$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: xWEhHQTv2bUTiY5kWKgU+vSaYv50eNiuMq9r3dDooTU= Subject key identifier: 5F:3C:1C:61:0E:6A:37:85:93:47:F4:3E:0A:29:08:A8:A0:6A:55:4D Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 02A6 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 0296 Signing time: Thu 21 Nov 2024 02:10:38 +0000 Manifest this update: Thu 21 Nov 2024 02:10:37 +0000 Manifest next update: Sat 23 Nov 2024 02:10:37 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: lAOWgTPdpV3f21HFNgZCen3mVfs6gt+X5V9Fv+pLr6Y=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 23 Nov 2024 00:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Nov 21 02:10:37 2024 GMT Not After : Nov 23 02:10:37 2024 GMT Subject: CN=673e969d-4ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:c5:ee:43:82:2b:40:c2:a5:3a:c4:e5:0f: c8:e2:e5:28:73:48:21:ee:83:c7:18:cb:c3:f9:f3: fe:55:7d:f8:db:ca:ff:84:e8:27:33:6c:3a:6d:51: e9:85:35:34:18:40:d2:7b:9f:ff:a9:8c:ea:d2:8a: 7c:50:9a:a9:c5:ee:25:38:8a:e6:c0:27:27:9f:aa: 5b:3e:bd:ea:b6:85:7d:a1:73:03:1b:72:29:78:b9: 34:97:fc:71:6b:e0:c5:58:d6:37:36:a8:99:88:98: a5:63:5f:a8:cb:fc:d0:00:74:97:24:7d:62:d3:4f: d2:1f:11:3b:9a:a6:29:b3:df:05:44:14:e4:ec:f9: 10:37:34:f5:a9:11:fd:d9:85:2c:b3:6b:84:c7:09: 65:0c:9a:01:6c:73:3e:89:6e:a7:89:ca:44:09:44: 39:9c:63:7b:25:ab:ff:29:5c:12:98:6b:8f:fe:3a: 52:87:81:a0:50:77:e7:61:fe:4f:b9:6f:77:d1:56: 99:3f:b6:ef:d1:6d:f1:ef:b0:e4:64:83:88:b8:ca: a1:1e:76:d4:0a:19:a0:9e:f2:3c:24:dc:99:d3:52: d7:25:e8:bd:8c:4e:12:89:33:16:6a:74:99:3d:cc: c1:ca:86:f2:73:27:da:31:3f:ac:b6:1c:bd:d3:db: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3C:1C:61:0E:6A:37:85:93:47:F4:3E:0A:29:08:A8:A0:6A:55:4D X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:41:33:40:1d:d1:d1:67:d7:eb:5e:96:a4:7a:25:d8:1e:65: af:1e:b1:38:12:8f:52:68:cb:10:83:7a:7b:73:73:f4:59:e7: d4:1d:d3:2f:25:4a:90:0c:df:b0:a0:05:50:45:fe:cd:5d:16: b8:08:16:da:5f:25:b4:d8:0b:50:92:0f:48:72:76:cd:87:13: e9:7e:44:3d:28:c2:10:02:ed:55:b8:eb:e3:fb:0a:83:41:eb: 81:e3:0b:0f:40:db:d6:5a:83:71:4e:a0:e9:68:b4:de:c9:b6: ec:b3:51:86:aa:6e:25:06:ce:60:d5:4f:87:92:84:81:56:23: c3:3c:29:98:34:f1:32:bc:00:4b:b9:7e:62:73:cf:03:fe:fb: 6a:35:22:52:5e:e0:aa:8d:97:46:43:32:59:ca:08:4a:52:40: 14:1a:dd:85:84:be:f4:cd:a9:c6:ab:ec:88:60:1a:a4:9d:67: e7:b0:cb:4c:62:ce:ce:0e:ba:5b:cc:bc:c3:c0:3c:b6:1e:f7: 76:46:70:e2:d7:43:c4:65:5e:f5:5d:d3:97:fd:4f:95:bf:cc: d6:72:5b:da:ba:b3:2c:e9:0b:0c:05:89:ce:7e:ca:2a:83:ad: 3f:0d:1f:80:ec:45:c9:c3:db:6c:99:6c:3d:3d:61:ab:34:47: a5:9e:5d:95 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNDExMjEwMjEwMzdaFw0yNDExMjMwMjEwMzdaMBgxFjAU BgNVBAMTDTY3M2U5NjlkLTRlYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCbxMXuQ4IrQMKlOsTlD8ji5ShzSCHug8cYy8P58/5Vffjbyv+E6CczbDpt UemFNTQYQNJ7n/+pjOrSinxQmqnF7iU4iubAJyefqls+veq2hX2hcwMbcil4uTSX /HFr4MVY1jc2qJmImKVjX6jL/NAAdJckfWLTT9IfETuapimz3wVEFOTs+RA3NPWp Ef3ZhSyza4THCWUMmgFscz6JbqeJykQJRDmcY3slq/8pXBKYa4/+OlKHgaBQd+dh /k+5b3fRVpk/tu/RbfHvsORkg4i4yqEedtQKGaCe8jwk3JnTUtcl6L2MThKJMxZq dJk9zMHKhvJzJ9oxP6y2HL3T25xdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXzwc YQ5qN4WTR/Q+CikIqKBqVU0wHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqQTNAHdHRZ9frXpakeiXYHmWvHrE4Eo9S aMsQg3p7c3P0WefUHdMvJUqQDN+woAVQRf7NXRa4CBbaXyW02AtQkg9IcnbNhxPp fkQ9KMIQAu1VuOvj+wqDQeuB4wsPQNvWWoNxTqDpaLTeybbss1GGqm4lBs5g1U+H koSBViPDPCmYNPEyvABLuX5ic88D/vtqNSJSXuCqjZdGQzJZyghKUkAUGt2FhL70 zanGq+yIYBqknWfnsMtMYs7ODrpbzLzDwDy2Hvd2RnDi10PEZV71XdOX/U+Vv8zW clvaurMs6QsMBYnOfsoqg60/DR+A7EXJw9tsmWw9PWGrNEelnl2V -----END CERTIFICATE-----Generated at Thu Nov 21 03:10:16 2024 by rpki-client on console-fra.rpki-client.org