$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json) Hash identifier: LGJxpBeLcc74bnXq8rP27zuwWsL9rYigHFp/+HvAb2c= Subject key identifier: C4:62:12:0F:4D:B8:96:B4:C8:11:FD:42:18:0E:89:23:71:AF:02:66 Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Certificate serial: 0518 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft Manifest number: 0503 Signing time: Mon 25 Nov 2024 01:35:01 +0000 Manifest this update: Mon 25 Nov 2024 01:35:00 +0000 Manifest next update: Wed 27 Nov 2024 01:35:00 +0000 Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: o1GM+8wuQlOq0FS46R8GVNvZzg2/+xxXhUk7nSytFfw=) 2: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=) 3: 43501FBAE8A711EC8C7A6F7CF1222468.roa (hash: pmf9iadVEq9Xd7tUK+UVEKXTVEUvEAAd43Ocd7osxBg=) 4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=) 5: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=) 6: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=) 7: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=) 8: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=) 9: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=) 10: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=) 11: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=) 12: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=) 13: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 27 Nov 2024 00:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Validity Not Before: Nov 25 01:35:00 2024 GMT Not After : Nov 27 01:35:00 2024 GMT Subject: CN=6743d445-0629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:bb:94:6a:21:bc:ef:d7:68:1a:5b:7e:b7: 80:b3:1c:3e:20:b2:df:2b:78:e5:cc:8a:fc:73:66: 54:94:0b:9d:7a:b9:92:79:75:f0:cf:df:0a:f0:ef: 2e:c3:80:33:db:e9:58:8c:bb:69:fe:5e:92:00:6e: 58:88:2c:30:2f:ee:53:7e:15:76:21:7c:2b:25:42: f0:d4:32:4d:70:18:50:e2:89:24:d8:cd:3e:f3:63: 38:cd:22:15:ac:51:2e:e9:0e:bb:41:c0:fd:db:b1: 73:94:b7:3c:56:55:3c:0d:6a:83:1e:75:6d:d9:67: 1b:0b:c6:57:f4:71:56:ef:0e:1b:8e:99:9b:bf:a7: f4:86:4e:4f:c1:c2:54:3d:a4:7d:34:85:83:cf:49: 09:32:06:09:d3:b3:dc:0c:a9:1a:c6:d6:15:ee:4b: 62:aa:0f:5d:68:5e:d7:b1:06:05:39:3c:e5:d1:47: b1:9e:ab:25:7f:50:eb:eb:46:7c:11:af:4d:5d:e8: 20:c1:3b:35:c4:99:f4:8c:31:01:0f:52:49:9e:b1: a0:01:cd:3a:33:a0:f0:1d:b2:b5:d5:d6:4d:ed:90: 4d:cd:e8:35:e4:73:b5:89:70:8e:8b:d9:3b:96:de: 0c:22:a4:93:27:5a:41:e8:e9:12:d6:43:0e:67:92: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:12:0F:4D:B8:96:B4:C8:11:FD:42:18:0E:89:23:71:AF:02:66 X509v3 Authority Key Identifier: keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ce:08:32:01:16:fb:83:a1:33:85:77:86:0c:61:76:48:1a: ae:6e:c7:d8:a9:3b:d9:57:e1:4e:4a:d6:83:f1:43:cb:e5:57: 35:02:99:c8:31:7a:e3:c2:fb:b8:30:c7:57:d2:ce:8a:af:1a: 77:4b:17:03:db:b6:cc:47:9e:d1:c2:33:8a:ce:74:6c:06:44: f6:d9:6b:41:f9:8b:d2:be:6b:6d:2f:9f:8d:e7:63:5a:90:63: 82:a1:07:78:9c:15:1e:9c:ad:16:40:5a:00:4f:7b:1e:4c:f8: 68:9e:73:33:7e:07:06:80:28:4b:a7:0b:f7:51:e1:10:c5:03: 89:31:2f:2a:45:99:91:83:f9:ff:e6:54:13:2e:94:1e:1b:af: a4:3b:e5:a5:5c:a5:5e:94:ab:06:13:5a:21:26:9f:14:65:cc: fd:15:59:88:16:fe:18:97:7b:ae:a1:28:a2:1c:13:6b:d5:c8: e0:3b:f9:c4:e9:8e:c7:6c:2c:33:bb:60:ac:cb:ab:2d:31:d9: c8:d7:4e:ff:5c:6d:7b:fe:1d:bf:7a:cc:0c:6a:72:cd:16:85: 28:a5:44:fb:58:5b:4f:c2:8d:0e:ef:0f:48:f1:8a:1d:7f:a7: e5:04:e3:59:dd:5a:59:3c:e7:32:e0:1b:7c:2b:32:fc:15:7a: f0:55:dd:60 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0 OTg0MkM4RDZBMDAeFw0yNDExMjUwMTM1MDBaFw0yNDExMjcwMTM1MDBaMBgxFjAU BgNVBAMTDTY3NDNkNDQ1LTA2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCj6ruUaiG879doGlt+t4CzHD4gst8reOXMivxzZlSUC516uZJ5dfDP3wrw 7y7DgDPb6ViMu2n+XpIAbliILDAv7lN+FXYhfCslQvDUMk1wGFDiiSTYzT7zYzjN IhWsUS7pDrtBwP3bsXOUtzxWVTwNaoMedW3ZZxsLxlf0cVbvDhuOmZu/p/SGTk/B wlQ9pH00hYPPSQkyBgnTs9wMqRrG1hXuS2KqD11oXtexBgU5POXRR7GeqyV/UOvr RnwRr01d6CDBOzXEmfSMMQEPUkmesaABzTozoPAdsrXV1k3tkE3N6DXkc7WJcI6L 2TuW3gwipJMnWkHo6RLWQw5nki/XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxGIS D024lrTIEf1CGA6JI3GvAmYwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI 1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXzggyARb7g6EzhXeGDGF2SBqubsfY qTvZV+FOStaD8UPL5Vc1ApnIMXrjwvu4MMdX0s6Krxp3SxcD27bMR57RwjOKznRs BkT22WtB+YvSvmttL5+N52NakGOCoQd4nBUenK0WQFoAT3seTPhonnMzfgcGgChL pwv3UeEQxQOJMS8qRZmRg/n/5lQTLpQeG6+kO+WlXKVelKsGE1ohJp8UZcz9FVmI Fv4Yl3uuoSiiHBNr1cjgO/nE6Y7HbCwzu2Csy6stMdnI107/XG17/h2/eswManLN FoUopUT7WFtPwo0O7w9I8Yodf6flBONZ3VpZPOcy4Bt8KzL8FXrwVd1g -----END CERTIFICATE-----Generated at Mon Nov 25 02:48:39 2024 by rpki-client on console-ams.rpki-client.org