$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft File: DcakyCEJ_yyznB0aWMOOMDPFoP4.mft (raw, json) Hash identifier: i9zIh6hDrQqp4sbTHLxrJbUv7uNx63K4NDksbjIK2qQ= Subject key identifier: 9A:33:51:CB:7C:3B:32:F1:CD:58:39:E7:E5:C4:89:A6:98:9C:1B:6A Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE Certificate serial: 0271 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft Manifest number: 0256 Signing time: Wed 05 Nov 2025 04:34:22 +0000 Manifest this update: Wed 05 Nov 2025 04:34:21 +0000 Manifest next update: Fri 07 Nov 2025 04:34:21 +0000 Files and hashes: 1: DcakyCEJ_yyznB0aWMOOMDPFoP4.crl (hash: 2IsksixVpw2+2ModIQDrPDbahqfPuDvWvvOXg/kzD80=) 2: D36F9FC09E1211F0966632AEDAE4EC9C.roa (hash: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=) 3: 7DD153FE514D11F0A35C1C97DAE4EC9C.roa (hash: 8bWJ3tM27kTbYQCS7pka2UKCEjGC//pzMPNEA8dwKMk=) 4: 840BAFE4D5CE11EF9F26DD77762E951A.roa (hash: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=) 5: 5391E35A514E11F0B3FBEA9BDAE4EC9C.roa (hash: FgqtDyexUlItVpAKSV/WBoPJSeqrXF4SEH2sFDGm9KI=) 6: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (hash: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=) 7: C4B25498D5CF11EF8B385380762E951A.roa (hash: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=) 8: F28EE676D5B911EFB1FFC972762E951A.roa (hash: EzqsSk1Co9k9NgSov+FZr7H05V+t9uoO/FrO5hKwcOM=) 9: 23D3EB78D5BA11EF86DD9F74762E951A.roa (hash: G4Ai8yoQfjwUNFDDrcLjtsPrrCfGiIRKwRB24pEHxY8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 07 Nov 2025 00:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE Validity Not Before: Nov 5 04:34:21 2025 GMT Not After : Nov 7 04:34:21 2025 GMT Subject: CN=690ad3ce-b838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:7d:c1:cf:83:3e:90:f0:a2:11:d1:11:15: 16:47:cd:be:b2:2a:58:34:db:54:29:7f:d0:ee:01: 1d:2e:10:94:5a:cf:12:a4:6b:cf:f2:df:5d:ed:fc: 4a:3c:93:97:c7:f3:7e:72:31:8e:85:dd:39:50:64: d6:27:a5:96:41:26:4a:c3:f1:f7:75:58:21:6b:6c: 11:40:c8:1b:5c:9f:4b:7e:13:be:44:7b:03:32:4a: da:a4:ed:d7:2a:e1:89:2a:8f:5a:77:5a:59:5b:66: 97:cb:47:ac:32:10:c7:43:59:55:83:92:b2:a2:26: a1:db:a8:c6:b6:3d:9c:ee:a8:06:03:04:92:18:2c: 28:c5:79:20:d1:1d:0d:b0:bf:0d:f7:a7:6d:0c:cd: c9:f1:8f:0b:28:ba:0d:05:65:48:d9:2d:f3:1a:85: c3:15:b8:80:35:a7:2d:f9:a5:74:35:ef:a3:d3:20: 93:cd:b7:8f:ae:c9:fc:74:3f:c4:0f:bd:bb:8c:c6: 14:25:fa:ad:db:ee:e9:9f:d3:ef:97:33:05:e4:f1: da:01:b7:11:4d:c3:85:57:6b:92:e6:96:43:a9:bb: 2b:64:d0:c2:e1:8d:a0:60:f4:9d:55:7e:bf:33:d3: 