$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft File: A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json) Hash identifier: nJwFuTbZ5PNG+acc+FI3HRJD5qX6tqozqWyhRWc8RK0= Subject key identifier: 4C:C6:38:CE:82:19:67:0C:66:A9:17:93:A6:E5:AF:E5:64:B1:55:A6 Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2 Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2 Certificate serial: 0386 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft Manifest number: 0375 Signing time: Fri 22 Nov 2024 01:57:44 +0000 Manifest this update: Fri 22 Nov 2024 01:57:43 +0000 Manifest next update: Sun 24 Nov 2024 01:57:43 +0000 Files and hashes: 1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: sFp8lXCpk1SAcplbtsu/UFSadnCeJgO1oZwJeUxB30U=) 2: B655D6D08AF311EFAA66E04D762E951A.roa (hash: hlkkYRD+792J0eVOTgyzqMnceyNt4/sSJ/99Vh5b3Y4=) 3: F476A62A8AF211EF92BC9D49762E951A.roa (hash: +fz3tWe00T8D2wXY+lMzkP3UHUDJwOIXnI/qbVgcL8A=) 4: D65E5FC48AF311EF8851F34F762E951A.roa (hash: c7SkEy3Yi2GeKetGrgJ5UUc1oCY9D4Wbzhx8n+efBVI=) 5: 7BEB350A8D3511EF9966CE8B762E951A.roa (hash: J2do9oXrbWZqCVDzO7Z/I9RW5gLWKYKJI087mgBbpHk=) 6: 3429AD648C7711EFA20BEB5B762E951A.roa (hash: em0xHhe3JjGKnJp91YEgF4F795GLTNdp0eys+FZqMc8=) 7: 1335FFE28D3811EFB04BF79A762E951A.roa (hash: 99TholDjwcLj+m/yJ7KqVhsO3P8ByuERL/bCKtbBO8M=) 8: 32AA96508D2211EF8E79A392762E951A.roa (hash: +cqpwCorjrgix2lFr0wAINZEe+QRaw7XNhLsOSU4kYs=) 9: 874E638C8D2F11EF9C8AF066762E951A.roa (hash: O85avq2bUivuWjrVehcYQJBynrJ6PpYQYRDS324FA9Y=) 10: E4B61DCA8D2111EFB01DB38E762E951A.roa (hash: zeCNHkishsTU3uzCuAPxBuJu5YHNz5T6GSsNW4JzEZc=) 11: 167F01E28C7711EFB428BC5B762E951A.roa (hash: 6yoz8ek+/RZHXfeUTfqa5uczLxr2EovXsaiRHYgNI68=) 12: 5698C3948C7711EFB0C5F05B762E951A.roa (hash: B8lyA0YSYUW3aP2wz0Is+QfN4twnGfLl6w3vwWi1p2c=) 13: 08C2A7B08D2211EFA3F3A590762E951A.roa (hash: /W7x1gMw+PX9qEIYGCXIXc/ZffSooeQbZyijHs4xL7k=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 24 Nov 2024 00:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2 Validity Not Before: Nov 22 01:57:43 2024 GMT Not After : Nov 24 01:57:43 2024 GMT Subject: CN=673fe518-0f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:dc:e1:80:57:d3:bb:1d:82:7f:c6:59:52: 38:50:55:ae:66:22:e7:b2:ac:d2:c0:3c:bd:17:21: 5c:7f:50:36:53:d2:9f:ff:ef:f3:74:8e:22:b2:75: 45:67:32:67:08:c5:8f:f6:18:14:3e:1d:2d:2b:bd: 5b:0a:32:f2:64:66:af:f2:7b:16:9d:48:13:b9:0a: 95:8c:ea:cd:6c:5f:d5:26:6d:fb:bd:b4:06:22:6f: 20:9c:b4:90:86:02:e4:58:63:88:69:b1:2e:92:dd: c9:f4:90:7e:64:77:c9:ae:97:1c:6e:fd:a0:08:41: 8e:f6:98:bf:10:3b:be:15:07:9a:e6:5d:56:b5:d8: 07:71:2e:94:b9:7d:b8:fb:7e:1e:57:ca:6b:02:ed: 06:4c:00:a4:9e:72:f1:d2:65:69:b7:bd:b4:c3:15: 43:b0:b8:b3:10:87:16:08:19:66:31:75:f2:f2:45: 