$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json) Hash identifier: VLzrKFiIbC3hqzDR5xMK4cB+LpZKQFwt2+eO+LMCjbw= Subject key identifier: AB:F9:3E:A2:1E:3C:C8:3B:AB:3F:56:E2:7D:AD:E2:AC:3D:59:61:8B Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Certificate serial: 0712 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft Manifest number: 0702 Signing time: Sun 24 Nov 2024 01:12:04 +0000 Manifest this update: Sun 24 Nov 2024 01:12:04 +0000 Manifest next update: Tue 26 Nov 2024 01:12:04 +0000 Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: GwdFwwgDUkCRslZJX680ey5Onr9HPiehz2z6PE4zHQU=) 2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=) 3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=) 4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=) 5: 924F80688A4E11EC8639028F5A40D577.roa (hash: tnumgrytmuyUCUVB2UaM2OC8r2VqINNEld+/gxdsqJk=) 6: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=) 7: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=) 8: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=) 9: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=) 10: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=) 11: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=) 12: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=) 13: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 26 Nov 2024 00:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Validity Not Before: Nov 24 01:12:04 2024 GMT Not After : Nov 26 01:12:04 2024 GMT Subject: CN=67427d64-40ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:14:20:80:e9:55:a4:3e:be:37:1a:3f:a1: 4d:ee:5c:c4:58:54:67:35:5f:10:27:33:84:44:fb: 91:06:3c:79:74:5e:40:6e:39:4c:34:46:68:26:96: 04:43:2f:da:45:9d:51:fe:e7:f4:64:f9:ae:7c:0b: 7f:61:8d:f7:cf:c0:b9:53:71:35:79:b3:a8:86:51: 77:41:83:89:3a:4a:dd:17:a2:90:b5:a8:2e:9c:b1: 82:44:22:9e:3f:8d:99:d8:b3:1a:35:b1:e7:31:01: 51:7c:d2:3e:32:7a:76:94:df:c1:02:89:7a:6b:1f: c4:61:f2:99:0f:21:15:8a:d3:78:63:5f:7d:64:c5: a8:cf:09:c8:1d:8c:63:d0:43:66:fd:85:f1:a4:12: 62:27:01:f0:23:d5:02:8f:d9:1b:07:74:d2:8d:d5: 61:20:a0:60:5f:8c:15:a8:d1:1a:46:ee:95:5c:54: 5e:07:8e:df:4e:98:16:7c:89:5b:11:4a:a4:9d:b6: 41:31:9c:d6:9c:fc:11:f5:da:c5:dd:42:a8:c8:65: 2e:0b:48:1f:50:4d:b6:53:75:9a:bd:02:3f:2b:70: 63:ce:31:b3:2f:a6:60:f1:03:95:57:a1:3f:68:37: c7:fb:ee:5f:15:18:74:04:b7:50:41:32:84:a8:78: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F9:3E:A2:1E:3C:C8:3B:AB:3F:56:E2:7D:AD:E2:AC:3D:59:61:8B X509v3 Authority Key Identifier: keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f0:4b:92:de:98:95:04:58:d0:6a:81:94:9c:81:7f:d5:7f: a6:e6:b1:62:99:d5:d4:f8:4d:cb:af:8e:83:45:9c:8f:21:39: 8e:47:86:21:ca:00:3c:37:bd:b7:9e:11:88:a6:3d:14:70:5e: b6:2f:6a:18:08:1e:07:61:e8:70:37:54:18:8c:fc:9c:8e:26: fc:18:6f:c2:88:da:66:8e:5e:88:f2:74:df:ab:23:71:d5:93: 45:67:89:04:f2:b8:49:e5:eb:f6:c7:dc:9a:41:d5:fa:cb:0d: 93:ec:a7:a1:fe:11:77:e2:eb:d8:77:e7:c6:13:77:de:71:da: c1:ed:4b:a9:3a:27:5f:4c:ac:a3:24:c4:0e:aa:a2:09:ec:f2: a0:11:20:5e:8a:e4:38:4b:d3:84:ad:8d:3e:a0:c9:84:5a:df: 76:0a:c9:fc:0e:c8:d3:39:47:55:7e:8d:95:7d:bb:d7:2c:f4: 87:4a:1d:8f:45:cf:d6:8e:e6:e7:88:4b:3a:0b:2f:08:fb:64: a8:52:69:8d:dc:9b:5a:3f:d6:bd:ac:aa:e3:9a:41:a2:8d:f9: a9:b3:21:ec:76:09:51:2e:d2:ca:e1:c6:e6:9e:7e:1d:f4:c6: b6:76:88:04:38:20:28:8c:ac:cc:82:5e:05:48:7e:48:85:0a: f3:ea:0b:4b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx RERENTE0RDhGMDAeFw0yNDExMjQwMTEyMDRaFw0yNDExMjYwMTEyMDRaMBgxFjAU BgNVBAMTDTY3NDI3ZDY0LTQwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPGBQggOlVpD6+Nxo/oU3uXMRYVGc1XxAnM4RE+5EGPHl0XkBuOUw0Rmgm lgRDL9pFnVH+5/Rk+a58C39hjffPwLlTcTV5s6iGUXdBg4k6St0XopC1qC6csYJE Ip4/jZnYsxo1secxAVF80j4yenaU38ECiXprH8Rh8pkPIRWK03hjX31kxajPCcgd jGPQQ2b9hfGkEmInAfAj1QKP2RsHdNKN1WEgoGBfjBWo0RpG7pVcVF4Hjt9OmBZ8 iVsRSqSdtkExnNac/BH12sXdQqjIZS4LSB9QTbZTdZq9Aj8rcGPOMbMvpmDxA5VX oT9oN8f77l8VGHQEt1BBMoSoeFfhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUq/k+ oh48yDurP1bifa3irD1ZYYswHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU 2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3 cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhB RUEyMjgvckM1UzdwSzd3Z1dpTVA5M29aQkIzZFVVMlBBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj8EuS3piVBFjQaoGUnIF/1X+m5rFi mdXU+E3Lr46DRZyPITmOR4YhygA8N723nhGIpj0UcF62L2oYCB4HYehwN1QYjPyc jib8GG/CiNpmjl6I8nTfqyNx1ZNFZ4kE8rhJ5ev2x9yaQdX6yw2T7Keh/hF34uvY d+fGE3fecdrB7UupOidfTKyjJMQOqqIJ7PKgESBeiuQ4S9OErY0+oMmEWt92Csn8 DsjTOUdVfo2VfbvXLPSHSh2PRc/WjubniEs6Cy8I+2SoUmmN3JtaP9a9rKrjmkGi jfmpsyHsdglRLtLK4cbmnn4d9Ma2dogEOCAojKzMgl4FSH5IhQrz6gtL -----END CERTIFICATE-----Generated at Sun Nov 24 02:37:45 2024 by rpki-client on console-fra.rpki-client.org