Subject: [Sidrops] I-D Action: draft-ietf-sidrops-6486bis-05.txt

From: [email-masked]
Date: Thu, 08 Jul 2021 06:11:29 -0700

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the SIDR Operations WG of the IETF.

        Title           : Manifests for the Resource Public Key Infrastructure (RPKI)
        Authors         : Rob Austein
                          Geoff Huston
                          Stephen Kent
                          Matt Lepinski
	Filename        : draft-ietf-sidrops-6486bis-05.txt
	Pages           : 17
	Date            : 2021-07-08

Abstract:
   This document defines a "manifest" for use in the Resource Public Key
   Infrastructure (RPKI).  A manifest is a signed object (file) that
   contains a listing of all the signed objects (files) in the
   repository publication point (directory) associated with an authority
   responsible for publishing in the repository.  For each certificate,
   Certificate Revocation List (CRL), or other type of signed objects
   issued by the authority that are published at this repository
   publication point, the manifest contains both the name of the file
   containing the object and a hash of the file content.  Manifests are
   intended to enable a relying party (RP) to detect certain forms of
   attacks against a repository.  Specifically, if an RP checks a
   manifest's contents against the signed objects retrieved from a
   repository publication point, then the RP can detect "stale" (valid)
   data and deletion of signed objects.

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-sidrops-6486bis/

There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-6486bis-05

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-sidrops-6486bis-05

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

---

From: Job Snijders <[email-masked]>
Date: Thu, 8 Jul 2021 20:09:35 +0200

Hi all,

I think the latest changes looked great on paper (and indeed simplify
the text significantly), but are not operationally feasible.

Quoting from draft-ietf-sidrops-6486bis-05 section 4.2.1 "Manifest":
> Because a "one-time-use" EE certificate is employed to verify a
> manifest, the EE certificate MUST have a validity period that
> coincides with the interval from thisUpdate to nextUpdate in the
> manifest, to prevent needless growth of the CA's CRL.

It appears there are quite some CAs out there where 'nextUpdate' and
'notAfter' are not equivalent, I estimate it would reduce the global VRP
count from ~ 263,175 down to ~ 209,931.

I measured this by doing a quick'n'dirty implementation of the above
paragraph (based on OpenBSD rpki-client) to see how things would fare if
this is taken into production: http://chloe.sobornost.net/~job/rpki-client-draft-ietf-sidrops-6486bis-05.patch.txt

It seems most publication points contain objects where "EE notAfter >
MFT nextUpdate". There even is one repository where the window is not
aligned on the other side, where "EE notBefore > MFT thisUpdate".

I suspect the best we can do is demand that the EE certificate validity
window fully encompasses the Manifest validity window described in the
eContent, and merely recommend to align the two...

Below is a log (captured July 8th, 2021 at 17:52 UTC).

Kind regards,

Job

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123722/1/F578C6067D1AEEA820D972035525D1ECC271EAE2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:00 2021
Certificate notAfter: Thu Jul 15 06:00:00 2021

rpki-client: rrdp/8bd1405242614aed9f13321d266fe3193db0ca842e0cbffda2b3df05481c331b/rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 19:00:00 2021
Certificate notAfter: Sun Aug 18 17:20:11 2030

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635293/0/D2003EF609B0AAAE2FD1CA6FA73454838B6CC543.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123951/0/FB768D3D67565AA1369D88A422EE58492BBAE2FB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:00 2021
Certificate notAfter: Thu Jul 15 07:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123911/0/F93963F7D3A8A4BE92629F23E44AE5D57E781DA5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:01 2021
Certificate notAfter: Thu Jul 15 06:00:01 2021

rpki-client: rrdp/198613f16d61d95b77329eb7acdb3e1f8d1f0ec2b75e9510a7f7eacc7c3ebe19/rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:40:49 2021
Certificate notAfter: Thu Jul 15 17:40:49 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123971/0/D79A45DC64B260E1CD3ADBC1283AB625CD919C67.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:00 2021
Certificate notAfter: Thu Jul 15 10:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/86/D4BD043FCBCA71D165B72EC6566B32BC8F835B10.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:16:00 2021
Certificate notAfter: Thu Jul 15 17:16:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/155/D1514685AC04522A7FDEBE7D2BEB15F9A659D643.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:14:01 2021
Certificate notAfter: Thu Jul 15 03:14:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/56/D520DB09A828DD1955CAD118F7F9F02C882F4032.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:01 2021
Certificate notAfter: Thu Jul 15 12:50:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:01 2021
Certificate notAfter: Thu Jul 15 07:00:01 2021

