$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json) Hash identifier: JtXRs2TmXagbRZ1VekQUqb7aAFonb6y9J6N6jb6oU4A= Subject key identifier: 0D:49:54:3C:29:0B:4E:18:84:D9:AD:9A:08:2C:49:F8:E3:C8:28:9A Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Certificate serial: 50F70EB172731DD25C1E260A8E89CF0574AB45B0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft Manifest number: 0541 Signing time: Wed 16 Apr 2025 13:39:31 +0000 Manifest this update: Wed 16 Apr 2025 13:34:31 +0000 Manifest next update: Thu 17 Apr 2025 15:58:31 +0000 Files and hashes: 1: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: UlyWAloGsvfF9GS6zH+OeS3UyKJAtqVUXO/JvYZhgLQ=) 2: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=) 3: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=) Validation: OK Signature path: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 13:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f7:0e:b1:72:73:1d:d2:5c:1e:26:0a:8e:89:cf:05:74:ab:45:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Validity Not Before: Apr 16 13:34:31 2025 GMT Not After : Apr 17 15:58:31 2025 GMT Subject: CN=0D49543C290B4E1884D9AD9A082C49F8E3C8289A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:04:90:b3:37:83:e1:29:23:3d:31:93:fc: d3:c9:1c:26:91:6a:af:76:70:e7:d8:8e:1b:17:25: 3f:a7:a4:4c:93:2c:40:cd:47:fb:0b:30:ff:74:a6: 39:6c:85:4d:4e:da:69:ae:8f:2c:4f:76:3f:5e:10: e2:08:f9:cc:34:e5:b9:3b:15:81:2a:d5:0f:b9:c1: 81:1b:ba:5a:d7:9a:54:5b:b0:0c:40:ad:e4:bf:79: 49:66:3a:b7:a8:76:3a:1c:67:de:09:61:28:36:e5: 6d:6c:8c:f7:ce:1c:4d:07:d1:bf:e6:00:e3:a5:66: 51:dc:2e:3d:d3:a4:1b:54:e4:e3:6a:f8:9c:4a:30: e0:a1:af:16:2f:47:00:46:7a:24:99:e6:13:7b:06: 16:cb:b4:3b:83:e2:75:43:f3:9f:01:c2:0b:3f:73: 63:1f:b2:c1:a2:0b:d3:c4:ea:26:4a:77:50:8d:a7: 24:a2:d2:60:d6:9b:59:38:80:8a:b5:86:ee:88:b9: 52:86:7b:4e:98:e7:ce:5f:95:7e:37:88:99:6c:03: f7:9e:25:14:a7:a2:89:28:05:f4:f1:00:b8:5a:df: 9d:a2:e5:f5:cc:98:3d:ea:96:81:f5:25:be:4b:bf: a7:0e:23:cf:26:e3:44:c3:68:bc:a3:3f:24:f3:9f: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:49:54:3C:29:0B:4E:18:84:D9:AD:9A:08:2C:49:F8:E3:C8:28:9A X509v3 Authority Key Identifier: keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer Subject Information Access: Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d5:a4:39:b4:f6:53:70:94:6d:1c:90:39:60:27:ec:9c:8a: 02:6f:d9:ea:2b:7c:3a:ed:7b:6a:fd:de:bc:88:c8:f9:43:14: a3:f5:22:8b:14:79:54:84:7e:56:a0:59:84:12:0d:3a:82:24: 71:21:b8:2a:10:0e:55:2b:06:fb:bd:cc:9b:5f:e6:c5:84:7f: 82:94:40:b1:06:df:82:48:e3:ea:c5:5b:d5:21:fb:b0:ec:0f: 9e:2c:6e:a0:b7:9f:9c:f7:be:d0:f8:26:bf:ff:32:36:7b:90: 7f:f9:1f:db:0a:9c:21:b6:4a:5c:00:e6:97:fd:48:d5:94:6e: 06:8f:93:bd:1a:81:bb:98:47:d8:5c:2d:cf:9c:b0:3d:0d:d0: c4:dc:2c:69:0c:f8:9e:1f:6e:98:3b:86:54:4b:76:e8:3c:00: d1:27:ee:8d:ce:93:92:c6:85:ab:bb:cc:ad:1b:7a:93:25:53: 74:df:bb:c2:d2:3f:fc:06:3a:65:31:e4:49:6b:f8:fa:19:0b: d0:2b:9a:72:a0:1b:ba:ec:c4:38:ec:36:66:4e:3d:d2:1e:45: 54:30:1a:c9:5b:7f:fe:8f:d8:fa:e7:1b:cc:a1:8f:05:8e:ea: e6:de:53:b8:e4:40:1c:83:19:7c:93:62:2b:11:18:48:c0:90: b0:dc:95:ab -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUUPcOsXJzHdJcHiYKjonPBXSrRbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex Q0RCMkE1NjAeFw0yNTA0MTYxMzM0MzFaFw0yNTA0MTcxNTU4MzFaMDMxMTAvBgNV BAMTKDBENDk1NDNDMjkwQjRFMTg4NEQ5QUQ5QTA4MkM0OUY4RTNDODI4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZgSQszeD4SkjPTGT/NPJHCaR aq92cOfYjhsXJT+npEyTLEDNR/sLMP90pjlshU1O2mmujyxPdj9eEOII+cw05bk7 FYEq1Q+5wYEbulrXmlRbsAxAreS/eUlmOreodjocZ94JYSg25W1sjPfOHE0H0b/m AOOlZlHcLj3TpBtU5ONq+JxKMOChrxYvRwBGeiSZ5hN7BhbLtDuD4nVD858Bwgs/ c2MfssGiC9PE6iZKd1CNpySi0mDWm1k4gIq1hu6IuVKGe06Y585flX43iJlsA/ee JRSnookoBfTxALha352i5fXMmD3qloH1Jb5Lv6cOI88m40TDaLyjPyTznxcZAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUDUlUPCkLThiE2a2aCCxJ+OPIKJowHwYDVR0j BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5 RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIweQYIKwYBBQUH AQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3Jl cG8vcGFyYWRveG5ldHdvcmtzLzEvM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgw QjI4N0ExQ0RCMkE1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIfVpDm09lNwlG0ckDlgJ+ycigJv2eor fDrte2r93ryIyPlDFKP1IosUeVSEflagWYQSDTqCJHEhuCoQDlUrBvu9zJtf5sWE f4KUQLEG34JI4+rFW9Uh+7DsD54sbqC3n5z3vtD4Jr//MjZ7kH/5H9sKnCG2SlwA 5pf9SNWUbgaPk70agbuYR9hcLc+csD0N0MTcLGkM+J4fbpg7hlRLdug8ANEn7o3O k5LGhau7zK0bepMlU3Tfu8LSP/wGOmUx5Elr+PoZC9ArmnKgG7rsxDjsNmZOPdIe RVQwGslbf/6P2PrnG8yhjwWO6ubeU7jkQByDGXyTYisRGEjAkLDclas= -----END CERTIFICATE-----Generated at Thu Apr 17 01:05:40 2025 by rpki-client