$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft File: 3F0AC25D352C83DA8307594B98ED061BE8489682.mft (raw, json) Hash identifier: 4q1S+ThToABaNdf10UPPbxoYRM/vC5rNEMYEZsmeYUI= Subject key identifier: AC:4C:31:CD:7F:77:20:82:3F:5E:49:FA:B2:F5:C5:57:D2:0F:9B:C4 Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82 Certificate issuer: /CN=3F0AC25D352C83DA8307594B98ED061BE8489682 Certificate serial: 27488AB40E844C86FEE42C35A8806E29DB2C4A4C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer Subject info access: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft Manifest number: 0231 Signing time: Sun 08 Jun 2025 05:58:18 +0000 Manifest this update: Sun 08 Jun 2025 05:53:18 +0000 Manifest next update: Mon 09 Jun 2025 09:10:18 +0000 Files and hashes: 1: 326130613a363034303a326430313a3a2f34382d3438203d3e20323030323536.roa (hash: 3Yj3cJWHzE43v7j3tZWdnq7VC8O5yKRSq/WBiULCaDU=) 2: 3F0AC25D352C83DA8307594B98ED061BE8489682.crl (hash: L9ZUrTaV02tcGNbyJ1jX6uDzEyenP2yP9bLX1E4p1jc=) 3: 326130613a363034303a326430303a3a2f34382d3438203d3e20313436393530.roa (hash: Hy96S+Jqp8+wRgD65vRRJJe9N00EetqmV4dkR2Cma5E=) 4: 326130613a363034303a326431303a3a2f34342d3435203d3e20313436393530.roa (hash: /WXlA8QtcA0qhKEPCkyPWeZs5YPUSM5lTr1fYRiqieQ=) 5: 326130613a363034303a326430323a3a2f34382d3438203d3e20313436393530.roa (hash: 6MRMvQXCgJHPOIeMb5qxKQbTPD4Yi8D+afsLoI33KWU=) Validation: OK Signature path: rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 02:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:48:8a:b4:0e:84:4c:86:fe:e4:2c:35:a8:80:6e:29:db:2c:4a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682 Validity Not Before: Jun 8 05:53:18 2025 GMT Not After : Jun 9 09:10:18 2025 GMT Subject: CN=AC4C31CD7F7720823F5E49FAB2F5C557D20F9BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:ca:1b:d3:51:57:ae:7b:3c:1d:31:5b:21: a5:2d:ca:99:d1:db:66:99:13:54:e5:f1:e3:ae:bf: 47:24:83:2b:6c:f3:6c:81:a8:ee:bc:00:9d:1e:03: cb:eb:1c:c5:bf:12:26:73:c3:4c:82:3c:2b:fe:ae: 61:ac:a9:f1:e2:8d:eb:3c:9d:74:83:41:2a:e5:f2: b7:1f:38:92:04:f6:4e:7d:ff:60:9d:0f:fb:20:f8: 8c:02:5c:01:48:9a:7e:51:c8:27:fb:47:72:1b:06: bb:b5:b6:d8:2f:37:81:7f:42:c5:2c:a5:f3:4c:3f: b6:28:52:c7:95:37:5a:e3:2e:f2:e7:cb:4f:ba:6a: 36:c3:63:be:47:8f:5d:53:d7:36:6e:e0:06:b0:78: 29:b3:17:26:c3:fa:85:87:49:09:26:8f:83:2c:02: 8d:7f:81:09:9f:5b:85:4d:b2:15:b6:b7:7d:c8:47: ac:02:ff:e6:db:8d:2d:e2:b0:21:1f:9d:d7:89:56: 3d:c1:ba:00:40:dc:15:b5:93:ff:7d:4a:58:66:b7: 79:cc:53:c3:f0:95:f9:a4:fb:c3:09:7e:9d:d6:37: 10:cc:58:49:18:ac:24:2a:bd:96:fd:3c:d4:2d:2e: d5:c1:78:6b:8b:54:11:50:98:42:04:41:97:33:56: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4C:31:CD:7F:77:20:82:3F:5E:49:FA:B2:F5:C5:57:D2:0F:9B:C4 X509v3 Authority Key