$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft File: hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json) Hash identifier: /Mnc3JPPQnLBYu6x6Di6kA8XF2o6W0EQkJK6NXIhcCw= Subject key identifier: 45:F7:2E:CA:BA:1C:06:E7:85:98:8F:16:02:E4:04:B8:C7:77:BC:D6 Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D Certificate issuer: /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Certificate serial: 0E5C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft Manifest number: 0E4A Signing time: Tue 17 Jun 2025 00:56:42 +0000 Manifest this update: Tue 17 Jun 2025 00:56:41 +0000 Manifest next update: Thu 19 Jun 2025 00:56:41 +0000 Files and hashes: 1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: to7xIxH3id/y7y050B77NgRgEX8ubY5cF8baqESfVAA=) 2: 2B358C9ACA5411E9AB56C482F8AEA228.roa (hash: 542MHTZAg9mxUFxY3zCZ7p5fwSnjIWtxUnE6kTXmKMs=) 3: 75BB83CECAEE11E9B8750B77F8AEA228.roa (hash: LHVz9xioiQqgDCsiihzIIq+BrjcIvxLKI5LrrXrO3Io=) 4: 0C8F23AAD00B11EB81D5EE07F8AEA228.roa (hash: jPkO7ExSp17mzBRpa2Il9WdyzpVikW5rrHroeK/bJGI=) 5: A584C0ACCAEE11E98C9F3777F8AEA228.roa (hash: COm4IJeTkrJL34O4UJLzMLGNyExGXZ/i492sB/CX0wc=) 6: A9E94F06CAED11E980367876F8AEA228.roa (hash: VrJL3SQd6C3FUUbw0uhJehHrmjG9Xx4v9iS8CcKGSXY=) 7: CEB8F1B0CAED11E988A78B76F8AEA228.roa (hash: jDtuwq3j8HQc76mLF36nBIH2uMggEhhIl6ncNoeaoaY=) 8: 8611EC46CAED11E989D36576F8AEA228.roa (hash: FshGOOOuJbA/9loXNipyvDMsi9pllSp+7FKxuJNVYeU=) 9: 5DC47678CAED11E9859E2C76F8AEA228.roa (hash: +mStn8j1lsfaOcAkA+IpFnx3VVw/ZA+elfj24TZJJoA=) 10: 58D4146ECA5411E9AACFFC82F8AEA228.roa (hash: llqq6mhR2LiQ9Zf86+DgrcW9HILB2CWU6cLF3bhjP9A=) 11: 2EFA614ECAEE11E98511EC76F8AEA228.roa (hash: 2zLMI8rOWrZ63E40k/ceZtOXzw9Rmk5l8voPk4gGNgk=) 12: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=) 13: 393244FCCAED11E9B99FF875F8AEA228.roa (hash: 4xNbES12DfxpVPkV3v2uKcMGkgu9iGiVU5CNykYBjGs=) 14: 8B76B110CD5B11E982F62408F8AEA228.roa (hash: /cWu2nL6HSrRP3knTHp+eSDgxNpMwgwnD7k3nWXKasE=) 15: 0475EE6856D811E5B0E8AA60F8AEA228.roa (hash: rnfvCe8zm7FPtXxrLAwPlwPmid5ucEEvHSHMH0qNarY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 19 Jun 2025 00:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Validity Not Before: Jun 17 00:56:41 2025 GMT Not After : Jun 19 00:56:41 2025 GMT Subject: CN=6850bd49-aa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:13:f4:44:40:cc:fa:b2:6f:ab:9c:ea:5b: e9:2a:7e:80:24:11:af:9a:6b:75:05:6b:26:d1:95: 0b:9f:4c:af:2d:a1:ad:b7:25:0d:da:7c:2d:e3:10: 19:30:8e:f8:5f:78:0c:a4:da:91:15:fa:2c:65:3f: 25:31:97:a4:74:fb:78:26:41:74:6f:43:6d:d8:87: 1f:1b:a2:25:ef:2f:3a:e8:70:eb:fc:2b:e1:a4:34: 76:8f:11:19:00:b5:30:4c:0f:f8:f5:88:73:1f:5c: 9e:ce:a1:17:16:45:dd:74:29:76:e9:7c:78:f8:c5: 1d:e6:c2:1d:3d:aa:44:ac:a1:8c:94:0e:d9:1f:52: e8:bc:02:0c:aa:0d:d1:96:f5:25:15:1b:31:be:04: 