$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json) Hash identifier: XUZF0psV0oAm75+RPOW0zg7cClX66mZAHBdoNWQNQpY= Subject key identifier: 1C:66:1F:69:F9:B6:60:4C:93:BF:DD:A6:B0:72:09:08:AF:69:37:B5 Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Certificate serial: 05CA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft Manifest number: 05B3 Signing time: Mon 12 May 2025 02:26:24 +0000 Manifest this update: Mon 12 May 2025 02:26:23 +0000 Manifest next update: Wed 14 May 2025 02:26:23 +0000 Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: Pq219oYv+fEjfKVr5+ZQ9WGuMQQyD0e6/nobH5QiE0g=) 2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=) 3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=) 4: 43501FBAE8A711EC8C7A6F7CF1222468.roa (hash: pmf9iadVEq9Xd7tUK+UVEKXTVEUvEAAd43Ocd7osxBg=) 5: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=) 6: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=) 7: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=) 8: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=) 9: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=) 10: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=) 11: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=) 12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=) 13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=) 14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=) 15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 May 2025 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Validity Not Before: May 12 02:26:23 2025 GMT Not After : May 14 02:26:23 2025 GMT Subject: CN=68215c50-18bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:ae:f9:eb:1b:4d:f4:a8:31:89:c9:4e:b6: da:5d:fd:9c:9c:b9:75:63:d0:65:33:af:6f:ff:fe: f6:06:72:3d:a2:9d:26:67:3a:6b:82:a9:d7:e0:fe: 17:21:cd:fc:f0:76:48:1d:8a:5f:bd:79:8a:9b:77: f0:8d:84:e7:94:be:a7:b9:09:37:f3:bc:de:1c:98: 1c:26:b5:35:39:33:90:ba:be:f9:aa:72:e2:db:fb: 2f:4a:9f:38:3e:4d:a2:34:48:33:98:27:ba:08:3c: 82:35:ca:e7:1d:ae:0a:12:55:b9:50:46:46:13:3a: e2:99:7c:01:15:96:c2:89:dc:33:5c:98:86:7c:30: e2:64:6c:13:18:3b:ee:32:69:ef:ae:3e:4a:33:c9: fd:f1:36:b7:75:22:12:ca:81:a5:8c:93:75:cb:54: 09:8a:cb:de:8c:61:36:ba:54:da:8a:9e:89:73:fb: 58:58:e9:82:7e:1c:36:12:d8:4d:de:3b:34:b2:90: b3:13:ed:5a:f2:14:42:72:9a:79:e5:76:c0:ae:2c: 1a:4b:40:3b:74:9a:5e:4f:4c:e0:c8:0b:8b:b6:94: a9:5b:6c:ac:7a:8a:58:95:f1:ab:8e:d3:61:d2:54: 61:36:ad:2a:75:20:50:28:4c:61:c6:5e:ee:a0:3c: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:66:1F:69:F9:B6:60:4C:93:BF:DD:A6:B0:72:09:08:AF:69:37:B5 X509v3 Authority Key Identifier: keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d2:bd:8b:13:4b:10:26:23:b4:79:7d:05:7c:a1:b4:c4:f7: 0c:56:8b:7c:ea:ff:11:9d:d1:14:56:8f:aa:93:2c:48:ad:3d: b6:62:4d:09:7c:ad:f0:09:ac:e6:d8:26:fc:55:bd:8a:80:03: be:da:db:6c:96:8a:ef:4c:f0:cc:10:11:63:f3:66:f0:82:3b: 9a:0e:89:17:d2:d2:ae:a9:e7:32:b4:61:99:89:db:9a:06:e5: c5:44:e5:4f:c0:1c:47:90:88:bf:f3:a8:e6:75:18:73:06:ed: a5:b5:b5:d9:b6:bc:89:f3:29:4c:f7:d8:25:0a:50:e6:56:6b: f8:56:ef:53:a3:ec:78:c1:2a:27:6c:7e:0f:82:d6:14:5d:a5: e9:fc:cd:f8:34:8c:88:fd:78:1a:f0:6b:27:28:5d:94:87:d6: 39:d5:c8:10:53:d0:c1:09:04:ce:8f:b5:40:a9:55:63:54:1c: 92:36:08:ca:3d:47:02:cf:c4:69:33:7a:b4:44:ca:aa:df:20: b6:6c:fc:c0:c5:d1:bc:d9:47:a8:61:11:0b:8d:85:58:37:f7: 57:9c:6b:60:43:09:39:e5:da:6c:d4:ec:8b:2d:3d:4a:f6:30: fc:c6:e2:cf:67:22:7c:8f:7e:d2:54:71:80:e2:f0:1f:8b:e5: 20:ba:fc:2d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBcowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0 OTg0MkM4RDZBMDAeFw0yNTA1MTIwMjI2MjNaFw0yNTA1MTQwMjI2MjNaMBgxFjAU BgNVBAMTDTY4MjE1YzUwLTE4YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC5TK756xtN9KgxiclOttpd/ZycuXVj0GUzr2///vYGcj2inSZnOmuCqdfg /hchzfzwdkgdil+9eYqbd/CNhOeUvqe5CTfzvN4cmBwmtTU5M5C6vvmqcuLb+y9K nzg+TaI0SDOYJ7oIPII1yucdrgoSVblQRkYTOuKZfAEVlsKJ3DNcmIZ8MOJkbBMY O+4yae+uPkozyf3xNrd1IhLKgaWMk3XLVAmKy96MYTa6VNqKnolz+1hY6YJ+HDYS 2E3eOzSykLMT7VryFEJymnnldsCuLBpLQDt0ml5PTODIC4u2lKlbbKx6iliV8auO 02HSVGE2rSp1IFAoTGHGXu6gPEZ9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHGYf afm2YEyTv92msHIJCK9pN7UwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI 1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAI0r2LE0sQJiO0eX0FfKG0xPcMVot8 6v8RndEUVo+qkyxIrT22Yk0JfK3wCazm2Cb8Vb2KgAO+2ttslorvTPDMEBFj82bw gjuaDokX0tKuqecytGGZiduaBuXFROVPwBxHkIi/86jmdRhzBu2ltbXZtryJ8ylM 99glClDmVmv4Vu9To+x4wSonbH4PgtYUXaXp/M34NIyI/Xga8GsnKF2Uh9Y51cgQ U9DBCQTOj7VAqVVjVBySNgjKPUcCz8RpM3q0RMqq3yC2bPzAxdG82UeoYRELjYVY N/dXnGtgQwk55dps1OyLLT1K9jD8xuLPZyJ8j37SVHGA4vAfi+Uguvwt -----END CERTIFICATE-----Generated at Tue May 13 00:13:09 2025 by rpki-client