$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json) Hash identifier: 217RiUqSA1W0YZepYG11AU5v7at9115y1Pi9fx+V4Ik= Subject key identifier: 93:65:B8:B7:CD:B2:DD:35:EF:82:3F:F3:BC:4B:4B:C7:04:FE:D3:45 Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Certificate serial: 0641 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft Manifest number: 0631 Signing time: Fri 03 May 2024 01:08:33 +0000 Manifest this update: Fri 03 May 2024 01:08:33 +0000 Manifest next update: Sun 05 May 2024 01:08:33 +0000 Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: MCVMSilkKjs2eFzcRrUctYFnA3+7ToD/8EdynIwcYOA=) 2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=) 3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=) 4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=) 5: 924F80688A4E11EC8639028F5A40D577.roa (hash: tnumgrytmuyUCUVB2UaM2OC8r2VqINNEld+/gxdsqJk=) 6: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=) 7: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=) 8: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=) 9: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=) 10: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=) 11: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=) 12: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=) 13: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 05 May 2024 00:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Validity Not Before: May 3 01:08:33 2024 GMT Not After : May 5 01:08:33 2024 GMT Subject: CN=66343911-579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:5c:65:5a:db:df:e1:dc:6d:6b:ed:b8:a2: b4:89:56:83:9d:b0:fc:7f:96:58:d5:ef:9d:55:c4: 08:24:1f:c6:34:26:99:c2:94:1f:97:6b:e1:14:4f: 0f:25:ad:59:eb:56:bb:6d:4c:26:6d:33:90:af:b1: d4:3a:7c:b3:b2:e7:d4:1c:7c:45:76:3d:3c:79:d7: a3:91:9e:1c:ae:1e:f3:c1:46:33:36:87:c6:3d:13: b1:f8:82:4e:7e:e6:48:1a:c9:31:55:78:72:82:3d: c9:36:44:64:f0:36:f8:91:23:93:52:89:54:6b:5c: 60:74:53:2e:3b:ae:b3:ac:bf:c8:3f:94:b8:f9:0b: 80:83:36:b2:ba:44:09:c1:c6:93:bd:9d:f6:4e:f1: 75:19:be:16:f0:17:2c:24:15:b7:24:e2:c9:9d:d9: cb:a1:04:1c:8f:54:1f:f4:d5:88:e5:29:60:b1:a6: 3d:cb:40:af:04:fe:f0:ed:5e:b5:60:60:db:29:ac: 1c:e1:4d:70:7c:64:c4:ed:bf:46:f5:10:5a:b1:62: 3f:00:d9:fd:3f:17:4a:7f:3c:7c:93:02:53:55:d5: d5:2e:50:02:ea:2a:0b:87:87:a4:85:97:ee:2b:0f: 95:b9:06:7b:f9:ea:14:24:61:17:4c:d6:ba:a1:b2: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:65:B8:B7:CD:B2:DD:35:EF:82:3F:F3:BC:4B:4B:C7:04:FE:D3:45 X509v3 Authority Key Identifier: keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a2:99:fa:13:6c:79:b7:03:24:5a:a2:0b:96:28:1e:2b:19: e1:3c:88:e4:b6:c9:43:99:0f:dc:37:b0:19:11:af:5e:a4:1d: ad:d1:de:65:41:d8:42:53:80:a9:dc:2c:4a:5f:b5:80:83:03: 0d:6d:02:8b:0d:7e:64:2b:e6:f5:48:16:af:54:c0:e4:e9:42: 09:38:12:1c:7d:31:73:74:f3:b6:33:e5:a6:0f:8d:ab:fd:46: b2:4f:91:27:17:45:ca:12:f1:aa:44:ad:b7:c0:a0:65:4b:59: 07:21:86:2d:a8:93:bc:9b:60:f8:26:45:b8:52:83:d2:70:27: 8c:a8:4c:d2:86:78:74:0c:54:8f:09:d0:99:ea:da:be:3d:e8: 29:51:98:4b:45:3f:ab:18:d5:41:96:49:cd:70:02:a2:73:bf: a4:85:7e:e1:25:a2:5d:72:44:67:f8:ec:02:da:cd:b4:47:b1: ea:5f:4b:88:1f:f1:3b:b8:02:66:62:62:ac:34:dc:b1:73:f9: 60:d4:f4:f7:2b:89:df:24:20:71:c0:49:39:d6:ce:c1:9e:5a: 43:cc:c5:e5:1a:02:10:75:78:d7:09:53:65:c0:d8:8e:ba:26: 19:a1:0e:ce:08:2a:80:eb:71:25:b7:04:f8:fd:19:ca:b6:6a: c4:7f:8e:e3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx RERENTE0RDhGMDAeFw0yNDA1MDMwMTA4MzNaFw0yNDA1MDUwMTA4MzNaMBgxFjAU BgNVBAMTDTY2MzQzOTExLTU3OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCygFxlWtvf4dxta+24orSJVoOdsPx/lljV751VxAgkH8Y0JpnClB+Xa+EU Tw8lrVnrVrttTCZtM5CvsdQ6fLOy59QcfEV2PTx516ORnhyuHvPBRjM2h8Y9E7H4 gk5+5kgayTFVeHKCPck2RGTwNviRI5NSiVRrXGB0Uy47rrOsv8g/lLj5C4CDNrK6 RAnBxpO9nfZO8XUZvhbwFywkFbck4smd2cuhBByPVB/01YjlKWCxpj3LQK8E/vDt XrVgYNsprBzhTXB8ZMTtv0b1EFqxYj8A2f0/F0p/PHyTAlNV1dUuUALqKguHh6SF l+4rD5W5Bnv56hQkYRdM1rqhsj8tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUk2W4 t82y3TXvgj/zvEtLxwT+00UwHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU 2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3 cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhB RUEyMjgvckM1UzdwSzd3Z1dpTVA5M29aQkIzZFVVMlBBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVopn6E2x5twMkWqILligeKxnhPIjk tslDmQ/cN7AZEa9epB2t0d5lQdhCU4Cp3CxKX7WAgwMNbQKLDX5kK+b1SBavVMDk 6UIJOBIcfTFzdPO2M+WmD42r/UayT5EnF0XKEvGqRK23wKBlS1kHIYYtqJO8m2D4 JkW4UoPScCeMqEzShnh0DFSPCdCZ6tq+PegpUZhLRT+rGNVBlknNcAKic7+khX7h JaJdckRn+OwC2s20R7HqX0uIH/E7uAJmYmKsNNyxc/lg1PT3K4nfJCBxwEk51s7B nlpDzMXlGgIQdXjXCVNlwNiOuiYZoQ7OCCqA63EltwT4/RnKtmrEf47j -----END CERTIFICATE-----Generated at Fri May 3 04:45:03 2024 by rpki-client on console-fra.rpki-client.org