rpki-client: rrdp/202bd4f43bc8c2ffd23aefb5c5f62c2d208bf9aa03d4d72e07e3ad458156b708/rpki-rsync.e15f.net/repo/MISAKA-RPKI/4/FBFF23C7F28502F0FB85D033F506035404D72A23.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:30:00 2021
Certificate notAfter: Thu Jul 15 08:30:00 2021

rpki-client: rrdp/dd64a5fff750809bb25799a9fbb925a0ed67be8d32a9881175ccf5fdf773ef3c/rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:00 2021
Certificate notAfter: Thu Jul 15 07:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/158/D8A7C0E0FC555268B39A3661B0BD5697B4EA1BE9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:00 2021
Certificate notAfter: Thu Jul 15 03:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/143/D9104BDA69AE553F40AC9A6FC37B56EE8B8C490F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:46:01 2021
Certificate notAfter: Thu Jul 15 02:46:01 2021

rpki-client: rrdp/e6f824975d4cfbadef5151cf91e15d50663fe25b51399a6bb1ef679ab90f1aa0/rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 16:40:00 2021
Certificate notAfter: Thu Jul 15 16:40:00 2021

rpki-client: rrdp/b466e380ffc62cc14ff3b1e5a0ba3113d10ee5470cd7fb063cd37f57e2ccc35b/rpki-repo.as207960.net/repo/as207960-rpki-ca/1/D4D70D6BB676841B15042BB39A9C5DEAE1A561BF.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:06:00 2021
Certificate notAfter: Thu Jul 15 02:06:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/68/D9AFEDF848BEFBA6C3B9F2BE33B3BA311F750D96.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:48:00 2021
Certificate notAfter: Thu Jul 15 13:48:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1196081/0/DA45B59D1FB8E7B05D968D03F6270367922F442C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/83/DB202E8F86ACC8EEDF642ABB855EA98056207820.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:12:00 2021
Certificate notAfter: Thu Jul 15 17:12:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123731/0/DF49DDF5721E3B9DCC7F7902976B40D18D1A2ED5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:00 2021
Certificate notAfter: Thu Jul 15 10:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/100/DFF8F1BAA9B2628AEF4D6EB271375D6F99B5D8FB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:46:00 2021
Certificate notAfter: Thu Jul 15 02:46:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1047643/0/DDAA415E86A29BBC9B4B67368C4D839710962BA7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/1/DDF3443D683C2396A9D49697332ADC6763239F5D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:46:00 2021
Certificate notAfter: Thu Jul 15 14:46:00 2021

rpki-client: rrdp/53064d56d483b14aaa91307393c7ac9d1b3f7d351fe1add9fa9c4aa0badb8cde/rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:14:00 2021
Certificate notAfter: Thu Jul 15 15:14:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635375/0/E01EDAF8603A34462AD1589CC1C6F3D5C70DD96E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:00 2021
Certificate notAfter: Thu Jul 15 10:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635323/0/E0DD7B0C56950F11C8CE4859F787CED14341E294.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/159/E2950105109D5F1FFD288DFDCD1D90933FCE1E76.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:14:01 2021
Certificate notAfter: Thu Jul 15 03:14:01 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/1/E10810ED7F2C6450AE2DDAB5DAF9DDCA3D99B987.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:30:02 2021
Certificate notAfter: Thu Jul 15 07:30:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/98/E44F68F1B1DD904C7DC569678A7DC574559A003A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:46:00 2021
Certificate notAfter: Thu Jul 15 02:46:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/141/E4749E76536AC611FD3B77E8000D8D2B71BF8B49.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:34:00 2021
Certificate notAfter: Thu Jul 15 17:34:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123571/0/E4D592050CD6CDBD01EACEC8CB4ED6036308A046.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/62/E4E712E2C0625466E8C0CE82566B4776CC91638B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:38:00 2021
Certificate notAfter: Thu Jul 15 13:38:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:16:00 2021
Certificate notAfter: Thu Jul 15 06:16:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/21/E55B95A6E4EA177F526295122005CD6DDB76FA8E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:08:40 2021
Certificate notAfter: Thu Jul 15 09:08:40 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/17/E6102C8D774C8F7B4FFC0A08588CBA1872EF2096.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:50:02 2021
Certificate notAfter: Thu Jul 15 08:50:02 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/36/E631C31DB9CC5E4617ED8E237B6A0C9107804CC6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:30:02 2021
Certificate notAfter: Thu Jul 15 09:30:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/52/E6B377121680C41764B7B855A3865493F535E81C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:00 2021
Certificate notAfter: Thu Jul 15 12:50:00 2021

