$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft File: x4zcO11LE2dctIrTtjvgHsWoB_g.mft (raw, json) Hash identifier: IP+encke2tcek0sMKzbrx/4hi9WZADDjTBPzUDrSJX4= Subject key identifier: 47:06:CD:44:12:DE:C0:DB:23:83:CE:9F:48:A4:B3:DC:F5:0A:D0:C2 Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Certificate serial: 0438 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft Manifest number: 0429 Signing time: Sun 29 Jun 2025 03:16:50 +0000 Manifest this update: Sun 29 Jun 2025 03:16:50 +0000 Manifest next update: Tue 01 Jul 2025 03:16:50 +0000 Files and hashes: 1: x4zcO11LE2dctIrTtjvgHsWoB_g.crl (hash: FxZTLtT0a2XIWyUqFnIibKEwKvS5HCLJI6qa8aX9D9U=) 2: 45E09460492011EDA58FEACFF1222468.roa (hash: W7ubFeQV8onhDcwxeg30ugXXalNtBd+ZG/y/BamgqXk=) 3: 99986272498611F0BE1E23EEDAE4EC9C.roa (hash: Z4gQzojiEKX5fZtqwTgoYBRKXPibvfeQJQnSktukfUM=) 4: 61F3ED46A71011EFA4F58993762E951A.roa (hash: S/a4NOGDMCYqavfy2n6nHPuJWnA8uLXKDGrhZokqBOA=) 5: 88A5B71428C311F0BEF0A0B4DAE4EC9C.roa (hash: ePq4EbCDmWiOxXuBQCEii4Bej/F9RXahE4beV/zVjQ0=) 6: 24769B8AC01B11EE87488562775412E6.roa (hash: Juiav7EMo7UB6/g3W5W1dR2kpf5FMViakz+hnSTb9pI=) 7: CE07EBFC434F11EE9E338E5E4AD9E6FC.roa (hash: lLKF/LQUCJrjFGeoKrxD3GvZk7yNLfxsdpj4p8cAFcg=) 8: BA5646848B9311EFB18C87BF762E951A.roa (hash: JPWhpnri236k1i+Gn96J/0YOtSYJC79c9FGJpIaebkg=) 9: 76506164C45911EFBD701FB3762E951A.roa (hash: 99UKUf4fnRe0MO3HcCv5JDIcqSTWLiXWxRxR3pGatmc=) 10: 73CC053C4EB611F0AE15C1C8DAE4EC9C.roa (hash: SQV1YsdD1Ajwa0W56ES+0u6UJCxHEKEeYvpdGKFa0ZE=) 11: C4CEB8AC398711EF843D2E9D762E951A.roa (hash: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=) 12: 08DB71BC53EA11EF98E06585762E951A.roa (hash: 9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=) 13: A278A9AC60E211EF938734A9762E951A.roa (hash: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=) 14: 8390093077E011EF94B4F59C762E951A.roa (hash: /gwS+GQo/DPLk6XCYBj5Tt7o/4lhGYntAWZgy7TgGi0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 01 Jul 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Validity Not Before: Jun 29 03:16:50 2025 GMT Not After : Jul 1 03:16:50 2025 GMT Subject: CN=6860b022-394c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:de:09:00:29:26:04:56:8e:5a:c0:36:fc: 00:38:d4:27:b6:69:76:09:9f:51:1b:5f:01:84:cb: dd:c2:f6:c2:b7:27:d0:7e:d4:6e:3f:96:40:58:86: 11:d7:79:81:a7:49:2b:c5:74:d5:2d:94:4e:99:09: 3e:21:61:8e:44:be:db:8b:5f:8a:a8:16:b5:3f:fb: 2d:50:29:37:41:2c:f0:6d:04:5a:1b:a8:63:f3:27: 04:54:c2:e2:f1:44:b3:c9:f0:bc:0e:74:bb:27:eb: 98:9e:29:60:18:73:be:95:5f:9e:09:f6:1d:13:08: f8:9a:36:15:1c:53:93:0b:7b:47:4b:de:25:ba:55: 