$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft File: 5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft (raw, json) Hash identifier: wzNM+dRH8eErs3SkW8nqrF9ktL2Jej0QZdGm0OTi2Tw= Subject key identifier: 25:77:5A:71:C1:EC:C6:F4:99:2B:FC:93:77:E1:CA:47:6E:09:89:2C Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC Certificate issuer: /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC Certificate serial: 355E533A6EA13DC3FAC69F55FCD49AF4801E1AF1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft Manifest number: 0589 Signing time: Mon 21 Jul 2025 21:12:01 +0000 Manifest this update: Mon 21 Jul 2025 21:07:01 +0000 Manifest next update: Wed 23 Jul 2025 10:57:01 +0000 Files and hashes: 1: 5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl (hash: ypRhco9YuwtEfFaocpQRoKb/9aPbI0n3eOEHhrDn4b0=) 2: 323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa (hash: f+NkaHP3OncQ6XYJ/GcRKzWWfLRpAYu7H1F4AiW5/1A=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 02:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5e:53:3a:6e:a1:3d:c3:fa:c6:9f:55:fc:d4:9a:f4:80:1e:1a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC Validity Not Before: Jul 21 21:07:01 2025 GMT Not After : Jul 23 10:57:01 2025 GMT Subject: CN=25775A71C1ECC6F4992BFC9377E1CA476E09892C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:b7:0e:e4:ea:78:0c:6f:e7:af:4c:13:0c: fb:8f:59:0f:07:5e:25:21:82:7e:62:e1:90:41:85: fd:fc:e4:9e:ff:1f:0e:66:24:95:a0:5c:d6:74:ee: 43:00:92:ca:e0:5c:13:5c:68:7e:c4:75:fa:50:61: 4f:c4:bd:51:70:8b:2b:11:82:db:9a:5e:1f:2a:74: fe:d1:a0:15:66:bb:a6:4a:ea:46:71:d1:6f:48:54: b9:ed:5f:d0:23:a3:71:fd:9d:f2:d8:40:8d:d0:7f: 13:01:58:f1:46:43:f4:65:c4:2a:cf:f3:9e:9c:65: f7:e4:fa:da:64:bf:88:81:b3:30:32:01:d9:03:1f: c4:d4:a6:d8:ca:46:e3:b2:2a:ae:9a:d9:57:11:a0: ab:dd:e1:bb:e3:32:63:26:98:7a:27:1e:f3:7d:a9: 29:88:bb:39:55:bb:35:a4:66:d6:a5:8f:15:0a:41: 5b:6d:f8:f8:a6:b7:9e:e9:a4:8e:44:2b:bd:4e:32: ea:48:8f:82:88:62:98:44:e1:46:d3:38:b7:87:b7: 31:71:f6:fe:c6:2a:db:96:3a:62:38:81:d1:4c:67: b0:eb:ba:02:56:5c:a2:69:39:ce:de:28:6c:ac:18: 7f:09:4f:3d:32:16:33:5b:ac:ad:50:83:f4:c5:7b: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:77:5A:71:C1:EC:C6:F4:99:2B:FC:93:77:E1:CA:47:6E:09:89:2C X509v3 Authority Key Identifier: keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:da:8d:ee:49:dc:cb:b3:ac:eb:cd:35:df:9f:56:4f:2e:ec: 