rpki-client: rrdp/4ef50f74739587a1a351febfb29ed7dee43d20a3ce1afa2217455f815f47e559/rpki.admin.freerangecloud.com/repo/FRC-CA/1/DC9B0FC0FAE1CB3BD28B9D01AAFC3563FDA951DA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:25:04 2021
Certificate notAfter: Thu Jul 15 17:25:04 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635231/0/E90A04260C3C679DE5FD5ECBB49D34C5DD868024.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/20/E9421F9CBDED4975388F2E297479D93FCF23F1E5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:22:00 2021
Certificate notAfter: Thu Jul 15 06:22:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/97/E9880DCB47D0447A8A78D2BD81EBC19A7938073F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:01 2021
Certificate notAfter: Thu Jul 15 03:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/38/E9FC48331F2E461A51BCF68C86C0F1C52DF5B50F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:56:00 2021
Certificate notAfter: Thu Jul 15 12:56:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/27/EAF9B34731DE88D1991AC7A5B47A548ED5727469.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:10:02 2021
Certificate notAfter: Thu Jul 15 09:10:02 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:02 2021
Certificate notAfter: Thu Jul 15 10:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/79/EF6D5C4FF0D822C54B3BB2000663091CBC4F41E6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:08:01 2021
Certificate notAfter: Thu Jul 15 14:08:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/107/EFBB7362096CED21B789F5E6C20BDDC6861DEA53.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 05:54:00 2021
Certificate notAfter: Thu Jul 15 05:54:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:01 2021
Certificate notAfter: Thu Jul 15 12:50:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/105/ECF360A9AF3396EE05508E33EB8B4378040FF506.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:01 2021
Certificate notAfter: Thu Jul 15 03:00:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635181/0/ECFC9A7FB34C1B74F8BBB4B46E8C933761B0E7B4.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/152/ED381F8706FFFF9D799ACBB6B771E9AB323BBFCF.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/150/ED4E2CBEA3649A659479C94648B30D2E47212FF9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:36:01 2021
Certificate notAfter: Thu Jul 15 02:36:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/89/F14476D38899DCA579D0EAB8055C802B1079B1B0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/61/F33816416D6A8E179FF619D16C8F4A6D3711D43C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:12:00 2021
Certificate notAfter: Thu Jul 15 13:12:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/69/F750B41E7E6C0F101380E0BAC3E972C373336028.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:02:00 2021
Certificate notAfter: Thu Jul 15 14:02:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/91/F6AFA7B1A94FF5577F4A006792810C27AC1B4F2E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:16:00 2021
Certificate notAfter: Thu Jul 15 17:16:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635331/0/F6F9026D8DDBDD148C536116457B89A850C35312.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123961/0/F710F75AFC1E6157AB63C26CF7E54BBA0588F236.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:01 2021
Certificate notAfter: Thu Jul 15 15:00:01 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:40:02 2021
Certificate notAfter: Thu Jul 15 07:40:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:58:00 2021
Certificate notAfter: Thu Jul 15 09:58:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/51/00D5A3AD97620A2E7C05DA8DF26B1EFB0DB90AFC.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:00 2021
Certificate notAfter: Thu Jul 15 12:50:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635291/0/0159B6C192EB1F7285045253EE6D52E668F246AB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:05 2021
Certificate notAfter: Thu Jul 15 02:00:05 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/45/01A2F1E3119785500C33C01D966D6FFC63F56BE5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:56:00 2021
Certificate notAfter: Thu Jul 15 11:56:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/36/01E7A569556A65E7D9852CF72AC4C466AC380BE8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:46:00 2021
Certificate notAfter: Thu Jul 15 02:46:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/96/01F6C65BF7E232FB7C6A0DA451DB8C608ACEAA82.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:38:00 2021
Certificate notAfter: Thu Jul 15 02:38:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/15/077015F3F016B7D62B8733579A7CA46841F5AB65.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:50:00 2021
Certificate notAfter: Thu Jul 15 09:50:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:40:00 2021
Certificate notAfter: Thu Jul 15 11:40:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/87/07B1A2CB9D13D3AE494D675F20F04AC17F7F5DCB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 01:58:00 2021
Certificate notAfter: Thu Jul 15 01:58:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/129/049D685B1DC58199893B48B61795FFC0EB3F983F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/8/050BADBAF68DD6D2F74A5BF223C3282DC89D7789.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:20:02 2021
Certificate notAfter: Thu Jul 15 08:20:02 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/15/054161202C2E2C55694B09F849DB7B258826B4F9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:00:03 2021
Certificate notAfter: Thu Jul 15 09:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/46/058CB678F9216E29679C31CAC77F58D951825157.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:08:00 2021
Certificate notAfter: Thu Jul 15 12:08:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/7/059B7C4B7F5DAD25F2774B252BB0406680373626.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:58:18 2021
Certificate notAfter: Thu Jul 15 07:58:18 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/38/066766216C91414D6358EDE5DA9721ED3A8095C2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:40:02 2021
Certificate notAfter: Thu Jul 15 09:40:02 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/29/0B900F2179173EFD2DFE5079060D2933B7E4FE70.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:40:02 2021
Certificate notAfter: Thu Jul 15 09:40:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/60/0936C88B47C5A8B07A101E1BE41DED8A1E181C10.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:12:00 2021
Certificate notAfter: Thu Jul 15 13:12:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123922/0/0A037748DD28483CAB6736993513E5F3C241A18D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:04 2021