7f:80:15:2d:21:a5:fb:b8:8b:2a:1c:7f:c1:5c:6c: 43:08:5c:6c:e1:53:58:db:67:91:dc:cb:6a:39:a7: cc:0f:e7:04:bc:81:af:10:62:a6:d5:a4:74:b4:ea: f8:c5:c2:de:6d:62:4c:4d:57:b2:4f:0a:df:a4:ce: 43:30:4b:26:9b:43:f4:f9:e1:97:96:d5:82:53:d6: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C6:38:CE:82:19:67:0C:66:A9:17:93:A6:E5:AF:E5:64:B1:55:A6 X509v3 Authority Key Identifier: keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b4:6b:27:04:45:f5:8d:b8:dd:ac:e3:45:f3:5a:ed:29:1a: 5e:2a:1c:f1:06:19:9d:48:27:87:ea:c0:61:b7:a6:60:50:aa: f5:61:0d:62:c8:b5:92:03:0c:a4:1a:06:78:2d:b1:42:77:f7: d8:d7:e2:a6:a7:30:78:68:cc:33:e3:73:92:26:9e:82:9a:e4: c4:ee:d2:82:4d:7b:54:7f:c9:75:2a:6a:e7:67:af:b5:57:2a: e1:4f:ab:f8:df:22:d9:19:f1:22:69:75:a7:dd:7a:5d:a3:e5: 7c:dd:3f:cc:eb:72:3e:d2:92:40:f0:89:b6:dc:e6:1b:fa:f7: b0:18:b9:a4:b5:15:9a:54:db:20:0c:f8:1f:34:93:f4:b8:d1: 65:ba:83:ee:0a:97:fb:a2:90:e8:15:82:c2:f2:a9:fb:57:28: 54:ae:53:cb:e3:cb:29:3a:16:31:65:aa:31:3b:a6:17:0b:b4: 3c:c5:bc:3b:5c:c2:19:0a:18:84:bb:82:0d:cf:05:f5:b0:cd: 8a:c1:7d:4c:dd:06:43:e0:24:51:a0:90:2f:0f:a2:6f:1b:53: 8a:ce:69:0c:f8:b0:13:e2:43:53:89:00:4e:eb:cc:6f:41:1c: 3f:ec:e4:26:82:60:aa:2a:2a:b2:44:9f:83:d6:76:5d:f0:b2: a6:a6:93:97 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTQzOTdBRjExMC8GA1UEBRMoMDNFMjBFRUYxNTA1MDNBMEIxOTUxMThBRTg4NzY4 N0Y1QTQyNzlDMjAeFw0yNDExMjIwMTU3NDNaFw0yNDExMjQwMTU3NDNaMBgxFjAU BgNVBAMTDTY3M2ZlNTE4LTBmNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDNzdzhgFfTux2Cf8ZZUjhQVa5mIueyrNLAPL0XIVx/UDZT0p//7/N0jiKy dUVnMmcIxY/2GBQ+HS0rvVsKMvJkZq/yexadSBO5CpWM6s1sX9Umbfu9tAYibyCc tJCGAuRYY4hpsS6S3cn0kH5kd8mulxxu/aAIQY72mL8QO74VB5rmXVa12AdxLpS5 fbj7fh5XymsC7QZMAKSecvHSZWm3vbTDFUOwuLMQhxYIGWYxdfLyRX+AFS0hpfu4 iyocf8FcbEMIXGzhU1jbZ5Hcy2o5p8wP5wS8ga8QYqbVpHS06vjFwt5tYkxNV7JP Ct+kzkMwSyabQ/T54ZeW1YJT1kJhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTMY4 zoIZZwxmqReTpuWv5WSxVaYwHwYDVR0jBBgwFoAUA+IO7xUFA6CxlRGK6Idof1pC ecIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0YxMjIyNDY4L0EtSU83 eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0EtSU83eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTQzOTcvOEQ3QjMxODAxRjk2MTFFRDgyMzNGMjhDRjEy MjI0NjgvQS1JTzd4VUZBNkN4bFJHSzZJZG9mMXBDZWNJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgtGsnBEX1jbjdrONF81rtKRpeKhzx BhmdSCeH6sBht6ZgUKr1YQ1iyLWSAwykGgZ4LbFCd/fY1+KmpzB4aMwz43OSJp6C muTE7tKCTXtUf8l1KmrnZ6+1VyrhT6v43yLZGfEiaXWn3Xpdo+V83T/M63I+0pJA 8Im23OYb+vewGLmktRWaVNsgDPgfNJP0uNFluoPuCpf7opDoFYLC8qn7VyhUrlPL 48spOhYxZaoxO6YXC7Q8xbw7XMIZChiEu4INzwX1sM2KwX1M3QZD4CRRoJAvD6Jv G1OKzmkM+LAT4kNTiQBO68xvQRw/7OQmgmCqKiqyRJ+D1nZd8LKmppOX -----END CERTIFICATE-----Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org