Identifier: keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer Subject Information Access: Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5c:b2:4f:2d:19:e8:ca:6f:9e:06:ad:5d:9e:d8:fe:2f:80: 02:b4:66:71:bc:b9:9d:ad:c2:e0:bc:b2:a0:55:28:90:df:c0: d5:1b:98:50:73:33:00:e4:a5:d5:6f:c9:79:04:54:a9:e4:f3: 46:6a:bf:ff:a8:f0:23:b6:e7:58:36:bf:05:b2:c9:2d:c1:82: 9c:89:cd:f8:d4:cc:f7:3b:80:ab:1b:87:41:7c:20:dd:22:bd: 6d:e7:2b:91:c8:3a:98:99:e8:c0:0d:8d:61:70:0c:6e:7f:b6: 61:ea:4f:c1:26:77:98:f0:9e:63:ea:0a:9e:22:84:2b:81:3d: 4c:ab:7e:ea:c9:12:b7:cc:38:e4:bd:5a:fd:92:80:8c:41:52: cd:b2:7d:24:24:81:3b:7b:c6:e6:ce:54:f9:a7:2c:77:82:d4: 31:41:08:fa:56:59:25:cc:2e:6f:11:31:50:37:11:0d:66:a8: ea:8a:bf:2f:76:35:a0:4f:ce:6b:8f:2e:22:3d:ae:a6:15:1c: eb:52:03:41:5b:56:97:a0:04:c9:6c:cf:f0:b8:04:d1:9d:12: 76:ca:a1:b5:af:0f:95:dc:3a:f5:8c:03:e7:78:d3:4a:24:be: 14:c1:e1:4b:25:d4:7a:ba:4a:ec:19:b1:29:73:05:0b:b4:39: 5e:f6:b9:63 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUJ0iKtA6ETIb+5Cw1qIBuKdssSkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwQUMyNUQzNTJDODNEQTgzMDc1OTRCOThFRDA2MUJF ODQ4OTY4MjAeFw0yNTA2MDgwNTUzMThaFw0yNTA2MDkwOTEwMThaMDMxMTAvBgNV BAMTKEFDNEMzMUNEN0Y3NzIwODIzRjVFNDlGQUIyRjVDNTU3RDIwRjlCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNMob01FXrns8HTFbIaUtypnR 22aZE1Tl8eOuv0ckgyts82yBqO68AJ0eA8vrHMW/EiZzw0yCPCv+rmGsqfHijes8 nXSDQSrl8rcfOJIE9k59/2CdD/sg+IwCXAFImn5RyCf7R3IbBru1ttgvN4F/QsUs pfNMP7YoUseVN1rjLvLny0+6ajbDY75Hj11T1zZu4AaweCmzFybD+oWHSQkmj4Ms Ao1/gQmfW4VNshW2t33IR6wC/+bbjS3isCEfndeJVj3BugBA3BW1k/99Slhmt3nM U8Pwlfmk+8MJfp3WNxDMWEkYrCQqvZb9PNQtLtXBeGuLVBFQmEIEQZczVlJRAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUrEwxzX93III/Xkn6svXFV9IPm8QwHwYDVR0j BBgwFoAUPwrCXTUsg9qDB1lLmO0GG+hIloIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5LmhhcnV1ZS5uZXQv cmVwby9ZQzMyNTQtUlBLSS8yLzNGMEFDMjVEMzUyQzgzREE4MzA3NTk0Qjk4RUQw NjFCRTg0ODk2ODIuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEFBQcwAoZecnN5 bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8z RjBBQzI1RDM1MkM4M0RBODMwNzU5NEI5OEVEMDYxQkU4NDg5NjgyLmNlcjB+Bggr BgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 LmhhcnV1ZS5uZXQvcmVwby9ZQzMyNTQtUlBLSS8yLzNGMEFDMjVEMzUyQzgzREE4 MzA3NTk0Qjk4RUQwNjFCRTg0ODk2ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbXLJPLRnoym+eBq1d ntj+L4ACtGZxvLmdrcLgvLKgVSiQ38DVG5hQczMA5KXVb8l5BFSp5PNGar//qPAj tudYNr8FssktwYKcic341Mz3O4CrG4dBfCDdIr1t5yuRyDqYmejADY1hcAxuf7Zh 6k/BJneY8J5j6gqeIoQrgT1Mq37qyRK3zDjkvVr9koCMQVLNsn0kJIE7e8bmzlT5 pyx3gtQxQQj6VlklzC5vETFQNxENZqjqir8vdjWgT85rjy4iPa6mFRzrUgNBW1aX oATJbM/wuATRnRJ2yqG1rw+V3Dr1jAPneNNKJL4UweFLJdR6ukrsGbEpcwULtDle 9rlj -----END CERTIFICATE-----Generated at Sun Jun 8 11:06:16 2025 by rpki-client