Certificate notAfter: Thu Jul 15 07:00:04 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/160/0F8BA098FB17F8180AC422085D1D53397B711301.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:50:01 2021
Certificate notAfter: Thu Jul 15 07:50:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123601/0/0C4D18B0CCBFD5B985D3EF688E333ADD439BB3DC.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:06 2021
Certificate notAfter: Thu Jul 15 02:00:06 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123931/0/0C7F1873DFF3C9BDD1160CDAE1F185703378A78C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:03 2021
Certificate notAfter: Thu Jul 15 07:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/102/0D37EB04D56141E0C2368ABB405085231B48BBA9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:02:00 2021
Certificate notAfter: Thu Jul 15 02:02:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/2/0EA7F13B6A97B26F3686C84F17E65727953240E7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:30:02 2021
Certificate notAfter: Thu Jul 15 07:30:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123982/0/1364A0E9D2B48728AECAE576E953BDB16A96F351.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:01 2021
Certificate notAfter: Thu Jul 15 15:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/57/13B88795B4258D089786F68729C6428BCBE840A6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:00 2021
Certificate notAfter: Thu Jul 15 12:50:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:26:00 2021
Certificate notAfter: Thu Jul 15 11:26:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123801/0/1071CFFA1324566088BF67E0E0351DC39BF08B8E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:01 2021
Certificate notAfter: Thu Jul 15 06:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/118/10BFB03842A782FDC8BC017EB0F6D74359FBC297.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:34:00 2021
Certificate notAfter: Thu Jul 15 02:34:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635324/0/121C8DD2E580CC298D40757B4A0E43915C5A4FE9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/93/177BF59A4504C9263DA25BB7300257C17CE64F14.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:46:00 2021
Certificate notAfter: Thu Jul 15 02:46:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123612/0/1484610A74CBFFF1461E48AC2FDC87EE1570B0AB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:01 2021
Certificate notAfter: Thu Jul 15 06:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/165/14DA3ECEAA2661B84FEBB90D1A43C46F4410ADD5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:16:00 2021
Certificate notAfter: Thu Jul 15 06:16:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/140/153A65642624B3FD1060DE8991F38E0905558A0E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:34:00 2021
Certificate notAfter: Thu Jul 15 17:34:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/123/155754E0CD3D71A0CF9D8A2B13741A4E311372C3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:26:00 2021
Certificate notAfter: Thu Jul 15 17:26:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/162/16DC80862EC40036E8A388634FB573B2ED2ADFF7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:00:00 2021
Certificate notAfter: Thu Jul 15 08:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/12/170584C3C22A791B9369E669AFE83CE83DACC0EA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:06:00 2021
Certificate notAfter: Thu Jul 15 06:06:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:06:00 2021
Certificate notAfter: Thu Jul 15 08:06:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/10/18E77184B71781A0E8B12C6480AD33DA9A99B2AD.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:58:18 2021
Certificate notAfter: Thu Jul 15 08:58:18 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123672/0/1999A78838E2599CE215C3A762E1B586EF6303B1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/142/1AE48363BBE00EEFD45178B76BDB9083F5455F33.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:06:00 2021
Certificate notAfter: Thu Jul 15 02:06:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/134/1D6594BA0EBB73B4327F3AFDF64B0AC06CF4F592.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:01 2021
Certificate notAfter: Thu Jul 15 03:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/168/1FF28FF447DD89EC808448730EFE6200DED61780.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:50:01 2021
Certificate notAfter: Thu Jul 15 07:50:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/112/1DDCF2DAC7ACDC2CEDE7E8D64599CBBB37C98C62.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:34:00 2021
Certificate notAfter: Thu Jul 15 17:34:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/47/1DF1BF6ECEF25C0EE0A521DF9257AE3EE7A24DBB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 05:08:00 2021
Certificate notAfter: Thu Jul 15 05:08:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:54:01 2021
Certificate notAfter: Thu Jul 15 09:54:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/173/1E7CA0EF0E13DF30FE3B30609A0387C4C88EACA3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:06:01 2021
Certificate notAfter: Thu Jul 15 06:06:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/41/2395B1645BC2A8D6608FB01056959AF0E6583E7B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:42:00 2021
Certificate notAfter: Thu Jul 15 11:42:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123932/0/204D02D4B3B6F61A3D7705DF6324492292901112.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:18:00 2021
Certificate notAfter: Thu Jul 15 06:18:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635322/0/210E888F9B726204382923FE8A0ADB31AC9749A0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 04:16:00 2021
Certificate notAfter: Thu Jul 15 04:16:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/132/2794C03C49A238F632CB3E36398A653BB169A96D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:08:00 2021
Certificate notAfter: Thu Jul 15 03:08:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/128/249FD78C3F7BCEE5AC33C8C9BBED4A466FAA5DBC.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/115/24FD95B1D9A0E8C66AECD6F9E60876A15353EF97.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635141/0/267F511BDDD80E5AFDF951468823D5EBB2FA553B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:02:00 2021
Certificate notAfter: Thu Jul 15 06:02:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/48/2727235923158BC2DC42AD8D7CF3618A464AE58C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 16:46:00 2021
Certificate notAfter: Thu Jul 15 16:46:00 2021

