$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft File: 67D62A55D09A0E54797A7BAD5C400454D5529546.mft (raw, json) Hash identifier: RHSRaqpC22czr7y3IjD9HynE0tDCwq3A46tllyz6QXo= Subject key identifier: 0B:1B:DA:76:53:78:76:C5:F5:47:89:EC:F6:CD:10:1B:B9:0E:C3:4F Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 Certificate issuer: /CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Certificate serial: 6B26ECC170712A842668714ACE40DED9EC93DB26 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft Manifest number: 023B Signing time: Mon 08 Sep 2025 14:04:21 +0000 Manifest this update: Mon 08 Sep 2025 13:59:21 +0000 Manifest next update: Tue 09 Sep 2025 15:33:21 +0000 Files and hashes: 1: 67D62A55D09A0E54797A7BAD5C400454D5529546.crl (hash: IbNeYSDUZLUbQZsR0GRxP3bBByTFU0wvKkSse7whbK8=) 2: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (hash: 6hK9q77m3cXn1f2v739O4COK8hlFw46UVQfmstfEaGI=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 11:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:26:ec:c1:70:71:2a:84:26:68:71:4a:ce:40:de:d9:ec:93:db:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Validity Not Before: Sep 8 13:59:21 2025 GMT Not After : Sep 9 15:33:21 2025 GMT Subject: CN=0B1BDA76537876C5F54789ECF6CD101BB90EC34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:e7:ca:e0:93:f1:1f:b2:0a:7c:4e:0a:e5: 07:1e:d4:25:4d:d0:88:8d:ad:72:fb:6e:15:9c:5c: 19:3d:6f:18:17:7e:29:36:60:be:10:fd:ca:5a:e7: 88:e7:9d:55:0f:18:fc:b4:d3:dd:c3:6e:01:55:bc: a5:31:02:d1:15:28:81:76:4d:a7:75:41:66:65:5d: ef:f4:ef:bc:b0:c7:34:c8:e2:7c:e8:3e:25:ad:27: 72:42:b5:95:6f:f5:04:bc:f2:c1:bb:15:9e:f1:a1: 08:0f:2d:55:34:f8:c8:54:fa:fe:a5:26:66:65:99: 11:54:06:8e:9b:8a:8b:81:77:58:33:c1:db:70:52: e7:4a:91:d3:b1:90:b2:1a:4d:a8:db:b0:40:47:09: 61:98:e2:ca:a3:e2:75:b0:8a:9d:b0:76:94:b9:41: c1:40:7f:19:7b:47:6e:2a:e7:32:6b:c7:2c:44:15: d4:17:04:7d:21:49:e6:d2:52:52:08:20:da:f9:16: ab:15:c7:a0:ab:9f:8a:f7:ed:d9:76:82:10:3b:42: 08:20:67:d0:74:f1:4f:45:b5:5f:01:8c:a1:99:85: 48:b2:da:f4:76:00:33:6a:47:0e:5e:d9:f5:a5:ee: 34:86:9e:99:4b:ff:4e:55:dc:f6:69:17:68:3c:68: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1B:DA:76:53:78:76:C5:F5:47:89:EC:F6:CD:10:1B:B9:0E:C3:4F X509v3 Authority Key Identifier: keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:65:fa:98:df:42:3e:a2:ba:a2:1f:e6:26:8b:73:05:df:17: 21:e7:55:86:8a:01:e1:de:46:78:c2:82:78:a5:a7:eb:60:7c: fd:04:a5:94:36:50:c3:91:95:17:d3:2e:8e:29:1a:43:fe:13: 38:b6:bf:b3:0e:a3:f2:4a:85:87:97:75:01:6a:3c:51:48:7b: d9:21:9f:1e:78:11:a5:49:e8:55:f4:a3:dc:22:5d:71:7e:ef: 0d:71:60:96:51:f0:8d:0b:b4:77:83:c1:13:db:c5:ca:37:a1: 49:bb:60:41:86:27:c0:03:c5:d9:14:70:d6:ce:3b:14:2c:d4: 4d:04:dd:3f:ef:4f:a7:27:fe:b1:2f:b9:ed:fb:80:32:9d:10: 5a:23:fa:45:48:84:8c:4e:14:0e:9a:f5:53:e4:a6:16:06:a5: b6:40:77:76:8c:c9:a6:22:5f:aa:93:3c:80:1c:30:a0:4a:04: 42:32:8c:86:0c:49:41:06:13:6f:3f:cc:99:19:f6:dc:45:40: 22:a9:6a:9a:fc:42:b6:51:68:51:c7:3d:98:4b:31:73:9d:bb: 6c:41:b3:27:f1:a8:72:2f:86:61:9a:f6:75:0e:4a:b0:95:23: 4f:ba:0b:ad:9f:53:c9:d1:dd:32:57:f0:7e:4d:bf:5f:83:2d: e0:6d:ca:e5 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUaybswXBxKoQmaHFKzkDe2eyT2yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdENjJBNTVEMDlBMEU1NDc5N0E3QkFENUM0MDA0NTRE NTUyOTU0NjAeFw0yNTA5MDgxMzU5MjFaFw0yNTA5MDkxNTMzMjFaMDMxMTAvBgNV BAMTKDBCMUJEQTc2NTM3ODc2QzVGNTQ3ODlFQ0Y2Q0QxMDFCQjkwRUMzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2z+fK4JPxH7IKfE4K5Qce1CVN 0IiNrXL7bhWcXBk9bxgXfik2YL4Q/cpa54jnnVUPGPy0093DbgFVvKUxAtEVKIF2 Tad1QWZlXe/077ywxzTI4nzoPiWtJ3JCtZVv9QS88sG7FZ7xoQgPLVU0+MhU+v6l JmZlmRFUBo6biouBd1gzwdtwUudKkdOxkLIaTajbsEBHCWGY4sqj4nWwip2wdpS5 QcFAfxl7R24q5zJrxyxEFdQXBH0hSebSUlIIINr5FqsVx6Crn4r37dl2ghA7Qggg Z9B08U9FtV8BjKGZhUiy2vR2ADNqRw5e2fWl7jSGnplL/05V3PZpF2g8aGGFAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUCxvadlN4dsX1R4ns9s0QG7kOw08wHwYDVR0j BBgwFoAUZ9YqVdCaDlR5enutXEAEVNVSlUYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMi82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNy bDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8vcmVwby5ycGtp LnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdC QUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUH MAuGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMi82N0Q2 MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA IWX6mN9CPqK6oh/mJotzBd8XIedVhooB4d5GeMKCeKWn62B8/QSllDZQw5GVF9Mu jikaQ/4TOLa/sw6j8kqFh5d1AWo8UUh72SGfHngRpUnoVfSj3CJdcX7vDXFgllHw jQu0d4PBE9vFyjehSbtgQYYnwAPF2RRw1s47FCzUTQTdP+9Ppyf+sS+57fuAMp0Q WiP6RUiEjE4UDpr1U+SmFgaltkB3dozJpiJfqpM8gBwwoEoEQjKMhgxJQQYTbz/M mRn23EVAIqlqmvxCtlFoUcc9mEsxc527bEGzJ/Goci+GYZr2dQ5KsJUjT7oLrZ9T ydHdMlfwfk2/X4Mt4G3K5Q== -----END CERTIFICATE-----Generated at Tue Sep 9 00:17:37 2025 by rpki-client