$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft File: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft (raw, json) Hash identifier: vWAyh3BQuZCmPlyFkufdboHNKJGn0JcaZ10KsRARFEk= Subject key identifier: 9D:0A:A3:C5:A0:E9:CB:1F:CD:FB:6D:0E:27:1C:45:34:DC:EB:DA:E5 Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88 Certificate issuer: /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388 Certificate serial: 44E62F54087AA4F8550EBF271FF66221F4A12C69 Authority info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft Manifest number: A4 Signing time: Mon 12 May 2025 10:09:25 +0000 Manifest this update: Mon 12 May 2025 10:04:25 +0000 Manifest next update: Tue 13 May 2025 13:25:25 +0000 Files and hashes: 1: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=) 2: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (hash: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI=) 3: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl (hash: rkoNdyYFb3E3sztjNXpW95ctgRxlUeynrxnOGQO5ock=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 13:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e6:2f:54:08:7a:a4:f8:55:0e:bf:27:1f:f6:62:21:f4:a1:2c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388 Validity Not Before: May 12 10:04:25 2025 GMT Not After : May 13 13:25:25 2025 GMT Subject: CN=9D0AA3C5A0E9CB1FCDFB6D0E271C4534DCEBDAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:6b:40:7c:9f:a5:53:fa:83:aa:4b:04:a2: 42:39:8c:e3:7a:2c:c9:42:30:13:6c:41:a6:e7:71: 6a:7c:96:fe:42:70:e2:54:6a:25:84:66:89:e5:5a: a4:48:17:ef:10:bf:75:22:d9:35:a5:97:71:5e:52: ce:42:94:50:d3:57:e3:08:fc:09:30:d7:f7:17:df: a4:45:b3:67:35:db:f9:38:69:7b:69:d4:7d:ff:7b: 35:62:8b:70:ed:9f:01:a6:4a:e9:92:b2:b7:53:92: 6b:0e:e7:4f:9b:ae:33:39:dd:a3:f6:6a:68:87:8a: c7:2f:48:4b:e9:61:2e:f3:6a:3e:74:17:56:aa:d0: ba:3b:c6:7d:58:7c:76:01:6b:c6:a8:64:66:94:4f: 70:39:82:ee:16:64:84:68:1c:3f:4d:77:f9:f5:d7: c1:e6:a1:ad:59:cf:33:24:3b:77:aa:e9:e2:0a:3f: ac:0a:ac:79:c9:b8:5f:2a:11:9d:9f:c0:61:d7:4b: e6:c7:11:4d:1e:03:cb:86:26:29:f8:56:96:40:72: b6:f0:ac:bb:35:44:70:f5:58:30:2d:c3:53:40:51: 92:bf:6d:1a:9d:2d:ed:b0:93:91:e0:29:ee:96:9a: d6:5a:ca:60:76:ed:b9:c9:7e:ea:f6:69:28:05:d0: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:A3:C5:A0:E9:CB:1F:CD:FB:6D:0E:27:1C:45:34:DC:EB:DA:E5 X509v3 Authority Key Identifier: keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl Authority Information Access: CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:43:c8:bc:ef:90:fd:83:b8:4f:92:59:a2:13:49:3d:0e:74: 