rpki-client: rrdp/e810110740d0f365a8eff355cb18e40ce86e2a48f42b2e3a841d8b763ed3815d/rpkica.mckay.com/rpki/MCnet/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Wed Aug 26 11:03:34 2020
Certificate notAfter: Thu Jul  1 00:00:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/28/29212CC384F4908F36170F47C8FA645D9AFFBA40.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:30:02 2021
Certificate notAfter: Thu Jul 15 09:30:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/114/292ABEA587596BAD46920FD921FEAB86B0EE1132.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:26:00 2021
Certificate notAfter: Thu Jul 15 02:26:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/40/2A3FBCD78603F9B34F4E1243735035743E0826B5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:10:03 2021
Certificate notAfter: Thu Jul 15 10:10:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/14/2F7CB84B1334E17130F0BB0BAB35DB5098EEBBED.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:28:00 2021
Certificate notAfter: Thu Jul 15 11:28:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:03 2021
Certificate notAfter: Thu Jul 15 07:00:03 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/13/2FA8BFB764F26308860E3935DCFB8D9CF06B6DCA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:58:18 2021
Certificate notAfter: Thu Jul 15 08:58:18 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/53/2C7730554E0F7AD8AD1329FB1C4D05C060F51FD3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:08:00 2021
Certificate notAfter: Thu Jul 15 12:08:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/22/2CFB8F14117D2EC7FA5F009F54BC6DC07E65F1D8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:32:00 2021
Certificate notAfter: Thu Jul 15 06:32:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/20/2D2792E9E34D1F62C07AE23E45802A8201A4115A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:00:02 2021
Certificate notAfter: Thu Jul 15 09:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/153/2DB99CC50935295F8E3427A0BB691B41507E3276.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:04:00 2021
Certificate notAfter: Thu Jul 15 10:04:00 2021