0a:b0:5e:73:69:5d:e6:6c:a3:e0:ed:c2:9f:49:73: cb:1c:9e:d1:a4:3b:ce:79:9c:af:3d:bf:f6:64:5a: 9b:e0:56:f4:11:b0:51:ae:7f:72:89:65:34:82:dd: f3:50:e6:a4:2f:76:0b:ff:e4:03:d6:8c:1f:d0:9c: b9:1b:c2:43:ca:10:62:20:b8:02:0a:8c:a3:94:cf: b7:84:61:96:90:cb:3d:ed:a9:15:e4:42:80:b1:78: 1a:f3:37:25:24:6a:59:9a:47:a1:24:47:78:30:fb: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:2E:CA:BA:1C:06:E7:85:98:8F:16:02:E4:04:B8:C7:77:BC:D6 X509v3 Authority Key Identifier: keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e5:7e:8b:b8:93:f4:95:07:bb:9d:e5:1f:3d:e6:4e:c9:bb: 2d:30:65:1a:fa:3a:f5:99:8b:f0:a2:de:31:04:57:6d:77:53: 32:82:15:5d:16:11:b0:7a:59:03:bd:21:24:8c:3c:c2:4e:28: 78:ca:3c:40:9c:b6:00:11:ec:00:9b:22:1d:25:d2:40:44:eb: 77:8b:66:5e:1d:7c:b9:ba:73:ab:b1:96:a7:c3:3d:0b:25:05: 35:3a:be:3a:b6:e3:3b:a5:6a:ba:1d:3b:d4:7a:74:b1:9d:63: 97:e0:63:2d:b9:34:c9:6e:79:50:86:d8:cc:d7:b1:a7:6c:f7: 64:b6:cc:c9:8f:a9:0d:d3:a9:73:ec:59:7d:44:93:f9:78:a0: 6a:d3:aa:4c:a1:1f:9e:f1:da:50:54:3f:a8:09:0b:8e:8a:c2: ab:d6:c3:23:f2:98:73:d9:99:0c:4f:1f:c9:9e:9a:25:89:f6: be:59:11:9c:be:5b:bd:b2:6d:e3:87:6e:12:25:f8:db:64:ca: 57:5d:e9:73:38:d4:00:ca:a9:48:04:d7:e5:a4:40:ed:d5:d7: 1f:b1:04:90:a9:92:e8:df:d0:3d:5f:a1:4c:35:20:03:84:c9: b5:9d:2a:55:86:b0:1e:0e:25:7a:bb:73:62:72:59:fc:52:a8: d6:1b:15:79 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcyRTVBRjExMC8GA1UEBRMoODZGRUQyRUQxOUMyMDY3QTQ4MjIyMUI2NDVENjBD NDVBNEQ1NkE5RDAeFw0yNTA2MTcwMDU2NDFaFw0yNTA2MTkwMDU2NDFaMBgxFjAU BgNVBAMTDTY4NTBiZDQ5LWFhNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDR3BP0REDM+rJvq5zqW+kqfoAkEa+aa3UFaybRlQufTK8toa23JQ3afC3j EBkwjvhfeAyk2pEV+ixlPyUxl6R0+3gmQXRvQ23Yhx8boiXvLzrocOv8K+GkNHaP ERkAtTBMD/j1iHMfXJ7OoRcWRd10KXbpfHj4xR3mwh09qkSsoYyUDtkfUui8Agyq DdGW9SUVGzG+BAqwXnNpXeZso+Dtwp9Jc8scntGkO855nK89v/ZkWpvgVvQRsFGu f3KJZTSC3fNQ5qQvdgv/5APWjB/QnLkbwkPKEGIguAIKjKOUz7eEYZaQyz3tqRXk QoCxeBrzNyUkalmaR6EkR3gw+/cDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURfcu yrocBueFmI8WAuQEuMd3vNYwHwYDVR0jBBgwFoAUhv7S7RnCBnpIIiG2RdYMRaTV ap0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4QUVBMjI4L2h2N1M3 Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2h2N1M3Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcyRTUvOERCNjU0N0E1NkQ3MTFFNTg1MzU2RDYwRjhB RUEyMjgvaHY3UzdSbkNCbnBJSWlHMlJkWU1SYVRWYXAwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBw5X6LuJP0lQe7neUfPeZOybstMGUa +jr1mYvwot4xBFdtd1MyghVdFhGwelkDvSEkjDzCTih4yjxAnLYAEewAmyIdJdJA ROt3i2ZeHXy5unOrsZanwz0LJQU1Or46tuM7pWq6HTvUenSxnWOX4GMtuTTJbnlQ htjM17GnbPdktszJj6kN06lz7Fl9RJP5eKBq06pMoR+e8dpQVD+oCQuOisKr1sMj 8phz2ZkMTx/Jnpolifa+WRGcvlu9sm3jh24SJfjbZMpXXelzONQAyqlIBNflpEDt 1dcfsQSQqZLo39A9X6FMNSADhMm1nSpVhrAeDiV6u3Nicln8UqjWGxV5 -----END CERTIFICATE-----Generated at Tue Jun 17 08:59:45 2025 by rpki-client