$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: CYSfRtp66+MudVYtjQs78ewYEMeSegG0t8mIaobBdNo= Subject key identifier: 35:5C:6F:F2:6F:64:C2:83:3B:50:EF:29:F7:0E:6B:FC:F3:00:19:BC Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 3261A6045C8167E3A5635D67703C93BA4982F9C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 03:29:03 +0000 Manifest this update: Sat 23 Aug 2025 03:24:03 +0000 Manifest next update: Sun 24 Aug 2025 06:09:03 +0000 Files and hashes: 1: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: pkMjZlC+oLJkafiWTBiuLl3I65AOwivHOXoj+pFDcu4=) 2: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=) 3: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=) 4: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=) 5: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=) 6: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=) 7: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=) 8: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=) 9: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=) 10: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=) 11: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=) 12: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=) 13: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=) 14: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:a6:04:5c:81:67:e3:a5:63:5d:67:70:3c:93:ba:49:82:f9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Aug 23 03:24:03 2025 GMT Not After : Aug 24 06:09:03 2025 GMT Subject: CN=355C6FF26F64C2833B50EF29F70E6BFCF30019BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:97:c4:07:dd:85:ac:41:f2:6f:e4:99:81: c3:b1:23:25:28:b3:93:8b:17:c2:b7:4b:6d:ea:b6: 5e:3b:a9:1d:ff:58:2b:6d:cf:b2:45:b0:d2:df:9f: c2:86:01:22:77:74:2f:28:28:53:34:e4:02:40:71: d9:16:48:ba:9d:22:b1:a5:7d:e4:40:79:1c:16:ac: 00:34:9a:7b:28:9a:05:56:1e:36:54:dc:d3:6b:75: 0d:4b:a5:05:14:df:77:75:53:66:1a:83:a6:62:83: c4:20:ea:de:7a:4b:5c:48:cb:13:08:2e:76:3d:56: e9:60:a0:30:3f:a6:ad:c0:13:e6:ca:d8:54:43:13: 68:f2:a5:2e:94:a4:12:33:d1:5f:3b:98:82:53:17: 4d:92:b5:d2:b9:6f:70:47:d9:04:dc:0f:66:b6:7a: d1:5d:ea:a6:2f:17:e9:55:27:42:2f:a2:49:2b:fc: a4:75:4b:09:9b:af:9d:6a:0e:d4:dd:76:86:d6:39: 0f:c6:2e:5b:9d:74:92:25:0d:ac:df:7e:11:36:f4: 58:d6:d7:1c:ae:30:dd:93:5c:ac:f9:14:a5:71:88: 3a:dc:2a:43:5a:76:ef:a9:bc:fd:20:b2:ad:d9:9c: 01:9c:8b:6f:94:40:b8:32:c6:13:c1:7c:38:86:1c: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:6F:F2:6F:64:C2:83:3B:50:EF:29:F7:0E:6B:FC:F3:00:19:BC X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b0:13:a8:d7:33:87:92:72:8f:c2:67:56:a6:1d:dd:29:0d: b6:76:05:13:76:46:f0:23:52:4d:01:39:40:d2:30:e8:00:72: 46:cf:93:4c:2e:62:b1:19:6b:23:3e:a5:58:e5:d8:71:f9:81: 13:e4:cf:29:24:79:bf:2f:a7:6d:b0:79:2c:d3:fc:0f:c4:71: f8:fc:dc:53:f4:7b:0c:8d:fe:d4:da:de:08:2f:ef:9b:77:25: 32:1c:f6:b4:f5:e3:aa:6f:f2:b7:47:c3:51:3d:5a:fe:b4:11: 0e:d3:be:1a:61:18:cb:96:c5:02:70:38:62:f4:23:1d:df:a2: 86:37:c8:cf:38:33:fd:73:9b:07:1b:d8:17:76:26:1b:be:3c: 15:ff:cd:76:ce:28:85:c4:89:7f:66:81:0c:a5:51:b7:3c:ea: 4e:5c:e0:ec:71:5b:cb:94:6b:2b:9c:2f:21:6e:f1:f9:d1:c9: ab:5f:18:39:4f:6e:a9:8a:45:5a:c4:d4:64:c3:7f:c2:6c:24: 5b:ee:6d:32:d7:f0:5b:be:ea:9a:e4:17:67:ea:f5:57:23:bb: d9:ba:b4:4a:9f:2c:d0:98:f1:d8:6c:f8:38:90:27:6a:54:2c: 14:fa:9b:ea:95:f2:eb:6f:eb:1e:25:08:c5:b5:10:23:6a:57: 06:46:5a:8e -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUMmGmBFyBZ+OlY11ncDyTukmC+ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNTA4MjMwMzI0MDNaFw0yNTA4MjQwNjA5MDNaMDMxMTAvBgNV BAMTKDM1NUM2RkYyNkY2NEMyODMzQjUwRUYyOUY3MEU2QkZDRjMwMDE5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hJfEB92FrEHyb+SZgcOxIyUo s5OLF8K3S23qtl47qR3/WCttz7JFsNLfn8KGASJ3dC8oKFM05AJAcdkWSLqdIrGl feRAeRwWrAA0mnsomgVWHjZU3NNrdQ1LpQUU33d1U2Yag6Zig8Qg6t56S1xIyxMI LnY9VulgoDA/pq3AE+bK2FRDE2jypS6UpBIz0V87mIJTF02StdK5b3BH2QTcD2a2 etFd6qYvF+lVJ0Ivokkr/KR1Swmbr51qDtTddobWOQ/GLluddJIlDazffhE29FjW 1xyuMN2TXKz5FKVxiDrcKkNadu+pvP0gsq3ZnAGci2+UQLgyxhPBfDiGHC2vAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUNVxv8m9kwoM7UO8p9w5r/PMAGbwwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQB9sBOo1zOHknKPwmdWph3dKQ22dgUTdkbwI1JNATlA0jDoAHJGz5NMLmKx GWsjPqVY5dhx+YET5M8pJHm/L6dtsHks0/wPxHH4/NxT9HsMjf7U2t4IL++bdyUy HPa09eOqb/K3R8NRPVr+tBEO074aYRjLlsUCcDhi9CMd36KGN8jPODP9c5sHG9gX diYbvjwV/812ziiFxIl/ZoEMpVG3POpOXODscVvLlGsrnC8hbvH50cmrXxg5T26p ikVaxNRkw3/CbCRb7m0y1/Bbvuqa5Bdn6vVXI7vZurRKnyzQmPHYbPg4kCdqVCwU +pvqlfLrb+seJQjFtRAjalcGRlqO -----END CERTIFICATE-----Generated at Sat Aug 23 10:04:19 2025 by rpki-client