68:4f:fa:d6:57:8f:8e:ec:93:4c:45:8b:45:62:70: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:33:51:CB:7C:3B:32:F1:CD:58:39:E7:E5:C4:89:A6:98:9C:1B:6A X509v3 Authority Key Identifier: keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:29:3b:27:a2:2c:b3:28:1a:a8:07:cd:dc:e5:55:f5:26:32: f3:89:63:84:a4:5c:ed:5f:62:f9:29:76:98:89:22:42:1f:79: 36:8b:8f:17:2f:d7:bb:14:44:dc:e1:8f:ed:87:5a:cf:34:a8: 81:be:fa:68:ae:af:1f:41:90:a6:3d:e4:6d:1a:47:0b:32:eb: ef:58:57:61:22:96:9e:df:94:2b:d7:72:c9:4c:22:d3:e9:7f: f8:06:61:10:33:ff:04:87:78:98:4d:60:7b:1e:72:7d:8d:24: c4:05:e9:07:3f:4e:00:c5:2e:c4:b4:55:d1:5b:f8:aa:64:48: 5b:b7:11:b4:32:4a:80:fb:4f:c6:ca:ec:7b:14:09:12:55:d3: 39:76:d7:3d:68:bf:17:7f:d2:7e:14:d0:b8:1d:fb:f2:ec:6d: a6:b2:06:ea:1c:df:84:5b:24:1b:ec:15:a3:0a:50:b7:4c:a7: a4:a9:7c:50:85:42:4c:08:a5:41:60:b1:25:b9:d9:62:d1:7b: 2a:55:16:a9:56:75:ce:29:46:da:aa:84:84:1e:ad:88:96:b0: b6:5a:45:6c:dc:92:a0:83:1c:e5:b7:c6:04:c9:03:98:c0:21: 6e:2d:f8:b1:83:de:58:7f:ed:73:54:0d:5c:51:62:b6:91:52: 58:91:d9:fc -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODc3QkJBRjExMC8GA1UEBRMoMERDNkE0QzgyMTA5RkYyQ0IzOUMxRDFBNThDMzhF MzAzM0M1QTBGRTAeFw0yNTExMDUwNDM0MjFaFw0yNTExMDcwNDM0MjFaMBgxFjAU BgNVBAMTDTY5MGFkM2NlLWI4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCjAH3Bz4M+kPCiEdERFRZHzb6yKlg021Qpf9DuAR0uEJRazxKka8/y313t /Eo8k5fH835yMY6F3TlQZNYnpZZBJkrD8fd1WCFrbBFAyBtcn0t+E75EewMyStqk 7dcq4Ykqj1p3WllbZpfLR6wyEMdDWVWDkrKiJqHbqMa2PZzuqAYDBJIYLCjFeSDR HQ2wvw33p20Mzcnxjwsoug0FZUjZLfMahcMVuIA1py35pXQ176PTIJPNt4+uyfx0 P8QPvbuMxhQl+q3b7umf0++XMwXk8doBtxFNw4VXa5LmlkOpuytk0MLhjaBg9J1V fr8z02hP+tZXj47sk0xFi0VicJVRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmjNR y3w7MvHNWDnn5cSJppicG2owHwYDVR0jBBgwFoAUDcakyCEJ/yyznB0aWMOOMDPF oP4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjg3N0JCLzM4ODdDRDA0MUNGNzExRUZBRUY4N0MxRTdEREMyNEMyL0RjYWt5 Q0VKX3l5em5CMGFXTU9PTURQRm9QNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0RjYWt5Q0VKX3l5em5CMGFXTU9PTURQRm9QNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODc3QkIvMzg4N0NEMDQxQ0Y3MTFFRkFFRjg3QzFFN0RE QzI0QzIvRGNha3lDRUpfeXl6bkIwYVdNT09NRFBGb1A0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABKTsnoiyzKBqoB83c5VX1JjLziWOE pFztX2L5KXaYiSJCH3k2i48XL9e7FETc4Y/th1rPNKiBvvporq8fQZCmPeRtGkcL MuvvWFdhIpae35Qr13LJTCLT6X/4BmEQM/8Eh3iYTWB7HnJ9jSTEBekHP04AxS7E tFXRW/iqZEhbtxG0MkqA+0/Gyux7FAkSVdM5dtc9aL8Xf9J+FNC4Hfvy7G2msgbq HN+EWyQb7BWjClC3TKekqXxQhUJMCKVBYLEludli0XsqVRapVnXOKUbaqoSEHq2I lrC2WkVs3JKggxzlt8YEyQOYwCFuLfixg95Yf+1zVA1cUWK2kVJYkdn8 -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:11 2025 by rpki-client