$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: PFkie6nNPbBIHOMf13cf1Men+nxSnZphBG3bL1BnOyc= Subject key identifier: 3B:C7:5C:1E:FF:49:4D:E9:1B:85:60:8F:80:93:22:0F:5D:23:89:C1 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0DEE Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0DD7 Signing time: Mon 25 Nov 2024 00:40:55 +0000 Manifest this update: Mon 25 Nov 2024 00:40:55 +0000 Manifest next update: Wed 27 Nov 2024 00:40:55 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: ZAMXOSFj2IXgZM0vcDtb6SJ/2u/aKmmIzBYwXdIvq4k=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 27 Nov 2024 00:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3566 (0xdee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Nov 25 00:40:55 2024 GMT Not After : Nov 27 00:40:55 2024 GMT Subject: CN=6743c797-cf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:4b:5b:14:75:20:a9:a9:81:05:e1:c5:ba: 44:5b:1a:bd:12:8b:01:80:a7:66:f6:5b:86:c4:30: ee:a4:4b:ec:b4:bf:81:0d:74:3c:f2:22:c0:60:53: 70:5c:5f:37:97:88:16:12:8c:ac:53:59:f1:b3:ab: 39:d4:86:11:7e:72:1d:6c:bd:f3:12:d1:c0:c8:c1: 1b:58:9d:80:54:ab:8b:a1:a0:7a:29:93:78:be:a6: 4d:e1:e4:44:60:94:ed:4c:76:0d:a8:72:8d:92:04: 3a:51:a4:76:ed:7c:92:10:16:ca:30:5d:1e:65:22: 53:65:3c:47:64:09:1c:0e:aa:83:04:5d:d7:f0:28: 4d:1e:c4:a1:80:59:d9:42:ae:4b:70:75:f3:a4:28: 18:cc:ae:63:97:94:a1:12:b7:95:00:a6:a9:12:b9: 00:0c:47:d9:cc:e9:54:0e:60:79:1c:73:dd:40:c7: a8:59:e4:f4:40:01:21:a4:6d:5f:99:1a:08:25:d2: 50:2f:06:38:67:d9:84:5c:97:89:0d:b0:53:f1:2d: 26:fd:5e:f4:56:41:f1:63:48:0d:45:b2:38:89:d6: 29:2f:dd:78:1b:c7:b8:8e:6c:07:1c:28:5e:d5:1c: d9:74:8d:a5:0a:91:12:b9:56:6c:18:34:9e:c7:48: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C7:5C:1E:FF:49:4D:E9:1B:85:60:8F:80:93:22:0F:5D:23:89:C1 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:22:87:4f:88:dd:d9:0a:e0:70:b6:ea:51:77:cf:c1:9f:ec: e4:2c:f2:93:d1:3c:78:81:86:66:ea:b2:58:18:15:4b:1d:14: 8d:56:a4:f2:a9:d7:b8:79:4f:22:db:a0:cb:4b:00:9c:03:ff: 0c:69:42:c7:7c:7e:8b:a8:55:83:28:ca:0e:29:80:24:79:f3: b5:09:9f:d4:a6:e7:40:49:65:90:08:7a:da:17:24:11:f6:d8: dc:68:82:ef:08:53:3c:1e:7d:e4:39:5d:a0:f0:f7:1f:5a:7f: 43:a9:e0:05:37:bd:c1:2b:91:e3:aa:66:a4:0e:59:65:a8:b3: 2e:b3:21:d1:30:69:66:42:84:27:17:0b:50:b8:24:64:57:c9: 11:8f:a5:e8:22:55:7b:43:db:75:53:b8:36:71:b6:e5:8c:9f: c5:79:07:d0:0a:4b:a1:98:b0:dc:41:56:23:b5:9c:94:ed:89: 0f:51:6e:78:cc:ac:9c:e2:50:41:0e:c5:27:56:8d:68:2a:01: 6a:84:ae:ac:50:a9:63:24:5a:a5:be:29:9f:73:20:f1:bc:c2: 57:7f:33:9b:a8:62:6b:72:7a:e9:20:1b:2e:cc:5a:34:ac:e3: f0:0e:5e:a7:14:d3:a8:51:1b:0b:d6:29:c6:dd:06:40:e2:eb: 53:f5:eb:9d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDe4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNDExMjUwMDQwNTVaFw0yNDExMjcwMDQwNTVaMBgxFjAU BgNVBAMTDTY3NDNjNzk3LWNmMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPa0tbFHUgqamBBeHFukRbGr0SiwGAp2b2W4bEMO6kS+y0v4ENdDzyIsBg U3BcXzeXiBYSjKxTWfGzqznUhhF+ch1svfMS0cDIwRtYnYBUq4uhoHopk3i+pk3h 5ERglO1Mdg2oco2SBDpRpHbtfJIQFsowXR5lIlNlPEdkCRwOqoMEXdfwKE0exKGA WdlCrktwdfOkKBjMrmOXlKESt5UApqkSuQAMR9nM6VQOYHkcc91Ax6hZ5PRAASGk bV+ZGggl0lAvBjhn2YRcl4kNsFPxLSb9XvRWQfFjSA1FsjiJ1ikv3Xgbx7iObAcc KF7VHNl0jaUKkRK5VmwYNJ7HSOjvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUO8dc Hv9JTekbhWCPgJMiD10jicEwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCIodPiN3ZCuBwtupRd8/Bn+zkLPKT 0Tx4gYZm6rJYGBVLHRSNVqTyqde4eU8i26DLSwCcA/8MaULHfH6LqFWDKMoOKYAk efO1CZ/UpudASWWQCHraFyQR9tjcaILvCFM8Hn3kOV2g8PcfWn9DqeAFN73BK5Hj qmakDlllqLMusyHRMGlmQoQnFwtQuCRkV8kRj6XoIlV7Q9t1U7g2cbbljJ/FeQfQ CkuhmLDcQVYjtZyU7YkPUW54zKyc4lBBDsUnVo1oKgFqhK6sUKljJFqlvimfcyDx vMJXfzObqGJrcnrpIBsuzFo0rOPwDl6nFNOoURsL1inG3QZA4utT9eud -----END CERTIFICATE-----Generated at Mon Nov 25 02:48:47 2024 by rpki-client on console-ams.rpki-client.org