$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: zk8ako00c9SEyYQi0MNrm4qkori8LFPgBljUxdrIgj4= Subject key identifier: 91:4F:3D:30:A3:E0:15:E3:14:39:AF:CF:4F:A4:0F:29:9B:0C:A2:84 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 01A9 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 019E Signing time: Mon 28 Apr 2025 04:31:18 +0000 Manifest this update: Mon 28 Apr 2025 04:31:18 +0000 Manifest next update: Wed 30 Apr 2025 04:31:18 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: wKPECfS3bZto/jLCbVOg+LOib6GV4rlnOgvsE+C6O60=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 8: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 9: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 10: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 11: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 30 Apr 2025 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Apr 28 04:31:18 2025 GMT Not After : Apr 30 04:31:18 2025 GMT Subject: CN=680f0496-59a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:ca:19:b2:02:40:a5:22:5c:5a:e6:7c:d2: f8:5b:46:93:a2:f0:5f:39:3a:09:9f:3c:1f:71:56: 31:aa:12:34:05:6b:87:21:e8:07:07:1b:6d:37:f6: ca:76:a8:ae:77:15:69:ec:f3:f6:d7:27:48:fd:ed: c8:05:f4:1d:da:55:69:63:ca:00:0f:9d:47:a7:c6: e3:0c:61:1d:12:09:18:19:b0:65:dc:91:c1:41:43: 1f:a8:4f:45:b2:3a:83:b9:86:8f:96:01:f5:87:15: 5f:ba:33:b8:5b:56:ef:15:da:02:2b:7d:1b:b9:ab: f6:3f:3e:62:84:56:e0:44:37:b3:7e:db:8a:5b:2e: 58:11:26:13:7c:d6:68:1a:77:ec:00:e9:b2:4c:ed: d4:03:9c:54:f4:c2:d3:e7:44:66:8d:a9:8c:34:4d: ec:86:41:e9:d8:0e:3b:08:40:09:88:62:a0:8b:c3: 06:ea:02:d9:1a:23:29:61:ff:f7:c9:0d:de:06:55: 77:a6:f7:cf:05:da:60:ff:af:1b:be:75:d9:81:fe: fc:9c:fc:1d:d5:ae:cf:c1:97:db:4a:07:66:76:8d: 4c:ba:a9:9a:2c:fa:a7:60:fd:1c:68:5b:53:5e:b7: f2:de:d3:c1:e2:b6:ab:8c:a3:e7:f4:e3:0e:2d:04: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4F:3D:30:A3:E0:15:E3:14:39:AF:CF:4F:A4:0F:29:9B:0C:A2:84 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:4f:97:b0:5a:4d:ea:87:0a:24:42:f5:20:f5:3e:e7:e6: 8b:58:ba:c5:b1:48:a4:d4:54:3d:1e:30:9b:77:b2:66:43:81: cf:37:d6:c3:aa:85:68:07:3d:76:13:44:d9:4e:70:3e:12:be: 55:2d:e7:70:74:6c:43:77:af:f3:a3:22:ea:5a:57:cd:1e:75: 58:6f:33:99:89:70:77:f8:f9:11:e5:c9:b8:96:94:bd:26:4a: 69:22:89:c8:35:fe:72:20:82:dc:32:07:28:cc:d1:98:4c:f8: b8:51:45:b3:d1:f7:d6:13:ba:32:d0:2f:69:57:2c:01:25:8d: 7d:4d:20:ca:a4:c6:e0:9f:91:19:83:40:0c:4f:dd:d3:39:a8: 72:0c:4d:dc:39:12:b9:d1:8b:4b:76:b0:6a:ec:03:33:c2:18: 8d:52:5d:79:a8:86:a4:2b:33:d0:eb:2d:8a:ae:ac:4b:3d:bc: 6c:6d:d5:5a:5e:bd:44:13:ae:45:e7:41:a3:b8:4c:de:4f:b3: 7a:ad:2c:a4:b6:de:23:61:d1:ce:dd:d1:28:62:3a:58:a6:4b: 7c:91:ea:5e:61:eb:c0:37:eb:f3:fa:72:af:cb:a8:40:b3:60: 2c:e1:b4:0f:80:6b:c2:10:ea:a1:a2:8e:66:6b:a9:78:5d:b3: fd:b8:4b:8c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA0MjgwNDMxMThaFw0yNTA0MzAwNDMxMThaMBgxFjAU BgNVBAMTDTY4MGYwNDk2LTU5YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDINsoZsgJApSJcWuZ80vhbRpOi8F85OgmfPB9xVjGqEjQFa4ch6AcHG203 9sp2qK53FWns8/bXJ0j97cgF9B3aVWljygAPnUenxuMMYR0SCRgZsGXckcFBQx+o T0WyOoO5ho+WAfWHFV+6M7hbVu8V2gIrfRu5q/Y/PmKEVuBEN7N+24pbLlgRJhN8 1mgad+wA6bJM7dQDnFT0wtPnRGaNqYw0TeyGQenYDjsIQAmIYqCLwwbqAtkaIylh //fJDd4GVXem988F2mD/rxu+ddmB/vyc/B3Vrs/Bl9tKB2Z2jUy6qZos+qdg/Rxo W1Net/Le08HitquMo+f04w4tBE+5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkU89 MKPgFeMUOa/PT6QPKZsMooQwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMf0+XsFpN6ocKJEL1IPU+5+aLWLrF sUik1FQ9HjCbd7JmQ4HPN9bDqoVoBz12E0TZTnA+Er5VLedwdGxDd6/zoyLqWlfN HnVYbzOZiXB3+PkR5cm4lpS9JkppIonINf5yIILcMgcozNGYTPi4UUWz0ffWE7oy 0C9pVywBJY19TSDKpMbgn5EZg0AMT93TOahyDE3cORK50YtLdrBq7AMzwhiNUl15 qIakKzPQ6y2KrqxLPbxsbdVaXr1EE65F50GjuEzeT7N6rSyktt4jYdHO3dEoYjpY pkt8kepeYevAN+vz+nKvy6hAs2As4bQPgGvCEOqhoo5ma6l4XbP9uEuM -----END CERTIFICATE-----Generated at Mon Apr 28 08:25:30 2025 by rpki-client on console.sobornost.net