$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft File: 67D62A55D09A0E54797A7BAD5C400454D5529546.mft (raw, json) Hash identifier: PxRsFlYayhPQVyNTQ8dSD8PUrCDZkeVft9v+pD07UdA= Subject key identifier: 4C:5D:95:E4:6B:43:53:75:C5:13:32:5D:DD:96:CE:48:82:EA:4E:62 Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 Certificate issuer: /CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Certificate serial: 542B5D17037AF5AB85A2F6983722EA0116E22295 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft Manifest number: 0287 Signing time: Tue 04 Nov 2025 20:24:39 +0000 Manifest this update: Tue 04 Nov 2025 20:19:39 +0000 Manifest next update: Wed 05 Nov 2025 22:19:39 +0000 Files and hashes: 1: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (hash: 6hK9q77m3cXn1f2v739O4COK8hlFw46UVQfmstfEaGI=) 2: 67D62A55D09A0E54797A7BAD5C400454D5529546.crl (hash: G9FAB0BKuw7cxfwjuWUmilrzif4gpMZ1besdwEVY2oE=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2b:5d:17:03:7a:f5:ab:85:a2:f6:98:37:22:ea:01:16:e2:22:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Validity Not Before: Nov 4 20:19:39 2025 GMT Not After : Nov 5 22:19:39 2025 GMT Subject: CN=4C5D95E46B435375C513325DDD96CE4882EA4E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:be:d8:b7:cf:27:21:b0:3b:02:72:e8:7e: dd:76:3d:6f:f5:be:cb:35:be:71:0a:10:fd:ee:fa: 19:f6:e2:44:0b:83:b7:60:88:17:5c:81:84:3b:9c: af:d0:00:05:7a:37:88:12:5f:8e:3d:7e:d7:b2:c7: 3e:23:29:82:55:44:c0:33:ad:2d:a1:08:cd:b1:c8: e8:27:b0:f3:02:17:be:81:31:9e:3e:0c:c5:b8:3e: 78:f8:a9:e1:67:1f:ee:9a:22:ed:d9:06:ab:06:e2: 84:af:6f:61:d1:6a:f9:a6:07:48:5f:77:61:c7:83: 9c:d5:b2:09:ab:f0:71:bd:7a:70:ed:aa:fc:00:7e: 87:7e:32:5e:59:bb:fd:ab:eb:bb:fd:1f:98:ab:8d: 94:3f:01:a7:93:03:9c:c8:7f:ed:98:ab:3e:cb:46: 1c:00:98:a2:a5:4a:76:0b:65:40:95:3c:61:d2:6f: 45:05:25:e7:b5:1c:64:70:da:e5:1f:95:7f:de:a3: 72:22:7e:b6:8c:b6:79:c1:10:1a:d6:8c:b9:be:99: 4e:3d:f5:ef:1f:1e:91:01:6a:b7:d2:be:74:46:6e: 60:b0:c6:37:4a:56:3b:86:3c:96:20:10:23:4d:c7: 88:b2:6a:e8:f1:66:cb:0f:86:c7:37:21:2d:ec:06: 49:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5D:95:E4:6B:43:53:75:C5:13:32:5D:DD:96:CE:48:82:EA:4E:62 X509v3 Authority Key Identifier: keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6e:2b:10:6c:70:a8:80:cc:a5:ee:af:47:ae:08:ad:35:1d: 79:7d:df:e8:3f:9a:71:1d:a1:d0:6b:27:95:44:3f:f0:ce:7d: 42:12:7c:de:c9:c7:12:38:90:8e:cf:51:6c:ff:85:c1:e0:5d: 08:3e:06:7f:e5:d5:3f:6f:5a:05:ec:22:b6:ce:2c:3c:bf:25: ac:61:88:fd:bc:42:24:7f:e3:5d:4b:be:4e:45:b2:b5:2b:a4: b9:01:1d:66:20:4a:dc:22:c4:17:81:b3:b1:07:84:54:5b:9e: 03:17:3e:02:11:6e:5d:b3:3f:6c:76:8a:2b:58:7a:b7:3a:cd: 76:bd:32:46:0a:fd:34:00:d7:be:c4:97:15:e7:1d:81:52:69: 83:17:a2:eb:70:58:3c:4f:23:cd:e9:33:8d:50:e7:e1:e1:c9: 90:ba:f4:87:84:4f:71:ac:3e:11:9b:87:a5:8d:56:d6:cb:09: 4c:a7:f3:c9:d3:18:f2:3d:1c:bc:37:8a:8f:8f:ee:b0:f2:d4: 8d:27:f9:fc:c3:7a:f2:30:73:bd:4f:03:f8:45:76:a8:06:48: 1c:e2:6f:c5:90:16:4b:3d:a0:fe:9a:4b:e9:39:31:09:85:69: 71:f3:fb:7d:88:83:b9:37:7d:fe:51:13:1e:21:25:e6:3b:d5: 3e:6f:15:93 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUVCtdFwN69auFovaYNyLqARbiIpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdENjJBNTVEMDlBMEU1NDc5N0E3QkFENUM0MDA0NTRE NTUyOTU0NjAeFw0yNTExMDQyMDE5MzlaFw0yNTExMDUyMjE5MzlaMDMxMTAvBgNV BAMTKDRDNUQ5NUU0NkI0MzUzNzVDNTEzMzI1REREOTZDRTQ4ODJFQTRFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gL7Yt88nIbA7AnLoft12PW/1 vss1vnEKEP3u+hn24kQLg7dgiBdcgYQ7nK/QAAV6N4gSX449fteyxz4jKYJVRMAz rS2hCM2xyOgnsPMCF76BMZ4+DMW4Pnj4qeFnH+6aIu3ZBqsG4oSvb2HRavmmB0hf d2HHg5zVsgmr8HG9enDtqvwAfod+Ml5Zu/2r67v9H5irjZQ/AaeTA5zIf+2Yqz7L RhwAmKKlSnYLZUCVPGHSb0UFJee1HGRw2uUflX/eo3IifraMtnnBEBrWjLm+mU49 9e8fHpEBarfSvnRGbmCwxjdKVjuGPJYgECNNx4iyaujxZssPhsc3IS3sBkkBAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUTF2V5GtDU3XFEzJd3ZbOSILqTmIwHwYDVR0j BBgwFoAUZ9YqVdCaDlR5enutXEAEVNVSlUYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMi82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNy bDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8vcmVwby5ycGtp LnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdC QUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUH MAuGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMi82N0Q2 MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cG4rEGxwqIDMpe6vR64IrTUdeX3f6D+acR2h0GsnlUQ/8M59QhJ83snHEjiQjs9R bP+FweBdCD4Gf+XVP29aBewits4sPL8lrGGI/bxCJH/jXUu+TkWytSukuQEdZiBK 3CLEF4GzsQeEVFueAxc+AhFuXbM/bHaKK1h6tzrNdr0yRgr9NADXvsSXFecdgVJp gxei63BYPE8jzekzjVDn4eHJkLr0h4RPcaw+EZuHpY1W1ssJTKfzydMY8j0cvDeK j4/usPLUjSf5/MN68jBzvU8D+EV2qAZIHOJvxZAWSz2g/ppL6TkxCYVpcfP7fYiD uTd9/lETHiEl5jvVPm8Vkw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:36:45 2025 by rpki-client