7f:0d:43:77:d5:77:58:30:ea:76:3f:3c:70:20:f1:4f:13:4a: aa:54:1c:7a:72:f2:92:fe:fd:2a:2c:f2:c4:88:16:27:c9:06: f1:96:42:38:50:08:64:df:cc:37:fb:6d:38:14:a4:e3:e2:d3: 1b:f1:57:62:d3:3c:eb:d3:6f:09:30:9f:d5:40:17:bb:f9:f1: 63:ec:ea:5a:ba:f0:c7:13:31:17:c1:f3:62:1e:68:fc:61:50: 4a:02:2b:35:30:d5:64:0b:27:2a:b2:f1:e7:ef:7e:38:c2:1a: 52:ed:21:2a:e1:e6:21:3a:85:87:7b:a1:ef:cf:b5:9c:2f:a8: 83:76:a5:75:86:8a:d2:b7:cc:40:07:69:fd:29:04:2f:c4:b6: 5c:6a:18:9b:f5:d9:ff:8d:13:90:f0:0c:4a:12:2b:6c:a9:7d: eb:cb:69:31:a7:a8:53:6c:1e:49:5a:a0:7a:d3:ae:64:d7:00: 6b:c3:09:76:9e:d0:c2:7f:2b:ec:2c:7b:2e:b4:91:fd:d1:a4: 4f:61:57:9e:bd:0d:69:fe:2a:ae:59:88:ce:00:c6:9f:06:04: bb:c0:1a:17:85:33:0a:38:a9:4d:8e:a7:34:62:3a:d6:db:6a: a7:51:63:d7 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUROYvVAh6pPhVDr8nH/ZiIfShLGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4 QjJFNDM4ODAeFw0yNTA1MTIxMDA0MjVaFw0yNTA1MTMxMzI1MjVaMDMxMTAvBgNV BAMTKDlEMEFBM0M1QTBFOUNCMUZDREZCNkQwRTI3MUM0NTM0RENFQkRBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fGtAfJ+lU/qDqksEokI5jON6 LMlCMBNsQabncWp8lv5CcOJUaiWEZonlWqRIF+8Qv3Ui2TWll3FeUs5ClFDTV+MI /Akw1/cX36RFs2c12/k4aXtp1H3/ezVii3DtnwGmSumSsrdTkmsO50+brjM53aP2 amiHiscvSEvpYS7zaj50F1aq0Lo7xn1YfHYBa8aoZGaUT3A5gu4WZIRoHD9Nd/n1 18Hmoa1ZzzMkO3eq6eIKP6wKrHnJuF8qEZ2fwGHXS+bHEU0eA8uGJin4VpZAcrbw rLs1RHD1WDAtw1NAUZK/bRqdLe2wk5HgKe6WmtZaymB27bnJfur2aSgF0DEjAgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUnQqjxaDpyx/N+20OJxxFNNzr2uUwHwYDVR0j BBgwFoAUAc/350GJVjsOxF0Om7fFYosuQ4gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzQvMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4QjJFNDM4OC5j cmwwgYkGCCsGAQUFBwEBBH0wezB5BggrBgEFBQcwAoZtcnN5bmM6Ly9rcmlsbC5h Y2N1cmlzdGVjaG5vbG9naWVzLmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMv MC8wMUNGRjdFNzQxODk1NjNCMEVDNDVEMEU5QkI3QzU2MjhCMkU0Mzg4LmNlcjCB ngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzovL3JzeW5jLnBh YXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05 YjZjLTljOWYzODk4OTk1ZC80LzAxQ0ZGN0U3NDE4OTU2M0IwRUM0NUQwRTlCQjdD NTYyOEIyRTQzODgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5Q8i875D9g7hPklmiE0k9DnR/DUN31XdY MOp2PzxwIPFPE0qqVBx6cvKS/v0qLPLEiBYnyQbxlkI4UAhk38w3+204FKTj4tMb 8Vdi0zzr028JMJ/VQBe7+fFj7OpauvDHEzEXwfNiHmj8YVBKAis1MNVkCycqsvHn 7344whpS7SEq4eYhOoWHe6Hvz7WcL6iDdqV1horSt8xAB2n9KQQvxLZcahib9dn/ jROQ8AxKEitsqX3ry2kxp6hTbB5JWqB6065k1wBrwwl2ntDCfyvsLHsutJH90aRP YVeevQ1p/iquWYjOAMafBgS7wBoXhTMKOKlNjqc0YjrW22qnUWPX -----END CERTIFICATE-----Generated at Mon May 12 17:04:10 2025 by rpki-client