$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft File: 67D62A55D09A0E54797A7BAD5C400454D5529546.mft (raw, json) Hash identifier: 5ujgw1VxekV1wsyxEvqNXZgCN2X/f2dTO3tUMdGYx1U= Subject key identifier: E4:B0:6E:E8:78:A0:DC:4E:6E:A4:9A:0A:12:24:95:56:BC:05:15:D9 Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 Certificate issuer: /CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Certificate serial: 48A2C913B92E99F398CE07E8150CB999BCC89FC5 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft Manifest number: 0272 Signing time: Sun 19 Oct 2025 23:10:44 +0000 Manifest this update: Sun 19 Oct 2025 23:05:44 +0000 Manifest next update: Tue 21 Oct 2025 01:54:44 +0000 Files and hashes: 1: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (hash: 6hK9q77m3cXn1f2v739O4COK8hlFw46UVQfmstfEaGI=) 2: 67D62A55D09A0E54797A7BAD5C400454D5529546.crl (hash: 2pQLE2CSMBO+1aTzLZcTk7tqOd8ZLIeMsRzYzEFeIww=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 22:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a2:c9:13:b9:2e:99:f3:98:ce:07:e8:15:0c:b9:99:bc:c8:9f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Validity Not Before: Oct 19 23:05:44 2025 GMT Not After : Oct 21 01:54:44 2025 GMT Subject: CN=E4B06EE878A0DC4E6EA49A0A12249556BC0515D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:fc:8f:33:4f:16:76:1f:97:a3:5d:ab:fa: af:fe:4a:82:7a:9c:07:7f:c7:9a:fd:a0:12:5c:16: 77:38:1f:16:af:fb:bf:24:d0:c0:77:a8:6e:62:81: 98:9a:74:1a:8b:a1:8a:42:3d:57:45:9e:5b:36:cb: 70:14:92:f5:f1:55:5d:1d:fe:1a:bd:f4:d2:b8:13: 84:30:e2:4a:1a:ab:ee:e2:a0:e0:04:96:ea:21:98: 12:3c:af:ac:df:f5:12:b9:af:85:dc:47:e7:d8:d5: 0b:c4:8b:81:c6:e3:32:b5:19:34:ec:ae:28:2a:d3: a2:62:84:2b:c2:40:16:5a:57:6f:31:4e:ca:76:fe: ec:98:9f:84:0b:e3:c6:16:22:74:37:ce:c4:7f:e4: 90:97:6d:31:e9:ec:b9:1f:28:de:d4:f2:09:89:5b: b4:60:73:29:90:fb:96:1e:5d:1a:03:17:46:56:87: 7e:c5:96:e7:9c:3f:93:9a:a6:27:b9:69:ff:b7:64: 77:bf:76:8e:e1:76:ad:c7:f1:6a:6f:12:51:f1:81: 81:9e:e6:c1:79:69:17:8a:4a:1c:36:12:b0:f6:cc: da:d3:ba:a5:bc:4d:46:10:b9:65:e3:1d:5b:93:5b: 63:e3:a3:38:d1:d5:7f:6b:8d:55:a7:75:c8:b2:0c: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B0:6E:E8:78:A0:DC:4E:6E:A4:9A:0A:12:24:95:56:BC:05:15:D9 X509v3 Authority Key Identifier: keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f7:42:16:51:44:c1:37:37:12:e7:54:7c:95:32:ce:dd:fc: 43:49:ec:50:56:db:c0:61:df:c8:fd:3f:fa:7c:0a:eb:2a:27: ec:57:81:3f:38:96:28:7a:d7:ec:67:c4:a1:c5:e3:d4:7c:5f: c5:0c:82:67:a9:ef:85:54:73:b5:a6:6d:b7:f9:bf:33:0e:f8: ed:61:9d:91:76:3d:d0:6c:ab:78:b0:f9:30:57:53:3c:b9:b8: 36:bc:01:f7:71:83:f4:6a:6f:64:8b:9e:1d:e6:c3:6f:f3:17: 20:a5:4d:7c:f1:9b:8c:47:6e:cc:8e:ab:f4:89:1f:65:a8:c1: 33:fe:fc:d7:99:70:9f:bf:a2:51:6e:ce:8a:02:d5:98:d5:1c: 55:ec:89:73:c5:2b:72:e3:29:1e:66:44:6b:51:3a:ea:c3:47: bb:ba:a3:c3:e4:96:ee:07:91:b4:fe:63:ac:d4:b0:19:1a:7e: cc:ef:3d:ac:16:23:85:8b:94:dd:79:8a:94:bf:26:58:59:e9: e6:d9:8a:4f:d1:48:b6:ee:28:d5:ab:74:43:8b:cc:10:4c:03: 5e:64:be:ef:19:db:ac:8f:8c:60:eb:7d:c4:f4:e8:0b:65:c3: a7:15:8c:1b:2d:44:e2:5a:22:da:06:c4:4b:aa:98:4b:22:9a: 8a:41:28:8b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUSKLJE7kumfOYzgfoFQy5mbzIn8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdENjJBNTVEMDlBMEU1NDc5N0E3QkFENUM0MDA0NTRE NTUyOTU0NjAeFw0yNTEwMTkyMzA1NDRaFw0yNTEwMjEwMTU0NDRaMDMxMTAvBgNV BAMTKEU0QjA2RUU4NzhBMERDNEU2RUE0OUEwQTEyMjQ5NTU2QkMwNTE1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PPyPM08Wdh+Xo12r+q/+SoJ6 nAd/x5r9oBJcFnc4Hxav+78k0MB3qG5igZiadBqLoYpCPVdFnls2y3AUkvXxVV0d /hq99NK4E4Qw4koaq+7ioOAEluohmBI8r6zf9RK5r4XcR+fY1QvEi4HG4zK1GTTs rigq06JihCvCQBZaV28xTsp2/uyYn4QL48YWInQ3zsR/5JCXbTHp7LkfKN7U8gmJ W7RgcymQ+5YeXRoDF0ZWh37FluecP5Oapie5af+3ZHe/do7hdq3H8WpvElHxgYGe 5sF5aReKShw2ErD2zNrTuqW8TUYQuWXjHVuTW2PjozjR1X9rjVWndciyDEkpAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU5LBu6Hig3E5upJoKEiSVVrwFFdkwHwYDVR0j BBgwFoAUZ9YqVdCaDlR5enutXEAEVNVSlUYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMi82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNy bDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8vcmVwby5ycGtp LnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdC QUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUH MAuGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMi82N0Q2 MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA OPdCFlFEwTc3EudUfJUyzt38Q0nsUFbbwGHfyP0/+nwK6yon7FeBPziWKHrX7GfE ocXj1HxfxQyCZ6nvhVRztaZtt/m/Mw747WGdkXY90GyreLD5MFdTPLm4NrwB93GD 9GpvZIueHebDb/MXIKVNfPGbjEduzI6r9IkfZajBM/7815lwn7+iUW7OigLVmNUc VeyJc8UrcuMpHmZEa1E66sNHu7qjw+SW7geRtP5jrNSwGRp+zO89rBYjhYuU3XmK lL8mWFnp5tmKT9FItu4o1at0Q4vMEEwDXmS+7xnbrI+MYOt9xPToC2XDpxWMGy1E 4loi2gbES6qYSyKaikEoiw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:52:13 2025 by rpki-client