$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json) Hash identifier: o3Il8+sIXl7ItVjYipQzwYhbO9Cia0KCIM6rz4G+Np0= Subject key identifier: 86:DB:7D:94:24:20:1C:0F:E7:49:28:58:1C:6F:19:CA:F9:6E:E7:C7 Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Certificate serial: 0E21 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft Manifest number: 0E15 Signing time: Sat 26 Apr 2025 00:56:00 +0000 Manifest this update: Sat 26 Apr 2025 00:56:00 +0000 Manifest next update: Mon 28 Apr 2025 00:56:00 +0000 Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: fn3GxN+JwY/LAXrsXPjkJa0XKBbQadq2WdHnQPBg9Yo=) 2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=) 3: 1214F7F4585D11E59D5C7317F8AEA228.roa (hash: 0FpgqvuIfv2t7pEzVo665VBSLTVkVC883PZi8zGnUOQ=) 4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=) 5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=) 6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=) 7: B52245B0585C11E5AF923917F8AEA228.roa (hash: w98JhuMKbeVGaXUfnIIH2kCqGJut86/4raJT2iIszDU=) 8: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=) 9: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=) 10: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=) 11: 4C3C8DC6585C11E58ADCBB15F8AEA228.roa (hash: ztbK9LFQQYS+tWoyZX54zNQ+XC25dMZgasKrqJ1v5pE=) 12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 00:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Validity Not Before: Apr 26 00:56:00 2025 GMT Not After : Apr 28 00:56:00 2025 GMT Subject: CN=680c2f20-a646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:57:b3:f7:44:d8:7d:d0:03:ea:08:ae:4c:15: ce:a3:f3:e0:7e:07:ac:a7:0c:26:6e:94:a7:3d:66: d0:2a:f1:9a:97:5f:c0:fe:06:9c:8a:74:22:73:fc: 41:06:0e:bb:6a:19:82:b8:48:d1:90:9a:6b:fb:42: 40:a0:8d:53:ab:2f:de:f0:b8:71:17:60:c2:2a:7d: af:94:29:bc:c1:9e:fa:24:ea:be:a4:75:29:8b:34: cf:9a:c3:f2:5a:d5:9f:c0:83:80:ca:6d:cc:2c:05: 4d:c9:ec:3d:61:65:28:86:c6:fa:27:3f:16:bc:78: 5c:70:4a:0b:4b:a2:43:09:6a:dc:cb:1d:44:a5:51: ac:80:35:37:18:38:63:5e:82:76:44:38:4e:62:88: 63:af:34:4d:b6:77:99:04:04:75:45:5c:b2:51:81: 63:4f:74:1b:01:1f:1f:bc:75:2b:c5:6b:3a:8b:f6: 6b:ea:f3:43:70:e7:11:90:c6:14:72:39:4e:0d:4b: de:7c:f9:e6:aa:54:2d:a0:30:81:05:b9:db:ae:c0: d0:26:8d:d9:9d:d4:56:e3:14:54:3b:1a:9b:ef:70: f5:68:7a:c9:64:63:8b:8a:ec:f9:d9:24:54:80:95: 08:58:13:95:ad:ea:e6:2d:11:b3:82:8d:ac:ca:6e: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DB:7D:94:24:20:1C:0F:E7:49:28:58:1C:6F:19:CA:F9:6E:E7:C7 X509v3 Authority Key Identifier: keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f5:1c:b4:83:c9:43:c4:1d:04:1f:da:de:96:9c:61:bf:fa: c4:a2:0d:e9:cb:5d:3e:e3:73:d8:b9:94:59:3e:e6:e4:41:2b: 07:3e:b3:44:9c:9c:51:33:b6:f0:3b:12:41:7f:c0:53:54:36: 63:72:d3:d3:f9:cc:05:e6:fe:d7:d8:63:cb:ea:6b:34:fb:ba: 1a:07:4d:98:4d:20:be:32:29:5d:a8:e8:ad:aa:a2:47:9d:3d: 1b:d4:fe:11:16:56:96:8a:22:7e:b0:48:7f:73:21:9d:1a:55: 8a:8b:3e:9a:5c:90:73:f5:50:86:c0:50:ab:a5:55:95:27:76: 8e:0c:f0:48:5c:8a:b6:e2:93:e4:06:00:3f:9b:11:b8:5a:f9: 37:9b:38:c6:d6:34:ed:f1:9e:82:cc:ad:12:5f:ad:a7:80:c3: cd:7a:6a:76:70:b0:88:c6:51:b8:79:46:49:ec:32:d3:5b:d6: ae:ea:95:4b:74:6e:02:cd:c1:b4:5b:ad:2d:2d:b1:88:e2:36: b5:77:68:8f:b4:7e:3c:4e:7d:d0:ff:41:f9:3a:a3:53:de:c3: d2:ae:83:51:e5:03:db:b6:48:cd:68:96:5c:20:1b:53:c4:d4: 1a:1f:69:66:67:6c:18:90:f2:fd:8b:84:fe:bc:de:de:35:4f: bc:e8:95:6a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0 Mjg0QzU4NDlDQzAeFw0yNTA0MjYwMDU2MDBaFw0yNTA0MjgwMDU2MDBaMBgxFjAU BgNVBAMTDTY4MGMyZjIwLWE2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCbV7P3RNh90APqCK5MFc6j8+B+B6ynDCZulKc9ZtAq8ZqXX8D+BpyKdCJz /EEGDrtqGYK4SNGQmmv7QkCgjVOrL97wuHEXYMIqfa+UKbzBnvok6r6kdSmLNM+a w/Ja1Z/Ag4DKbcwsBU3J7D1hZSiGxvonPxa8eFxwSgtLokMJatzLHUSlUayANTcY OGNegnZEOE5iiGOvNE22d5kEBHVFXLJRgWNPdBsBHx+8dSvFazqL9mvq80Nw5xGQ xhRyOU4NS958+eaqVC2gMIEFuduuwNAmjdmd1FbjFFQ7GpvvcPVoeslkY4uK7PnZ JFSAlQhYE5Wt6uYtEbOCjazKbjdpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhtt9 lCQgHA/nSShYHG8Zyvlu58cwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCx9Ry0g8lDxB0EH9relpxhv/rEog3p y10+43PYuZRZPubkQSsHPrNEnJxRM7bwOxJBf8BTVDZjctPT+cwF5v7X2GPL6ms0 +7oaB02YTSC+MildqOitqqJHnT0b1P4RFlaWiiJ+sEh/cyGdGlWKiz6aXJBz9VCG wFCrpVWVJ3aODPBIXIq24pPkBgA/mxG4Wvk3mzjG1jTt8Z6CzK0SX62ngMPNemp2 cLCIxlG4eUZJ7DLTW9au6pVLdG4CzcG0W60tLbGI4ja1d2iPtH48Tn3Q/0H5OqNT 3sPSroNR5QPbtkjNaJZcIBtTxNQaH2lmZ2wYkPL9i4T+vN7eNU+86JVq -----END CERTIFICATE-----Generated at Sat Apr 26 18:09:14 2025 by rpki-client