b:41:f4:a4:0f:59:3a: c4:dd:2e:85:a4:7d:ad:0f:f0:2b:9f:63:d5:ea:51: 3b:4b:34:24:e3:c1:cf:c9:a7:55:ab:11:45:6e:80: 07:94:94:e4:73:fa:57:8e:e1:e0:5a:8f:98:5f:25: 22:aa:6f:c4:77:ff:e2:bf:88:80:6d:dd:cf:62:d4: 1b:83:a6:de:49:2d:c0:a9:6f:ca:d7:1d:02:91:07: 92:07:e4:5e:55:93:9c:61:e4:3f:ac:f3:1c:57:4c: 37:cc:1a:0f:a4:17:1e:45:7a:83:bb:17:e0:a3:b7: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CF:1A:0E:94:1E:1A:10:FF:96:98:6E:D4:06:9D:F5:FD:9A:7A:6C X509v3 Authority Key Identifier: keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e4:c6:e4:1f:fc:2c:8b:99:cc:f0:cf:b5:41:34:54:a4:8d: 72:1a:0d:34:e4:4b:45:41:f5:95:b9:7e:0c:61:56:cd:f2:b6: 27:84:42:04:ad:84:b6:96:43:12:70:3e:ed:cb:61:fc:2e:8f: 2b:45:0d:71:9a:dd:a7:86:db:47:dd:a3:7d:7b:3c:95:5d:cb: bc:bc:c7:f7:0a:c4:2e:11:3f:92:3e:2e:37:27:d2:20:a3:92: 1c:25:36:e9:d2:21:cd:c3:19:5d:a5:4d:da:28:2a:7f:56:7a: 20:65:ac:c8:84:de:27:6b:87:44:b7:1a:0c:47:c7:6f:61:1f: 52:6f:b7:63:d9:86:c5:18:b7:65:49:f4:e2:e8:a2:17:b2:ac: b8:42:64:63:85:e5:35:3d:86:e5:7a:95:69:2e:fd:af:de:8e: 88:fb:fa:08:ef:b5:1b:de:12:0b:de:3b:e0:30:83:97:ce:5d: 4e:8f:e6:2e:5e:01:7f:21:6b:3b:db:55:79:d8:19:7b:7a:42: d3:38:cb:9b:4c:12:28:1a:64:fd:13:ab:3a:82:2b:ad:e7:dc: e6:41:d0:af:96:05:8d:76:ff:0f:75:68:1e:3b:96:70:40:83: d2:24:8e:a7:6b:e0:81:50:9b:c7:61:09:5b:d1:b0:13:56:07: bc:dd:89:cc -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx RERENTE0RDhGMDAeFw0yNTA0MjcwMTQ4MjdaFw0yNTA0MjkwMTQ4MjdaMBgxFjAU BgNVBAMTDTY4MGQ4Y2VjLTcxM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDx5eq+Y7IFnBwiA+kbn4KcikVM0IwhYjSbm7M8G1YBRcqaGoIJ2Q7Ul4Z1 oXvBctejtQC9cdU/0AilRapgZpFkCus893ARDAyl2zaV6Sq/5/+zWjrACb1liCLE HOjGJUzKXVbGGc09QoKTD/N2R6rTChQOdIX77bYOvbL5izHwv4ad2/jv6WJkDhhm AEG8K0H0pA9ZOsTdLoWkfa0P8CufY9XqUTtLNCTjwc/Jp1WrEUVugAeUlORz+leO 4eBaj5hfJSKqb8R3/+K/iIBt3c9i1BuDpt5JLcCpb8rXHQKRB5IH5F5Vk5xh5D+s 8xxXTDfMGg+kFx5FeoO7F+Cjtz3PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx88a DpQeGhD/lphu1Aad9f2aemwwHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU 2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3 cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhB RUEyMjgvckM1UzdwSzd3Z1dpTVA5M29aQkIzZFVVMlBBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ5MbkH/wsi5nM8M+1QTRUpI1yGg00 5EtFQfWVuX4MYVbN8rYnhEIErYS2lkMScD7ty2H8Lo8rRQ1xmt2nhttH3aN9ezyV Xcu8vMf3CsQuET+SPi43J9Igo5IcJTbp0iHNwxldpU3aKCp/VnogZazIhN4na4dE txoMR8dvYR9Sb7dj2YbFGLdlSfTi6KIXsqy4QmRjheU1PYblepVpLv2v3o6I+/oI 77Ub3hIL3jvgMIOXzl1Oj+YuXgF/IWs721V52Bl7ekLTOMubTBIoGmT9E6s6giut 59zmQdCvlgWNdv8PdWgeO5ZwQIPSJI6na+CBUJvHYQlb0bATVge83YnM -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:48 2025 by rpki-client on console.sobornost.net