rpki-client: rsync/chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul  8 21:33:46 2021
Certificate notAfter: Fri Jul  1 00:00:00 2022

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/0/32AC7492B0EE1B530737342F01954AF0F1C5217E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:52:00 2021
Certificate notAfter: Thu Jul 15 14:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/166/37E4374C116E3E8ADF1985A19577CBCA011A9695.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:06:01 2021
Certificate notAfter: Thu Jul 15 06:06:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:36:00 2021
Certificate notAfter: Thu Jul 15 11:36:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123661/0/3404CA1D66A3E9C76FA603454CDC73F68646D1D1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:00 2021
Certificate notAfter: Thu Jul 15 06:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/172/352207C52E4DB89EB6D6A0AA2B8EDC63214EED83.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:18:00 2021
Certificate notAfter: Thu Jul 15 06:18:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/66/3552AE2041DB87A15EA8AA5E7740920B00969683.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:38:00 2021
Certificate notAfter: Thu Jul 15 13:38:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/37/36B4AD2A5697DBB09B52CFE6E16BAEF32B37FF16.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:50:00 2021
Certificate notAfter: Thu Jul 15 07:50:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/14/3B79E6C8AF8C97F394AEF89E58A8E3DBF1AFE0A1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:58:18 2021
Certificate notAfter: Thu Jul 15 08:58:18 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123751/0/3B950B0269712104A9BF44EA856ADC9135033BD0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/90/3B9AED6A786DA2D39C683954F8AC478CCF1904F6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:24:00 2021
Certificate notAfter: Thu Jul 15 02:24:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:24:00 2021
Certificate notAfter: Thu Jul 15 11:24:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/70/387F5096B2D2F2435AEB240884C51EC0A7058652.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:08:01 2021
Certificate notAfter: Thu Jul 15 14:08:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/64/395637D67139C6EBB9E7C29C212B719C40969D02.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:18:00 2021
Certificate notAfter: Thu Jul 15 13:18:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:50:02 2021
Certificate notAfter: Thu Jul 15 10:50:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123901/0/3AD410DAFB23C38DA6E87F06075D2DA7922634F3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:02 2021
Certificate notAfter: Thu Jul 15 15:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/50/3C317A7806C90FEF9B41C505C5AF93E38EB8EE00.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:01 2021
Certificate notAfter: Thu Jul 15 12:50:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/179/3DD63D65DB192D8DD60DB9C1A5B4226CA9B25C7C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:22:00 2021
Certificate notAfter: Thu Jul 15 06:22:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:12:00 2021
Certificate notAfter: Thu Jul 15 08:12:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123881/0/3F1395C51DED3AB0D789A8A93E1AB7625DCE52FD.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:01 2021
Certificate notAfter: Thu Jul 15 07:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/92/4279C302E29F2F0FBC396EAB649837C0DDD8190F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rsync/chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul  8 23:33:49 2021
Certificate notAfter: Fri Jul  1 00:00:00 2022

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635151/0/4446AD50CC87C91DF501F324E7FB868A79F35975.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123611/0/44626F60B2363FA1442EC1A05B454C3C1A7845CB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:00 2021
Certificate notAfter: Thu Jul 15 06:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123762/0/45221100F228493565CC2CB6ADE892252CB177CE.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:03 2021
Certificate notAfter: Thu Jul 15 15:00:03 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1047642/0/45803ABECA68C74B9D8163E8194C104F3081EDA6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:01 2021
Certificate notAfter: Thu Jul 15 07:00:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123662/0/47140C565C34264E2E26451CA2B234E0BF86356A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:01 2021
Certificate notAfter: Thu Jul 15 10:00:01 2021

rpki-client: rrdp/6e83640d31a8a2ac36a3648002aea450b80510152672bc91eff03ad7547d5383/repo1.rpki.qs.nu/repo/cynthia-ca1/0/4587ACCBDB6BC11F2A0A1FCB3D7DABE2278F5DE9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:00 2021
Certificate notAfter: Thu Jul 15 12:50:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123811/0/4B151ED770262B02592C17950451FCB75FF28048.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:01 2021
Certificate notAfter: Thu Jul 15 10:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/124/4FA89DB3EDE486CBF7C9E27FEB21B861326E7D04.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:16:00 2021
Certificate notAfter: Thu Jul 15 17:16:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:52:01 2021
Certificate notAfter: Thu Jul 15 08:52:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:46:00 2021
Certificate notAfter: Thu Jul 15 14:46:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123671/0/4D8B2DF8825F527D08CDD6A123F1D21CAB57E45D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:05 2021
Certificate notAfter: Thu Jul 15 02:00:05 2021