37:e6:27:1a:eb:95:56:88:f4:54:8b:8c:05:66:96:26:1f:bf: 14:50:a8:30:7a:c6:a9:c3:94:2a:42:47:8c:80:2f:62:e8:ff: 71:52:66:6f:4e:2e:b3:c2:78:42:3a:56:3b:fb:84:fc:92:ea: 9b:de:a8:3a:a1:39:22:b0:62:52:ba:3f:fc:19:3c:28:1a:0d: 73:36:f0:59:9f:0b:b6:c9:10:5d:83:38:96:00:cf:60:b4:bc: f1:53:bf:9f:38:0b:6d:d1:91:1e:a6:44:cd:d1:e8:be:d9:0d: 93:0e:70:95:e6:63:7f:ed:03:76:3f:02:31:16:97:9a:d6:ee: 93:98:ef:36:b2:eb:26:73:de:a1:36:68:dd:30:8b:95:e6:85: 38:38:34:1a:c8:74:e9:49:06:86:51:55:a6:59:81:16:2b:d5: 39:2b:05:6c:c4:30:6c:a3:39:32:54:32:f0:71:de:48:d3:14: 01:76:59:18:72:af:5d:e0:47:e1:5b:c6:e3:a9:2c:0a:b1:be: 49:57:c8:7b:c6:68:e9:2d:63:3e:a9:5e:e1:f6:6d:90:2a:35: 9b:0d:07:ed:31:c8:c2:5f:03:9b:7e:f0:dd:ca:9e:7c:f0:50: 47:40:b1:a1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUNV5TOm6hPcP6xp9V/NSa9IAeGvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE5NkI4OTg1QThFNjJGQjEwOTQyNDhEM0I1QjRBM0JC MjQzNjlFQzAeFw0yNTA3MjEyMTA3MDFaFw0yNTA3MjMxMDU3MDFaMDMxMTAvBgNV BAMTKDI1Nzc1QTcxQzFFQ0M2RjQ5OTJCRkM5Mzc3RTFDQTQ3NkUwOTg5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN67cO5Op4DG/nr0wTDPuPWQ8H XiUhgn5i4ZBBhf385J7/Hw5mJJWgXNZ07kMAksrgXBNcaH7EdfpQYU/EvVFwiysR gtuaXh8qdP7RoBVmu6ZK6kZx0W9IVLntX9Ajo3H9nfLYQI3QfxMBWPFGQ/RlxCrP 856cZffk+tpkv4iBszAyAdkDH8TUptjKRuOyKq6a2VcRoKvd4bvjMmMmmHonHvN9 qSmIuzlVuzWkZtaljxUKQVtt+Pimt57ppI5EK71OMupIj4KIYphE4UbTOLeHtzFx 9v7GKtuWOmI4gdFMZ7DrugJWXKJpOc7eKGysGH8JTz0yFjNbrK1Qg/TFe1PHAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUJXdaccHsxvSZK/yTd+HKR24JiSwwHwYDVR0j BBgwFoAUWpa4mFqOYvsQlCSNO1tKO7JDaewwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvNS81QTk2Qjg5ODVBOEU2MkZCMTA5NDI0OEQzQjVCNEEzQkIy NDM2OUVDLmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzIvNUE5NkI4 OTg1QThFNjJGQjEwOTQyNDhEM0I1QjRBM0JCMjQzNjlFQy5jZXIweQYIKwYBBQUH AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl cG8vcGFyYWRveG5ldHdvcmtzLzUvNUE5NkI4OTg1QThFNjJGQjEwOTQyNDhEM0I1 QjRBM0JCMjQzNjlFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBALXaje5J3MuzrOvNNd+fVk8u7DfmJxrr lVaI9FSLjAVmliYfvxRQqDB6xqnDlCpCR4yAL2Lo/3FSZm9OLrPCeEI6Vjv7hPyS 6pveqDqhOSKwYlK6P/wZPCgaDXM28FmfC7bJEF2DOJYAz2C0vPFTv584C23RkR6m RM3R6L7ZDZMOcJXmY3/tA3Y/AjEWl5rW7pOY7zay6yZz3qE2aN0wi5XmhTg4NBrI dOlJBoZRVaZZgRYr1TkrBWzEMGyjOTJUMvBx3kjTFAF2WRhyr13gR+FbxuOpLAqx vklXyHvGaOktYz6pXuH2bZAqNZsNB+0xyMJfA5t+8N3KnnzwUEdAsaE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:30:53 2025 by rpki-client