$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: nr2bvOC/gfdt89/kfZ0ol4g1kqWLJTHLnAFBeSif73M= Subject key identifier: 2B:1B:BB:89:62:81:7B:FD:67:33:F9:6A:DC:73:5B:06:F1:CF:4B:05 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0D14 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0CFE Signing time: Sun 28 Apr 2024 00:35:55 +0000 Manifest this update: Sun 28 Apr 2024 00:35:55 +0000 Manifest next update: Tue 30 Apr 2024 00:35:55 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: k9KvzAjp+XqMRdyvmM93LQSp2f2xOt69CSgC91HdApY=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 7: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 8: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 9: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 10: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 30 Apr 2024 00:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Apr 28 00:35:55 2024 GMT Not After : Apr 30 00:35:55 2024 GMT Subject: CN=662d99eb-90ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:3c:24:06:df:0e:e9:43:b5:e3:28:29:f4: e7:21:47:e7:d9:11:be:44:6c:ea:10:d3:da:30:de: 24:8a:ce:91:8c:56:45:8b:62:78:d3:53:c8:cf:cc: 79:b5:f6:c7:92:57:d1:2b:d0:26:ac:81:c2:96:f3: 13:1f:1c:1f:ef:4c:72:c7:6a:97:7d:5b:d9:67:a4: ed:ed:ee:3c:41:a8:71:2c:c1:4a:c2:76:4f:c0:b6: 60:5b:86:7e:f4:dc:72:b1:b3:de:a1:f3:0c:24:55: 4a:f3:c7:8f:26:07:0b:cc:0e:ec:4b:37:98:fa:7b: ca:a9:a1:3c:7d:6a:6e:a0:76:e1:ae:5c:c5:c0:1f: 92:c2:c3:5b:77:99:85:6a:56:1a:d7:7f:cf:dd:ee: f0:a8:fb:45:4b:c6:35:b4:2d:b3:99:d2:39:fa:db: 84:15:41:81:b4:1b:35:67:3d:f2:49:89:63:65:ce: c6:80:01:e5:51:26:fa:fa:58:11:de:99:65:2c:2c: 98:b5:aa:5f:51:c7:bc:92:78:ba:0d:61:91:86:17: 8d:7b:46:b4:0d:bc:8e:3e:f7:7d:8b:f1:cb:e5:59: dd:9b:20:22:9d:ac:19:eb:cd:c7:72:aa:95:18:ae: b5:45:55:af:46:c9:7e:3b:aa:f2:00:26:81:7e:34: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:BB:89:62:81:7B:FD:67:33:F9:6A:DC:73:5B:06:F1:CF:4B:05 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:4b:e8:07:43:12:61:e6:c1:1a:17:2b:05:90:e2:2d:95:c4: 46:00:00:b7:9d:e0:ea:ac:12:f5:4b:dc:f6:dd:38:53:01:f3: d9:2d:4c:72:aa:5b:72:f6:39:96:cf:66:61:23:79:0e:b1:ea: 49:3a:6a:ca:10:69:62:17:cf:c7:e1:47:eb:ce:7a:7d:bc:71: e6:1a:6c:7c:bd:14:25:54:32:36:ca:c7:08:0e:66:24:be:2f: ae:7a:80:87:78:6e:57:22:c3:4c:87:21:57:d6:f9:a7:06:12: 97:e0:8c:4f:2d:bf:95:72:95:63:ae:56:bd:28:d1:64:8f:b1: b2:be:7a:10:b7:bf:2e:62:e3:8d:fd:48:f9:a9:37:cc:d9:f2: 77:7a:c1:25:07:82:89:3a:49:1e:64:31:68:de:a8:da:18:0e: 35:a1:b0:59:18:81:22:83:9e:77:8d:ed:8a:28:d1:86:87:1c: 7d:fa:11:e7:29:ec:d8:3e:50:1e:e8:51:05:d4:17:45:7a:0e: 1d:a1:b2:ce:d2:65:fe:21:dd:10:30:5a:89:35:7d:d0:a9:8b: f5:0f:a5:c0:a8:89:fc:2c:94:d9:b3:62:84:fd:cb:a5:ca:a7: 84:34:a6:2d:6a:31:f0:c2:3b:2a:d7:a2:7d:75:a0:de:42:80: 95:d6:00:95 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNDA0MjgwMDM1NTVaFw0yNDA0MzAwMDM1NTVaMBgxFjAU BgNVBAMTDTY2MmQ5OWViLTkwYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDWHzwkBt8O6UO14ygp9OchR+fZEb5EbOoQ09ow3iSKzpGMVkWLYnjTU8jP zHm19seSV9Er0CasgcKW8xMfHB/vTHLHapd9W9lnpO3t7jxBqHEswUrCdk/AtmBb hn703HKxs96h8wwkVUrzx48mBwvMDuxLN5j6e8qpoTx9am6gduGuXMXAH5LCw1t3 mYVqVhrXf8/d7vCo+0VLxjW0LbOZ0jn624QVQYG0GzVnPfJJiWNlzsaAAeVRJvr6 WBHemWUsLJi1ql9Rx7ySeLoNYZGGF417RrQNvI4+932L8cvlWd2bICKdrBnrzcdy qpUYrrVFVa9GyX47qvIAJoF+NP3BAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKxu7 iWKBe/1nM/lq3HNbBvHPSwUwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxS+gHQxJh5sEaFysFkOItlcRGAAC3 neDqrBL1S9z23ThTAfPZLUxyqlty9jmWz2ZhI3kOsepJOmrKEGliF8/H4Ufrznp9 vHHmGmx8vRQlVDI2yscIDmYkvi+ueoCHeG5XIsNMhyFX1vmnBhKX4IxPLb+VcpVj rla9KNFkj7GyvnoQt78uYuON/Uj5qTfM2fJ3esElB4KJOkkeZDFo3qjaGA41obBZ GIEig553je2KKNGGhxx9+hHnKezYPlAe6FEF1BdFeg4dobLO0mX+Id0QMFqJNX3Q qYv1D6XAqIn8LJTZs2KE/culyqeENKYtajHwwjsq16J9daDeQoCV1gCV -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:13 2024 by rpki-client on console-ams.rpki-client.org