rpki-client: rrdp/e810110740d0f365a8eff355cb18e40ce86e2a48f42b2e3a841d8b763ed3815d/rpkica.mckay.com/rpki/MCnet/UEh2SAvdIgPsUFdv92RSSaNqBnY.mft: No such file or directory
rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/101/507F3D16F6556B18E69CF0E5022D87600ACF771E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:30:00 2021
Certificate notAfter: Thu Jul 15 17:30:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/32/507B9D22A50176C420523574618691E525560FD6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:20:02 2021
Certificate notAfter: Thu Jul 15 10:20:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123732/0/509AE25FBFF799CACDA06A0404B7BFAE16767C5D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:04 2021
Certificate notAfter: Thu Jul 15 07:00:04 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/88/5106B67529A497294EB41222FE66B98016DAC3E7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:30:00 2021
Certificate notAfter: Thu Jul 15 17:30:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/103/5112A2669754796278D200BD029FFCF377BB1B4C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:36:01 2021
Certificate notAfter: Thu Jul 15 02:36:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/80/5164AFFB456C86E0C155AE30A29CEDD28570D80A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:08:00 2021
Certificate notAfter: Thu Jul 15 14:08:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:06:00 2021
Certificate notAfter: Thu Jul 15 06:06:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/77/544BD1F3C84C66E22257EAA7636CFFEA39567F9D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:02:01 2021
Certificate notAfter: Thu Jul 15 14:02:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:26:00 2021
Certificate notAfter: Thu Jul 15 11:26:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 05:36:00 2021
Certificate notAfter: Thu Jul 15 05:36:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/22/55C3237E81DB262C9D46C2A6B3BCFDCD03B19F44.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:20:02 2021
Certificate notAfter: Thu Jul 15 09:20:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635294/0/55C7520271B06CEA63277A22BC5326D66A9E1DC8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/6/583F40C7F1B8DC3753128C5EFE0894B795F58948.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:48:40 2021
Certificate notAfter: Thu Jul 15 07:48:40 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:12:00 2021
Certificate notAfter: Thu Jul 15 11:12:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/9/5900EE08A496684733174BFAEF373482E8552BDC.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:39:00 2021
Certificate notAfter: Thu Jul 15 08:39:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/28/59DECE85897FE4D038F3D6970F23D2AB74403186.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:30:00 2021
Certificate notAfter: Thu Jul 15 07:30:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123711/0/5ADEFD8854076824E1C375D937128DDF77803B0A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/84/5F811E05AB9C015483AA8A03201F60095DDC2158.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:48:00 2021
Certificate notAfter: Thu Jul 15 02:48:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/26/5F99F556D6E0A6630E96AC9ACBD485633858A345.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:30:03 2021
Certificate notAfter: Thu Jul 15 09:30:03 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/47/5C5B39F6776DE17CFD3F013F473840686814D2BA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 04:00:02 2021
Certificate notAfter: Thu Jul 15 04:00:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635152/0/5D128850D355A93DA99B5E93640FFD749AFA64D4.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:04 2021
Certificate notAfter: Thu Jul 15 02:00:04 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/31/5D5B5089A8B704E0D95828E7ABFFB512B7E623FE.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:50:00 2021
Certificate notAfter: Thu Jul 15 07:50:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:54:00 2021
Certificate notAfter: Thu Jul 15 09:54:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/11/5ECC65F778E20CAC493E7587F1C726AF26A6C050.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:30:02 2021
Certificate notAfter: Thu Jul 15 08:30:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123743/0/5F002380E5CD0A5029F1FFD53C7818747F478E77.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:00:00 2021
Certificate notAfter: Thu Jul 15 08:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/35/635603BDB3A8C8222338D9EBA0EDF09D9FD81085.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:38:00 2021
Certificate notAfter: Thu Jul 15 02:38:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/76/635B37806E8996F26D4C8A0B6B6F166678B28F19.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:48:00 2021
Certificate notAfter: Thu Jul 15 13:48:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/161/6025ACD77602B9F803246206F6712032280B8601.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:06:00 2021
Certificate notAfter: Thu Jul 15 08:06:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123701/0/604F563B6E605F340A9BD79136DCDEDB718A0D37.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:02 2021
Certificate notAfter: Thu Jul 15 02:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:18:00 2021
Certificate notAfter: Thu Jul 15 10:18:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123681/0/61D7344C02BDA832F52D0E670B1216964ADEE838.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:04 2021
Certificate notAfter: Thu Jul 15 02:00:04 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/24/6287E2FFD1EBFC089A26B26BF25BDDC6EE81253A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:40:03 2021
Certificate notAfter: Thu Jul 15 09:40:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:54:00 2021
Certificate notAfter: Thu Jul 15 13:54:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:48:00 2021
Certificate notAfter: Thu Jul 15 10:48:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/72/67CDC13DEA8CDAEFDD54C03B29A5BD901021FFDE.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:02:00 2021
Certificate notAfter: Thu Jul 15 14:02:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/120/643476647C2C90AD7F91CE26EE428B91E8093C6A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:24:00 2021
Certificate notAfter: Thu Jul 15 02:24:00 2021

