$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: tcR+7qtSmOj3tE4AdyicbEfltWUyCGjtkYdzkpsU10o= Subject key identifier: EA:C2:F3:BB:4E:71:97:92:B1:9C:D4:11:DC:EA:B0:BE:68:1D:A9:80 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0EE8 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0ED1 Signing time: Sun 27 Jul 2025 00:51:28 +0000 Manifest this update: Sun 27 Jul 2025 00:51:27 +0000 Manifest next update: Tue 29 Jul 2025 00:51:27 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: WFf5e7RG1xeKOdZyp6Oe0yoMAoSjofWWfUzEUTitmDs=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Jul 27 00:51:27 2025 GMT Not After : Jul 29 00:51:27 2025 GMT Subject: CN=6885780f-22a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:63:d6:ff:14:61:d1:eb:47:a2:67:e4:44: 34:b7:2d:8f:b9:dd:be:8c:45:da:c5:58:99:0f:cf: 03:a7:00:8f:3a:9c:8f:12:d1:ae:9b:a0:fa:18:b0: 1b:d4:2a:08:08:6b:9f:18:73:a2:f3:e4:cb:14:86: 34:3a:29:85:81:51:b2:b3:22:94:bd:71:24:c5:bb: 3a:0d:dd:2a:96:13:12:7a:61:92:c6:80:4e:82:5e: 1c:71:e6:4a:88:e8:0d:be:d0:48:6e:53:23:d8:70: d1:08:30:1e:8c:b1:54:d2:43:47:19:60:90:39:f9: 0f:44:d5:31:4b:c6:1d:6e:35:9a:53:2e:61:82:af: db:80:8f:53:0f:24:69:3c:c6:37:db:12:5c:31:af: 25:d6:50:2a:d9:d8:b8:85:5b:77:c1:46:0a:81:cc: 60:c6:e6:c7:53:41:1a:ca:9b:29:2a:a0:e5:d2:02: 1e:1d:7c:97:73:bb:2a:fd:3d:61:10:b5:84:91:d7: c0:34:97:a3:16:20:86:4e:37:c2:a3:5c:9d:d8:a8: 24:d4:db:fa:21:07:d9:c9:2a:44:fa:7b:dc:b0:86: bc:8b:fe:b7:ff:d2:90:b9:f8:d4:d5:84:4b:44:bd: 38:37:cf:1d:19:71:95:c5:b2:72:46:e0:2e:1c:c6: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:F3:BB:4E:71:97:92:B1:9C:D4:11:DC:EA:B0:BE:68:1D:A9:80 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ee:0a:17:44:e3:f6:53:86:25:f1:45:a6:d4:ab:37:a6:19: 73:48:60:44:80:b3:50:ad:d3:ab:5c:81:60:51:65:0f:3a:e4: 69:9e:1e:56:7f:47:56:49:83:89:d7:4b:0b:06:05:3c:ec:b5: bb:ce:25:2e:7f:7f:7b:a9:00:af:f7:dd:2d:5e:a3:3c:21:55: 54:32:2f:51:4e:55:46:39:c2:9f:18:c9:da:2c:59:f5:11:2d: 6f:50:bf:40:68:28:41:90:b8:e0:b1:94:f5:44:89:4f:57:b2: 13:b9:2c:50:42:97:64:03:a8:1d:60:f3:40:78:b1:ff:63:ac: 0c:51:32:1f:1a:05:c2:69:1e:cd:21:45:57:41:21:22:04:b3: f8:9c:06:ce:c5:8f:95:b5:d1:4a:75:86:b5:a1:16:53:7b:52: 19:e2:63:52:03:38:2d:c6:5d:a0:83:a5:c1:32:ab:f0:69:33: ff:0c:4b:28:db:fd:34:1b:b3:91:2b:e2:d4:94:62:3f:24:26: 21:78:72:94:c6:cc:ea:f0:c9:9b:28:01:22:af:0d:2c:82:d4: d7:f1:74:36:85:d4:57:12:58:31:ed:06:1d:4c:99:00:f0:3f: f6:e6:b3:02:8d:43:a1:73:29:18:b2:3c:64:a7:cb:15:6b:46: df:45:da:1c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDugwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNTA3MjcwMDUxMjdaFw0yNTA3MjkwMDUxMjdaMBgxFjAU BgNVBAMTDTY4ODU3ODBmLTIyYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDOd2PW/xRh0etHomfkRDS3LY+53b6MRdrFWJkPzwOnAI86nI8S0a6boPoY sBvUKggIa58Yc6Lz5MsUhjQ6KYWBUbKzIpS9cSTFuzoN3SqWExJ6YZLGgE6CXhxx 5kqI6A2+0EhuUyPYcNEIMB6MsVTSQ0cZYJA5+Q9E1TFLxh1uNZpTLmGCr9uAj1MP JGk8xjfbElwxryXWUCrZ2LiFW3fBRgqBzGDG5sdTQRrKmykqoOXSAh4dfJdzuyr9 PWEQtYSR18A0l6MWIIZON8KjXJ3YqCTU2/ohB9nJKkT6e9ywhryL/rf/0pC5+NTV hEtEvTg3zx0ZcZXFsnJG4C4cxm2/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6sLz u05xl5KxnNQR3OqwvmgdqYAwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP7goXROP2U4Yl8UWm1Ks3phlzSGBE gLNQrdOrXIFgUWUPOuRpnh5Wf0dWSYOJ10sLBgU87LW7ziUuf397qQCv990tXqM8 IVVUMi9RTlVGOcKfGMnaLFn1ES1vUL9AaChBkLjgsZT1RIlPV7ITuSxQQpdkA6gd YPNAeLH/Y6wMUTIfGgXCaR7NIUVXQSEiBLP4nAbOxY+VtdFKdYa1oRZTe1IZ4mNS Azgtxl2gg6XBMqvwaTP/DEso2/00G7ORK+LUlGI/JCYheHKUxszq8MmbKAEirw0s gtTX8XQ2hdRXElgx7QYdTJkA8D/25rMCjUOhcykYsjxkp8sVa0bfRdoc -----END CERTIFICATE-----Generated at Sun Jul 27 08:00:30 2025 by rpki-client