$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft File: ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json) Hash identifier: Htr9Af6gh3w1gVJyKrli/xQhJU4yPXOsSIn6gjLmgSc= Subject key identifier: 4D:23:D3:2B:60:D6:72:39:20:19:9E:20:3B:BF:A1:35:75:FF:61:A8 Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12 Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712 Certificate serial: 0D8D Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft Manifest number: 0D83 Signing time: Sat 05 Apr 2025 00:56:05 +0000 Manifest this update: Sat 05 Apr 2025 00:56:05 +0000 Manifest next update: Mon 07 Apr 2025 00:56:05 +0000 Files and hashes: 1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: qeA1OlbS4ntxx+GTWV2It+EsWRmLIp8kltRWDmzHDdc=) 2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=) 3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=) 4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=) 5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=) 6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=) 7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=) 8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=) 9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 07 Apr 2025 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3699B8EAR Validity Not Before: Apr 5 00:56:05 2025 GMT Not After : Apr 7 00:56:05 2025 GMT Subject: CN=67f07fa5-d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:f2:c8:03:36:7b:c5:3c:ca:9f:6a:bc:a6: 5c:95:4b:96:cd:43:70:7d:8a:12:67:14:73:a3:e3: c5:53:4b:e7:c6:67:b1:eb:19:e2:b0:71:71:f0:9d: c0:8a:1d:be:15:e2:c5:0c:b1:73:5e:ab:1f:4c:3b: c2:90:90:1d:ec:1c:da:59:cd:e0:30:04:73:1c:f3: c5:d5:a6:93:9a:c7:60:e0:fa:6c:01:a3:0c:89:1c: 67:4f:a5:ab:9a:49:c8:57:a8:db:67:4f:07:a6:97: c6:e7:da:9c:83:c0:45:0a:62:0a:67:91:39:3b:d4: 18:a7:7d:f9:93:fb:5f:e6:b7:56:67:bd:34:50:07: f7:22:5f:c7:72:60:ef:f7:8a:5e:20:ee:0e:53:89: cf:86:50:70:82:20:a2:37:e3:62:07:fe:99:21:02: dc:81:8f:95:bd:61:63:2a:a2:cc:85:49:73:eb:45: 68:2b:0a:66:f0:b4:fb:06:a8:88:61:16:37:20:ca: 98:3c:1a:54:5e:59:a2:e5:6e:43:f8:0d:8a:bb:05: 2b:b2:f8:dd:91:6d:9a:d4:72:8d:34:5e:cf:81:57: e1:16:31:84:20:9e:f7:36:e3:e0:4f:30:31:b3:53: 46:3a:ce:14:89:2a:52:ec:5b:f1:d3:4d:0b:77:8c: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:D3:2B:60:D6:72:39:20:19:9E:20:3B:BF:A1:35:75:FF:61:A8 X509v3 Authority Key Identifier: keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:df:a5:a2:2a:17:a6:a0:68:d8:33:15:4c:9a:51:b9:e8:c8: 75:bf:93:37:68:00:7b:e5:5d:d8:94:ad:69:0e:7c:d0:ed:0e: f7:f0:40:35:92:aa:16:ca:20:78:16:12:5e:45:fb:21:81:a4: f8:e0:18:8a:74:65:ec:32:68:c8:e6:73:18:83:8c:40:d7:a0: 63:c3:76:0e:38:2f:7e:60:2d:ab:1b:3b:15:f3:6a:00:04:35: 7f:04:ea:1d:63:c6:51:5a:8f:b7:ff:7b:30:4f:b2:d8:07:b7: 25:ab:db:8c:9f:be:f5:ef:bc:df:0b:3e:36:b6:8c:04:c6:86: a9:d5:5a:62:89:04:c4:61:4b:5e:76:0e:7f:e9:28:26:3a:eb: 71:72:bd:60:65:40:77:63:bd:b7:cc:b4:80:e2:54:4b:aa:92: b8:aa:d6:ac:60:2f:42:9e:a2:93:c3:b1:8e:6d:d5:2f:09:9a: ab:cf:63:9e:78:ea:67:d7:d9:88:81:14:e0:53:a1:6a:de:4c: 7e:56:45:d6:00:64:e2:60:20:c0:7f:a0:2d:9b:eb:8d:f7:c5: 92:84:e8:3f:bd:f1:8d:c3:53:4d:c1:9d:63:26:b5:7d:21:ae: 2f:3f:2c:7d:16:c5:45:8a:eb:58:52:fa:ed:dc:54:39:7a:a8: ae:fc:63:5d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTlCOEVBUjExMC8GA1UEBRMoOEE5Rjg2MDUwQjRBNEU0RTkyNURFNkZGRDkyQUMz NDgzMzNFMDcxMjAeFw0yNTA0MDUwMDU2MDVaFw0yNTA0MDcwMDU2MDVaMBgxFjAU BgNVBAMTDTY3ZjA3ZmE1LWQ2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCdqfLIAzZ7xTzKn2q8plyVS5bNQ3B9ihJnFHOj48VTS+fGZ7HrGeKwcXHw ncCKHb4V4sUMsXNeqx9MO8KQkB3sHNpZzeAwBHMc88XVppOax2Dg+mwBowyJHGdP pauaSchXqNtnTweml8bn2pyDwEUKYgpnkTk71BinffmT+1/mt1ZnvTRQB/ciX8dy YO/3il4g7g5Tic+GUHCCIKI342IH/pkhAtyBj5W9YWMqosyFSXPrRWgrCmbwtPsG qIhhFjcgypg8GlReWaLlbkP4DYq7BSuy+N2RbZrUco00Xs+BV+EWMYQgnvc24+BP MDGzU0Y6zhSJKlLsW/HTTQt3jElxAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUTSPT K2DWcjkgGZ4gO7+hNXX/YagwHwYDVR0jBBgwFoAUip+GBQtKTk6SXeb/2SrDSDM+ BxIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk5QjhFLzBFNDczODBDQjEyMzExRTU5MTQ0NjE0QUY4QUVBMjI4L2lwLUdC UXRLVGs2U1hlYl8yU3JEU0RNLUJ4SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2lwLUdCUXRLVGs2U1hlYl8yU3JEU0RNLUJ4SS5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2OTlCOEUvMEU0NzM4MENCMTIzMTFFNTkxNDQ2MTRBRjhBRUEy MjgvaXAtR0JRdEtUazZTWGViXzJTckRTRE0tQnhJLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAA36WiKhemoGjYMxVMmlG56Mh1v5M3aAB7 5V3YlK1pDnzQ7Q738EA1kqoWyiB4FhJeRfshgaT44BiKdGXsMmjI5nMYg4xA16Bj w3YOOC9+YC2rGzsV82oABDV/BOodY8ZRWo+3/3swT7LYB7clq9uMn77177zfCz42 towExoap1VpiiQTEYUtedg5/6SgmOutxcr1gZUB3Y723zLSA4lRLqpK4qtasYC9C nqKTw7GObdUvCZqrz2OeeOpn19mIgRTgU6Fq3kx+VkXWAGTiYCDAf6Atm+uN98WS hOg/vfGNw1NNwZ1jJrV9Ia4vPyx9FsVFiutYUvrt3FQ5eqiu/GNd -----END CERTIFICATE-----Generated at Sat Apr 5 07:09:00 2025 by rpki-client