$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json) Hash identifier: 3xY8GMVSs6ouZ1vieFiLxTpKQuHEcTDWdyxU4xYKmkY= Subject key identifier: 9E:B0:1A:12:FF:23:AB:FF:34:C5:D5:EC:4E:57:34:0B:8E:FC:10:80 Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Certificate serial: 2D4822146ABF1F0C3CDBDEE3F5724155CEC312A7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft Manifest number: 0554 Signing time: Tue 29 Apr 2025 12:59:17 +0000 Manifest this update: Tue 29 Apr 2025 12:54:17 +0000 Manifest next update: Wed 30 Apr 2025 13:08:17 +0000 Files and hashes: 1: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=) 2: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=) 3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: lQTq9RsHgzoOJOpwd5SHYft9LSEuSrbp2RjQHnTR/r8=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 13:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:48:22:14:6a:bf:1f:0c:3c:db:de:e3:f5:72:41:55:ce:c3:12:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Validity Not Before: Apr 29 12:54:17 2025 GMT Not After : Apr 30 13:08:17 2025 GMT Subject: CN=9EB01A12FF23ABFF34C5D5EC4E57340B8EFC1080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:c6:44:52:22:09:99:57:3b:34:d2:2a:57: e5:71:35:aa:0c:7c:2f:4f:6c:ed:1d:a2:3a:23:f3: 46:39:ef:7b:5d:7f:9c:b4:9d:09:f9:f3:1c:43:05: 7a:6a:16:a5:53:2a:b6:fa:94:1b:19:ce:07:d7:9b: dd:0e:38:ec:20:96:f7:7b:65:7f:a7:88:95:ac:90: 4b:3d:f7:bf:72:f9:20:6d:99:11:f5:51:79:ab:11: 39:53:8f:08:96:37:bf:29:bb:48:c8:ec:e3:81:be: d6:7e:5d:0f:90:87:68:dd:97:07:a3:b3:c2:7d:ad: 68:6d:40:48:2b:1e:ea:56:ee:4d:0b:ed:59:f5:12: 0b:b7:1e:49:03:1e:ee:0c:5b:81:ea:53:8f:97:5c: 4d:be:7f:bd:08:2c:20:ef:b3:ce:d1:72:8f:b1:83: 8c:1b:64:ea:48:b4:1b:9d:74:d7:6d:d5:f7:99:31: e0:4d:33:cf:25:2c:df:38:42:3d:7f:1c:43:74:32: 35:6a:2a:0b:07:07:17:5d:09:3f:f9:fe:40:cb:0b: 8a:1e:b6:bd:6f:b6:ab:ff:43:9a:86:ba:3d:cc:d8: 10:db:da:8c:bb:8b:ca:17:8e:13:ea:8f:b7:01:7e: 9f:4f:9b:c1:ec:77:2b:1c:4b:89:72:be:40:5b:6b: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B0:1A:12:FF:23:AB:FF:34:C5:D5:EC:4E:57:34:0B:8E:FC:10:80 X509v3 Authority Key Identifier: keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:86:91:f7:4c:29:b3:39:6b:71:99:49:fd:12:cd:8c:2a:c9: 39:75:5b:74:86:03:8b:61:85:21:6c:d5:eb:4a:fd:8c:cc:61: 43:0f:28:93:e0:c0:fd:47:a5:e1:bc:29:60:15:cf:b3:e7:16: c2:fb:b7:c8:ab:9e:cf:74:22:6a:74:92:29:5f:60:e7:90:a7: 55:09:89:6a:ba:1d:33:bc:81:44:ed:be:ed:06:9e:6f:63:46: b9:4c:3c:a9:16:ff:fd:6c:b4:df:69:c0:fd:c4:18:d4:fa:1b: 95:4e:b8:1e:40:44:51:c6:37:15:f2:6d:8b:90:86:23:b2:0d: 37:e4:28:39:28:76:18:09:61:a3:de:65:16:fd:6c:a9:fb:c7: 53:4f:67:c1:18:28:bc:9e:49:90:12:b3:fd:ab:ea:ea:ba:6b: 69:74:fe:0a:60:bb:0b:99:6a:4b:f3:b4:c1:b5:09:7e:a8:c1: 24:f4:3c:3c:e6:1c:46:6b:43:3a:74:88:23:69:7a:fe:6c:22: b2:f1:89:00:51:aa:94:77:31:10:82:e7:f3:6f:0e:08:c4:89: c7:5d:ce:59:b8:19:0a:28:f3:f0:ae:5f:9c:fd:70:db:36:8b: 7a:a2:ea:ca:05:45:e7:e5:02:e7:23:2e:63:a1:8c:6c:2b:f0: 83:16:3a:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIULUgiFGq/Hww8297j9XJBVc7DEqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex Q0RCMkE1NjAeFw0yNTA0MjkxMjU0MTdaFw0yNTA0MzAxMzA4MTdaMDMxMTAvBgNV BAMTKDlFQjAxQTEyRkYyM0FCRkYzNEM1RDVFQzRFNTczNDBCOEVGQzEwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkcZEUiIJmVc7NNIqV+VxNaoM fC9PbO0dojoj80Y573tdf5y0nQn58xxDBXpqFqVTKrb6lBsZzgfXm90OOOwglvd7 ZX+niJWskEs9979y+SBtmRH1UXmrETlTjwiWN78pu0jI7OOBvtZ+XQ+Qh2jdlwej s8J9rWhtQEgrHupW7k0L7Vn1Egu3HkkDHu4MW4HqU4+XXE2+f70ILCDvs87Rco+x g4wbZOpItBuddNdt1feZMeBNM88lLN84Qj1/HEN0MjVqKgsHBxddCT/5/kDLC4oe tr1vtqv/Q5qGuj3M2BDb2oy7i8oXjhPqj7cBfp9Pm8HsdyscS4lyvkBba31vAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUnrAaEv8jq/80xdXsTlc0C478EIAwHwYDVR0j BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5 RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIweQYIKwYBBQUH AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl cG8vcGFyYWRveG5ldHdvcmtzLzEvM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgw QjI4N0ExQ0RCMkE1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBALGGkfdMKbM5a3GZSf0SzYwqyTl1W3SG A4thhSFs1etK/YzMYUMPKJPgwP1HpeG8KWAVz7PnFsL7t8irns90Imp0kilfYOeQ p1UJiWq6HTO8gUTtvu0Gnm9jRrlMPKkW//1stN9pwP3EGNT6G5VOuB5ARFHGNxXy bYuQhiOyDTfkKDkodhgJYaPeZRb9bKn7x1NPZ8EYKLyeSZASs/2r6uq6a2l0/gpg uwuZakvztMG1CX6owST0PDzmHEZrQzp0iCNpev5sIrLxiQBRqpR3MRCC5/NvDgjE icddzlm4GQoo8/CuX5z9cNs2i3qi6soFReflAucjLmOhjGwr8IMWOlo= -----END CERTIFICATE-----Generated at Wed Apr 30 05:30:01 2025 by rpki-client