$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: P+42hzriWsbsKhDYUaTopK/qlqMvfY4gE378s8no+/4= Subject key identifier: AD:43:D3:66:00:54:4D:62:D7:F9:61:4A:42:32:A0:95:D9:95:0B:87 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 014E Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 013A Signing time: Sun 19 May 2024 02:18:17 +0000 Manifest this update: Sun 19 May 2024 02:18:17 +0000 Manifest next update: Tue 21 May 2024 02:18:17 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: He1z9ISdIgboQcaPAFAA52ppOE6cYIcL5EtxMCAevIs=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 21 May 2024 00:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: May 19 02:18:17 2024 GMT Not After : May 21 02:18:17 2024 GMT Subject: CN=66496169-ae94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:c7:ad:36:ea:0a:34:b8:f4:75:3b:ca:3f: 5f:8c:85:c4:a8:c4:c7:c5:7b:5b:fd:07:e2:b9:3d: 74:c1:30:be:2d:e8:c7:0a:6a:d0:25:97:35:d9:3b: d3:35:bb:92:5f:6c:91:07:a8:49:48:af:b3:ac:2e: e3:93:e3:a5:89:0f:a8:f8:c7:2c:3a:4f:77:f4:74: 48:90:2b:b1:ae:15:b4:da:98:cd:8a:e3:d0:e4:b4: e0:1b:7a:40:37:41:02:8b:a3:33:36:c4:0b:ef:2a: 2f:56:d1:22:df:0f:3d:b0:36:79:e2:59:49:1c:79: 64:73:f4:4d:55:81:08:bd:e1:09:fc:59:80:83:6f: 52:36:75:f0:73:b9:61:e5:10:4d:06:51:44:c9:d7: ce:6f:64:b3:75:cf:25:3e:b1:ce:3a:64:96:99:fb: 87:a1:9e:b5:79:b5:8a:06:2d:05:4d:85:26:18:e0: 40:4a:16:60:00:e2:d9:04:eb:af:e6:2e:1d:25:d0: a5:c6:5e:34:19:1f:19:2f:8d:f2:4e:8d:d3:04:52: 49:48:00:fc:d8:81:f8:38:08:04:5d:dc:10:ad:6d: 6a:4e:4f:bf:89:14:b4:e8:1f:e2:c8:62:3d:2e:28: 85:8d:dd:f8:d9:b5:50:77:44:82:8f:87:e1:83:cb: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:43:D3:66:00:54:4D:62:D7:F9:61:4A:42:32:A0:95:D9:95:0B:87 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9d:33:d0:38:cc:5a:73:ce:09:81:14:29:ac:36:1f:2f:33: e6:97:9d:89:4e:3f:20:f3:04:de:a8:b6:ed:5b:b0:c3:94:d5: 9a:a3:e8:3a:26:76:ed:96:d8:b9:55:70:e0:3f:be:0e:b1:2f: ca:50:af:47:92:4f:11:3d:49:35:82:42:4f:44:49:59:d8:9b: 9b:84:50:ca:24:3a:c9:1e:fa:f3:27:10:28:44:14:a5:98:cb: 76:32:a0:e0:f4:0c:42:ae:42:5f:45:59:ac:18:aa:e0:e6:09: 93:7c:e4:53:92:73:74:31:47:4f:32:92:9c:97:16:fc:07:c2: 2a:29:0b:38:33:9e:e2:eb:98:6d:51:36:d6:1a:32:13:28:09: 25:a3:6b:b7:e1:25:7b:48:3f:98:7a:78:bd:d3:3c:37:b9:8a: 79:c0:e6:66:39:b7:37:11:78:b9:c0:05:7f:fb:d6:26:54:41: 38:94:43:01:0f:19:7f:93:87:e4:88:11:f5:61:de:15:d5:95: 77:5c:dc:2f:3f:8c:48:91:e4:f9:17:76:e3:aa:82:38:c6:09: ad:3d:1b:f3:30:c0:7a:07:be:46:41:01:c6:dd:61:ba:6f:d8: 25:a5:2c:0f:ba:1b:80:6c:a7:47:36:3f:58:31:67:31:f4:42: 93:74:26:0c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNDA1MTkwMjE4MTdaFw0yNDA1MjEwMjE4MTdaMBgxFjAU BgNVBAMTDTY2NDk2MTY5LWFlOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCy9MetNuoKNLj0dTvKP1+MhcSoxMfFe1v9B+K5PXTBML4t6McKatAllzXZ O9M1u5JfbJEHqElIr7OsLuOT46WJD6j4xyw6T3f0dEiQK7GuFbTamM2K49DktOAb ekA3QQKLozM2xAvvKi9W0SLfDz2wNnniWUkceWRz9E1VgQi94Qn8WYCDb1I2dfBz uWHlEE0GUUTJ185vZLN1zyU+sc46ZJaZ+4ehnrV5tYoGLQVNhSYY4EBKFmAA4tkE 66/mLh0l0KXGXjQZHxkvjfJOjdMEUklIAPzYgfg4CARd3BCtbWpOT7+JFLToH+LI Yj0uKIWN3fjZtVB3RIKPh+GDyzQ7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrUPT ZgBUTWLX+WFKQjKgldmVC4cwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnnTPQOMxac84JgRQprDYfLzPml52J Tj8g8wTeqLbtW7DDlNWao+g6Jnbtlti5VXDgP74OsS/KUK9Hkk8RPUk1gkJPRElZ 2JubhFDKJDrJHvrzJxAoRBSlmMt2MqDg9AxCrkJfRVmsGKrg5gmTfORTknN0MUdP MpKclxb8B8IqKQs4M57i65htUTbWGjITKAklo2u34SV7SD+Yeni90zw3uYp5wOZm Obc3EXi5wAV/+9YmVEE4lEMBDxl/k4fkiBH1Yd4V1ZV3XNwvP4xIkeT5F3bjqoI4 xgmtPRvzMMB6B75GQQHG3WG6b9glpSwPuhuAbKdHNj9YMWcx9EKTdCYM -----END CERTIFICATE-----Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org