$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft File: 43FB377824B048048B8756B6C65C599B82AEB5B9.mft (raw, json) Hash identifier: wEv1qspo4EgECjasmIQPdImyl3EE7CeUUKuH+8oL51I= Subject key identifier: 53:69:AE:41:68:F6:8C:93:A5:29:0F:85:10:C4:9F:70:9E:73:F1:7D Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9 Certificate issuer: /CN=43FB377824B048048B8756B6C65C599B82AEB5B9 Certificate serial: 789DF57CBD346C3E3F69367BF12808A2E8278A3E Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft Manifest number: 0257 Signing time: Mon 20 Oct 2025 02:10:44 +0000 Manifest this update: Mon 20 Oct 2025 02:05:44 +0000 Manifest next update: Tue 21 Oct 2025 02:15:44 +0000 Files and hashes: 1: 326131343a3763323a3a2f33322d3438203d3e203531333936.roa (hash: Q4TanDo/03WlMBqXG5NZRk00E+9yiRjEKl9vjFnMALs=) 2: 326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa (hash: lmsU4Ru6WU6LD+Trpra0hPmekL3FYErdA4kEIEpXNJY=) 3: 6F08383FF15292BFB6A427602811D5E225F0853C.cer (hash: DwPyhoPAg32N+V7bitfMVwCIUjikjYCTsp7qjFCQVio=) 4: 43FB377824B048048B8756B6C65C599B82AEB5B9.crl (hash: 3r/bVIJx18gkFEKUkoTFmi+V2vNMUteWJKARO2KcYaE=) 5: 326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (hash: wdy7zhj9prGo6bSgGDkTv3nBiTLVF8B2Xn97a7b8uwM=) 6: 326131343a3763323a3a2f33312d3332203d3e203531333936.roa (hash: BnqGqWCqFbZRAQvqh2fuARYnYagyLSJRBck3hTgawF8=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 22:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9d:f5:7c:bd:34:6c:3e:3f:69:36:7b:f1:28:08:a2:e8:27:8a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9 Validity Not Before: Oct 20 02:05:44 2025 GMT Not After : Oct 21 02:15:44 2025 GMT Subject: CN=5369AE4168F68C93A5290F8510C49F709E73F17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:6a:d8:25:da:02:72:09:77:c9:39:6e:99: 33:31:0d:1a:8e:61:ba:3e:1d:0e:2f:80:fe:aa:14: 00:1f:a7:a5:80:5d:72:f9:18:d8:64:45:d1:0c:2c: bb:aa:97:a0:d4:7b:70:e7:66:f8:cf:3e:ae:4c:ea: 31:d0:79:d5:da:c2:19:a2:74:6f:72:71:44:99:0d: a3:f1:1c:79:87:00:02:5e:5d:11:0d:12:6a:7a:8f: 6b:a7:c5:e0:8a:91:d9:e0:ca:7f:00:84:df:d4:f0: 8d:29:f2:0f:6d:6b:82:46:53:4c:b8:86:45:08:fd: d7:da:f8:1c:2b:c5:ae:e7:85:70:9c:46:b3:3f:8e: c4:ce:84:4c:be:05:eb:d7:60:5d:3a:b8:b3:54:63: 2f:76:02:97:f1:ab:fc:7f:55:28:9f:65:93:cf:c9: ea:88:8c:91:35:44:01:df:eb:4c:96:b5:58:f3:fc: b0:59:ee:c0:ad:8e:9e:e1:7c:0e:6f:a9:20:33:39: 9c:97:8a:b0:39:11:b1:6f:30:18:8e:6b:c5:e8:df: 48:84:cf:ee:35:5f:6e:25:a9:0c:7e:39:80:68:39: 76:10:a4:23:9b:98:af:fe:6f:63:c3:7f:15:aa:82: a4:75:d8:86:5d:7b:e7:4e:73:41:81:b1:14:d2:1a: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:69:AE:41:68:F6:8C:93:A5:29:0F:85:10:C4:9F:70:9E:73:F1:7D X509v3 Authority Key Identifier: keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:98:d9:5c:a5:ce:7a:a7:d2:73:0a:e7:c6:26:55:8a:e1:21: 48:87:95:fa:72:f7:69:97:c4:9f:c3:20:1c:52:a2:d0:84:1d: 42:b9:1d:3e:f9:18:a5:c1:21:a8:fa:f7:0b:da:c7:9b:1d:0a: 4e:dc:36:8c:8b:e7:95:2a:c8:85:91:98:c8:df:a8:75:54:84: b8:28:4a:f8:17:f0:fc:a1:0e:d4:e3:25:0b:3e:4d:3d:db:60: 22:9c:b2:7f:72:7f:c6:3a:26:5d:b2:ea:2c:d4:60:36:53:ef: c7:f8:b1:e9:1e:24:70:32:a2:df:20:2b:1a:7f:8e:69:70:35: 03:3d:ca:23:d5:d1:c0:8c:af:e2:a7:a2:59:fc:41:ba:e2:43: e9:a0:27:15:51:a7:0b:74:b8:7f:b3:26:db:c0:4b:02:1a:e2: e6:aa:f3:86:38:4f:27:53:7f:b8:f4:25:aa:c3:6f:c9:2c:9a: bc:68:6d:19:5a:6a:3e:d2:82:4f:4d:27:2f:97:4a:67:ed:47: d1:cb:5d:55:38:ad:db:75:51:3b:5f:ab:62:ad:b1:05:39:07: 7d:e7:af:3d:c0:06:11:d2:9c:e8:d2:0b:a0:24:49:9a:4e:74: ac:46:1f:4f:62:a6:4a:39:01:32:97:b1:d8:37:53:fa:4c:2d: e1:99:a4:23 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeJ31fL00bD4/aTZ78SgIougnij4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGQjM3NzgyNEIwNDgwNDhCODc1NkI2QzY1QzU5OUI4 MkFFQjVCOTAeFw0yNTEwMjAwMjA1NDRaFw0yNTEwMjEwMjE1NDRaMDMxMTAvBgNV BAMTKDUzNjlBRTQxNjhGNjhDOTNBNTI5MEY4NTEwQzQ5RjcwOUU3M0YxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhGrYJdoCcgl3yTlumTMxDRqO Ybo+HQ4vgP6qFAAfp6WAXXL5GNhkRdEMLLuql6DUe3DnZvjPPq5M6jHQedXawhmi dG9ycUSZDaPxHHmHAAJeXRENEmp6j2unxeCKkdngyn8AhN/U8I0p8g9ta4JGU0y4 hkUI/dfa+Bwrxa7nhXCcRrM/jsTOhEy+BevXYF06uLNUYy92Apfxq/x/VSifZZPP yeqIjJE1RAHf60yWtVjz/LBZ7sCtjp7hfA5vqSAzOZyXirA5EbFvMBiOa8Xo30iE z+41X24lqQx+OYBoOXYQpCObmK/+b2PDfxWqgqR12IZde+dOc0GBsRTSGrCfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUU2muQWj2jJOlKQ+FEMSfcJ5z8X0wHwYDVR0j BBgwFoAUQ/s3eCSwSASLh1a2xlxZm4KutbkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8wLzQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZCNkM2NUM1OTlCODJBRUI1QjkuY3Js MHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9yZXBvLnJwa2ku c3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xLzQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZC NkM2NUM1OTlCODJBRUI1QjkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcw C4ZTcnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzAvNDNGQjM3 NzgyNEIwNDgwNDhCODc1NkI2QzY1QzU5OUI4MkFFQjVCOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABOY 2Vylznqn0nMK58YmVYrhIUiHlfpy92mXxJ/DIBxSotCEHUK5HT75GKXBIaj69wva x5sdCk7cNoyL55UqyIWRmMjfqHVUhLgoSvgX8PyhDtTjJQs+TT3bYCKcsn9yf8Y6 Jl2y6izUYDZT78f4sekeJHAyot8gKxp/jmlwNQM9yiPV0cCMr+Knoln8QbriQ+mg JxVRpwt0uH+zJtvASwIa4uaq84Y4TydTf7j0JarDb8ksmrxobRlaaj7Sgk9NJy+X SmftR9HLXVU4rdt1UTtfq2KtsQU5B33nrz3ABhHSnOjSC6AkSZpOdKxGH09ipko5 ATKXsdg3U/pMLeGZpCM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:47:34 2025 by rpki-client