$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json) Hash identifier: i645QE7OPKssQHo9UZmunx2wlvhP6D6sy3XpOuSNdYE= Subject key identifier: 16:16:D2:29:30:7B:88:EA:D7:48:5A:6C:33:AF:A8:B7:DD:7E:09:BE Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Certificate serial: 026B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft Manifest number: 0262 Signing time: Tue 10 Jun 2025 04:08:33 +0000 Manifest this update: Tue 10 Jun 2025 04:08:32 +0000 Manifest next update: Thu 12 Jun 2025 04:08:32 +0000 Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: Cn+8Ktkv5njGduuDkoMkVd7v3rw02EAvXBwmvd/m7ZQ=) 2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=) 3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=) 4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=) 5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=) 6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=) 7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=) 8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=) 9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=) 10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 12 Jun 2025 04:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Validity Not Before: Jun 10 04:08:32 2025 GMT Not After : Jun 12 04:08:32 2025 GMT Subject: CN=6847afc1-d830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:6f:e8:ff:0f:fb:7e:2b:4c:a6:aa:f6:04: cc:0e:93:fc:f2:68:da:00:03:1b:6c:45:a6:ff:fa: f8:6e:7f:42:83:3d:03:fb:fa:f2:45:a2:f9:a0:4f: 8f:85:bb:94:65:ca:8b:12:19:8f:81:53:62:ad:91: df:d6:c2:36:f9:dc:a1:53:bb:9b:a8:53:73:6b:cc: b9:92:9d:78:7e:f1:ad:20:c1:3f:bb:d5:e2:b8:dc: 60:b3:18:c1:2b:9e:50:5e:3e:b1:3e:11:4c:a4:bc: 7f:17:ea:d5:95:a1:4e:36:66:99:17:32:ae:db:16: bf:1e:4f:3c:dd:12:ea:c4:5a:36:a0:0b:d8:f1:db: 43:09:c7:e2:e9:4c:9c:13:6b:01:c7:e7:04:d1:ad: d9:3f:2a:9f:54:86:5f:24:a6:6a:c5:fb:b4:b4:92: 6d:51:b1:57:db:fc:d4:74:5a:1f:61:71:6d:69:45: 9f:e0:94:5b:ab:54:f8:c7:c5:2f:93:c0:d0:6f:1f: 1a:89:3b:28:fa:53:df:b4:ef:dc:11:22:08:d3:c4: e3:3d:22:be:31:33:0d:85:02:5b:e8:6a:ca:0d:bc: 41:b2:cb:2f:70:c9:7a:8f:21:84:71:1a:da:83:34: 19:5b:8b:4e:86:bb:8c:88:43:a2:30:56:d3:b1:08: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:D2:29:30:7B:88:EA:D7:48:5A:6C:33:AF:A8:B7:DD:7E:09:BE X509v3 Authority Key Identifier: keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:b4:a5:6f:79:92:ae:36:6d:4a:5d:24:25:8b:f4:bd:4c:86: 9f:37:10:d3:d4:9c:bb:83:37:e0:7f:ab:84:67:ab:44:fe:9a: 93:e2:7d:65:fc:fd:e8:60:f2:18:b0:dd:bd:af:12:66:81:d3: a7:5c:43:a3:3d:5f:54:f2:28:53:4d:35:5b:b2:c2:80:b1:ff: d6:5f:64:df:69:80:81:25:36:d0:b4:26:e0:4f:9a:02:65:6e: 8d:0f:7f:a7:d2:fe:57:9b:4a:38:fe:bc:d0:a1:aa:9d:58:c5: 0f:7d:4f:67:19:47:57:56:f8:81:25:85:38:46:e5:cf:94:f5: b4:a2:a6:1a:1e:e4:75:39:16:51:e7:d7:59:91:8a:ef:3e:57: 29:d5:18:8e:44:03:4f:45:64:62:69:f8:d0:0d:73:b2:26:bd: f8:be:89:40:39:8f:72:90:7f:5d:07:41:a2:ce:a6:a4:9a:2f: 50:ba:ab:dd:ad:a5:80:a6:de:60:e5:c3:df:24:e6:19:fe:0d: c7:67:e3:41:46:75:c3:9a:17:a9:d6:18:01:bb:7c:d9:d8:bb: ec:4c:19:2c:f3:54:a9:31:35:b6:6a:cc:23:b3:a9:92:5d:82: 14:da:44:a0:75:4d:fc:7f:f3:c9:28:c3:56:a9:27:f6:77:67: 00:b9:61:38 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAmswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjQxMkVBRjExMC8GA1UEBRMoRDYyOEU0Qzk2QUJBOUNGQjEyNDQ3Nzg2N0JCREYx QTQ0MzVGMEY1QjAeFw0yNTA2MTAwNDA4MzJaFw0yNTA2MTIwNDA4MzJaMBgxFjAU BgNVBAMTDTY4NDdhZmMxLWQ4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDGfG/o/w/7fitMpqr2BMwOk/zyaNoAAxtsRab/+vhuf0KDPQP7+vJFovmg T4+Fu5RlyosSGY+BU2Ktkd/Wwjb53KFTu5uoU3NrzLmSnXh+8a0gwT+71eK43GCz GMErnlBePrE+EUykvH8X6tWVoU42ZpkXMq7bFr8eTzzdEurEWjagC9jx20MJx+Lp TJwTawHH5wTRrdk/Kp9Uhl8kpmrF+7S0km1RsVfb/NR0Wh9hcW1pRZ/glFurVPjH xS+TwNBvHxqJOyj6U9+079wRIgjTxOM9Ir4xMw2FAlvoasoNvEGyyy9wyXqPIYRx GtqDNBlbi06Gu4yIQ6IwVtOxCEO1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFhbS KTB7iOrXSFpsM6+ot91+Cb4wHwYDVR0jBBgwFoAU1ijkyWq6nPsSRHeGe73xpENf D1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRBRDlFNkZDLzFpamt5 V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzFpamt5V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFE OUU2RkMvMWlqa3lXcTZuUHNTUkhlR2U3M3hwRU5mRDFzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDQtKVveZKuNm1KXSQli/S9TIafNxDT 1Jy7gzfgf6uEZ6tE/pqT4n1l/P3oYPIYsN29rxJmgdOnXEOjPV9U8ihTTTVbssKA sf/WX2TfaYCBJTbQtCbgT5oCZW6ND3+n0v5Xm0o4/rzQoaqdWMUPfU9nGUdXVviB JYU4RuXPlPW0oqYaHuR1ORZR59dZkYrvPlcp1RiORANPRWRiafjQDXOyJr34volA OY9ykH9dB0Gizqakmi9QuqvdraWApt5g5cPfJOYZ/g3HZ+NBRnXDmhep1hgBu3zZ 2LvsTBks81SpMTW2aswjs6mSXYIU2kSgdU38f/PJKMNWqSf2d2cAuWE4 -----END CERTIFICATE-----Generated at Tue Jun 10 10:05:39 2025 by rpki-client