$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json) Hash identifier: F8vHIGE7Pb2TJpMCVk1nZsTbzjZxdx0xeWQVNZcG+UQ= Subject key identifier: F2:89:10:A7:BA:B0:73:27:31:A0:48:A5:DB:74:52:95:72:31:B5:2F Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Certificate serial: 4C46814325D77B656B538F7E2498B5BB130DD8B6 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft Manifest number: 0552 Signing time: Mon 28 Apr 2025 04:08:01 +0000 Manifest this update: Mon 28 Apr 2025 04:03:01 +0000 Manifest next update: Tue 29 Apr 2025 04:33:01 +0000 Files and hashes: 1: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=) 2: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=) 3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: n3zrGoFGf9zH9DDD+xMgkXniVfToovfvFDib7JanNMU=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:46:81:43:25:d7:7b:65:6b:53:8f:7e:24:98:b5:bb:13:0d:d8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Validity Not Before: Apr 28 04:03:01 2025 GMT Not After : Apr 29 04:33:01 2025 GMT Subject: CN=F28910A7BAB0732731A048A5DB7452957231B52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:e4:e4:c7:d8:01:2b:a5:39:5e:7b:e1:92: 91:18:fd:40:a7:4a:73:34:0d:16:c6:2e:a8:09:53: d3:99:1c:de:a0:84:c9:b6:3c:57:ec:e5:7b:3a:c4: 05:60:63:9f:cb:27:6c:03:86:bf:80:35:58:57:f0: c8:fc:89:8a:b6:e7:35:6f:fd:fd:96:0c:27:6c:86: 61:c6:34:3f:99:85:25:36:1c:90:99:c6:57:d6:15: 37:6f:55:5e:0e:99:b5:b5:71:14:ed:ac:95:c8:c1: 45:70:9c:87:e7:a9:1b:fa:ca:72:c5:31:13:91:10: 49:cb:44:3c:f9:a6:b8:d1:d2:78:94:2f:12:20:76: c6:22:7a:1a:fa:0a:dc:8a:a0:e2:2e:f6:fc:e8:f1: a5:ea:95:97:1f:3b:40:5c:37:74:a4:62:df:32:69: 64:00:6c:c5:12:4e:0f:cb:5e:68:08:de:15:91:9d: 81:e1:08:12:43:76:1b:75:94:73:da:fe:b1:2b:97: 83:8b:ff:ba:11:66:3e:66:64:35:1d:28:b8:50:86: 47:59:32:70:71:0d:28:ad:8c:b0:27:72:2c:5c:51: 3b:dc:f5:c9:41:8b:14:b2:f0:eb:71:81:0a:f8:3d: ba:a0:a4:f5:22:3a:6a:16:ec:fa:05:f6:d7:d3:7b: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:89:10:A7:BA:B0:73:27:31:A0:48:A5:DB:74:52:95:72:31:B5:2F X509v3 Authority Key Identifier: keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2e:04:fc:21:9b:d2:40:81:43:95:90:21:14:f8:7d:1b:bd: b8:0a:65:ee:e1:8a:bc:de:2c:39:84:e0:02:4b:df:48:f5:3e: 98:fc:a9:4d:a5:0d:6e:85:11:47:34:9b:81:b5:1f:62:d3:e9: 27:64:b5:22:09:fa:06:99:25:2d:df:ac:47:56:0c:7f:6d:d5: d5:8e:c5:29:49:28:51:13:e5:e5:5a:89:c2:0a:ca:b4:a2:48: 05:e6:a5:a5:56:84:97:53:1d:af:d2:41:36:cb:9e:92:26:0c: 13:78:4f:f5:f3:60:52:69:75:6f:60:33:e2:cc:2f:c4:71:65: 01:32:86:fe:8f:72:18:bd:da:63:e3:ff:b2:65:2b:bc:e2:65: 58:a0:53:ff:54:4d:8e:7f:0b:a7:21:d4:a0:d9:af:df:19:d7: 78:a4:d3:53:d2:da:67:b5:03:69:0c:8b:e1:e4:d9:18:70:44: d4:59:0e:83:3d:01:a4:da:89:fa:36:56:3c:1c:a6:21:34:e1: e7:d2:d8:02:c1:d1:40:75:43:0c:76:f2:ff:88:36:0a:3d:06: a6:71:9d:6e:b4:3d:9f:36:57:75:d2:fb:0b:36:d7:e5:bc:00: b9:19:b8:61:3a:35:d8:ea:e8:a7:e8:f6:22:8c:eb:0c:7d:6e: 26:9d:19:ad -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTEaBQyXXe2VrU49+JJi1uxMN2LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex Q0RCMkE1NjAeFw0yNTA0MjgwNDAzMDFaFw0yNTA0MjkwNDMzMDFaMDMxMTAvBgNV BAMTKEYyODkxMEE3QkFCMDczMjczMUEwNDhBNURCNzQ1Mjk1NzIzMUI1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTBuTkx9gBK6U5XnvhkpEY/UCn SnM0DRbGLqgJU9OZHN6ghMm2PFfs5Xs6xAVgY5/LJ2wDhr+ANVhX8Mj8iYq25zVv /f2WDCdshmHGND+ZhSU2HJCZxlfWFTdvVV4OmbW1cRTtrJXIwUVwnIfnqRv6ynLF MROREEnLRDz5prjR0niULxIgdsYiehr6CtyKoOIu9vzo8aXqlZcfO0BcN3SkYt8y aWQAbMUSTg/LXmgI3hWRnYHhCBJDdht1lHPa/rErl4OL/7oRZj5mZDUdKLhQhkdZ MnBxDSitjLAncixcUTvc9clBixSy8OtxgQr4PbqgpPUiOmoW7PoF9tfTexvbAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU8okQp7qwcycxoEil23RSlXIxtS8wHwYDVR0j BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5 RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIweQYIKwYBBQUH AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl cG8vcGFyYWRveG5ldHdvcmtzLzEvM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgw QjI4N0ExQ0RCMkE1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIwuBPwhm9JAgUOVkCEU+H0bvbgKZe7h irzeLDmE4AJL30j1Ppj8qU2lDW6FEUc0m4G1H2LT6SdktSIJ+gaZJS3frEdWDH9t 1dWOxSlJKFET5eVaicIKyrSiSAXmpaVWhJdTHa/SQTbLnpImDBN4T/XzYFJpdW9g M+LML8RxZQEyhv6Pchi92mPj/7JlK7ziZVigU/9UTY5/C6ch1KDZr98Z13ik01PS 2me1A2kMi+Hk2RhwRNRZDoM9AaTaifo2VjwcpiE04efS2ALB0UB1Qwx28v+INgo9 BqZxnW60PZ82V3XS+ws21+W8ALkZuGE6Ndjq6Kfo9iKM6wx9biadGa0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:19:25 2025 by rpki-client