05:ed:58:2f:2b:49:95:ef:24:da:64:02:3c:8a:cd: a7:74:a8:9a:28:eb:37:fb:84:a4:72:f8:b0:a4:b2: 5e:e6:c9:51:d7:d7:1d:df:fd:34:f6:d0:d1:6c:95: d2:90:ff:d6:55:d8:8e:97:74:12:63:58:ae:4d:8e: fa:42:a4:40:71:b2:a1:f4:00:ce:29:b8:a5:87:6a: 67:5a:df:a0:70:04:41:9d:57:30:f8:a7:78:87:d4: 3c:a4:6f:ab:f8:91:28:b3:ab:3b:06:5d:90:50:b3: 64:33:db:bf:7f:b6:c6:d1:de:86:f7:16:ef:b3:77: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:CD:44:12:DE:C0:DB:23:83:CE:9F:48:A4:B3:DC:F5:0A:D0:C2 X509v3 Authority Key Identifier: keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b1:fd:7f:4b:5d:b3:a4:82:91:ba:9f:53:99:58:aa:2b:9e: eb:73:73:36:dc:24:8e:f2:52:af:67:60:c4:f7:90:98:5c:8d: 05:ba:a9:43:be:af:2f:c3:7e:b2:e3:7c:6a:8d:ab:69:79:7c: 29:18:ef:04:25:d3:2c:65:e0:25:19:b3:d9:8c:7a:49:68:41: 6f:7a:4c:4f:6e:11:56:d6:5d:2b:00:55:b2:c5:61:ef:bd:cc: c3:07:41:0a:53:dc:f5:01:1e:a9:4a:45:5f:0d:40:aa:55:9d: 8a:5d:bd:b3:90:9e:55:0e:f9:76:df:aa:b3:cd:88:7b:8b:fc: ea:54:1f:fc:0b:cf:34:10:f7:cd:bb:05:3c:14:00:e2:3d:cd: f4:a6:b8:3a:cf:43:f3:99:e7:a4:96:5b:93:10:83:07:84:9d: ab:07:42:60:10:4d:c8:5b:7e:fc:8c:c3:cb:52:9b:fd:ad:ae: a7:94:06:e8:e4:d1:3f:ab:9b:20:1d:61:19:22:48:09:8b:1a: bb:a3:ac:68:be:2b:1c:dc:e2:bf:d5:f3:7f:68:21:dd:dc:86: ad:c8:f6:39:c1:c4:51:58:6d:9b:33:19:f5:4b:cc:80:42:f6: 96:de:1b:c8:e5:51:6f:7d:d5:00:c6:9c:8f:0a:ea:f5:d3:47: ea:b3:56:8f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw MUVDNUE4MDdGODAeFw0yNTA2MjkwMzE2NTBaFw0yNTA3MDEwMzE2NTBaMBgxFjAU BgNVBAMTDTY4NjBiMDIyLTM5NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCsUd4JACkmBFaOWsA2/AA41Ce2aXYJn1EbXwGEy93C9sK3J9B+1G4/lkBY hhHXeYGnSSvFdNUtlE6ZCT4hYY5EvtuLX4qoFrU/+y1QKTdBLPBtBFobqGPzJwRU wuLxRLPJ8LwOdLsn65ieKWAYc76VX54J9h0TCPiaNhUcU5MLe0dL3iW6VQXtWC8r SZXvJNpkAjyKzad0qJoo6zf7hKRy+LCksl7myVHX1x3f/TT20NFsldKQ/9ZV2I6X dBJjWK5NjvpCpEBxsqH0AM4puKWHamda36BwBEGdVzD4p3iH1Dykb6v4kSizqzsG XZBQs2Qz279/tsbR3ob3Fu+zd9eNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURwbN RBLewNsjg86fSKSz3PUK0MIwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkUxOUUvQUI3RTc4QkU0OERGMTFFREE3NjFCMjlDRjEy MjI0NjgveDR6Y08xMUxFMmRjdElyVHRqdmdIc1dvQl9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbsf1/S12zpIKRup9TmViqK57rc3M2 3CSO8lKvZ2DE95CYXI0FuqlDvq8vw36y43xqjatpeXwpGO8EJdMsZeAlGbPZjHpJ aEFvekxPbhFW1l0rAFWyxWHvvczDB0EKU9z1AR6pSkVfDUCqVZ2KXb2zkJ5VDvl2 36qzzYh7i/zqVB/8C880EPfNuwU8FADiPc30prg6z0PzmeeklluTEIMHhJ2rB0Jg EE3IW378jMPLUpv9ra6nlAbo5NE/q5sgHWEZIkgJixq7o6xovisc3OK/1fN/aCHd 3IatyPY5wcRRWG2bMxn1S8yAQvaW3hvI5VFvfdUAxpyPCur100fqs1aP -----END CERTIFICATE-----Generated at Mon Jun 30 00:51:14 2025 by rpki-client