rpki-client: rrdp/b4983ae62d1a60e674e06a36dd8dd0acb99211218323a318c6559294d960caeb/rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:20:00 2021
Certificate notAfter: Thu Jul 15 10:20:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/104/64F528035C33F58CB3275421C7E12DADE644BD1A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123591/0/65D7E00F3A8C8F8A7AA023CB69C79066FD6873DF.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123892/0/FC9D7A734910A0626047062A857CF746B40BA3E3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:03 2021
Certificate notAfter: Thu Jul 15 15:00:03 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123753/0/FD709A369802A0C791C440B033A20FA8D6B5A668.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/175/FE32AB22F478576F9B5FE446EE2101E696762A14.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:18:00 2021
Certificate notAfter: Thu Jul 15 06:18:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/23/FF23DB3C0C1DBC3119B0C776A5C6F7C30AFAC71E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:22:00 2021
Certificate notAfter: Thu Jul 15 06:22:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635233/0/6B62445B5CFA96567DE99B4B71ED0C87206E9AE2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:05 2021
Certificate notAfter: Thu Jul 15 02:00:05 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123581/0/68B8A0EFCD49BE4F72170FFF6F65E22FEF17E9E0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:06 2021
Certificate notAfter: Thu Jul 15 02:00:06 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123752/0/69B34D8C5E4038980C7C8EF58D6CF4F5B6A30605.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/34/6A7A26C7281B0D9E23E974B3ACEED78ED7673E71.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:40:02 2021
Certificate notAfter: Thu Jul 15 09:40:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/44/6AB0B75853960E43F64D55CC1C28E5D299D7B45B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:56:00 2021
Certificate notAfter: Thu Jul 15 11:56:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/154/6F7C8F9431FBE3401906AEEAA7B899343D8AE35B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:00 2021
Certificate notAfter: Thu Jul 15 03:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/71/6CB93447B5CDC2E637ECC59D6A8794457F6CE8D3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:54:00 2021
Certificate notAfter: Thu Jul 15 13:54:00 2021

rpki-client: rrdp/73885635ed28814800212d730ae80581fc5112c4b5804a08d55d6bda2afa1615/ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul  8 23:32:23 2021
Certificate notAfter: Fri Jul  1 00:00:00 2022

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/131/7438886AE0E281079554F034B9AF060B62333F7B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:24:00 2021
Certificate notAfter: Thu Jul 15 02:24:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/169/75B452B1F989E6E896EFED2166182FCB5BDAAF8B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:18:00 2021
Certificate notAfter: Thu Jul 15 06:18:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/82/76A578A2F761B6027A027C4972DA0408AD077F51.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:00 2021
Certificate notAfter: Thu Jul 15 03:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635321/0/7703A49B1156D1510148B4412E485FEBE8593917.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:05 2021
Certificate notAfter: Thu Jul 15 02:00:05 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/85/7B4926EEC1AEB60574942FAAD04EC3A56ADDF4A6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/117/7878C3DF04DBFD4674BA6706C36E9B455E708BDE.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:06:00 2021
Certificate notAfter: Thu Jul 15 06:06:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:04:00 2021
Certificate notAfter: Thu Jul 15 03:04:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/65/793867F7C27153F5B7BB8201F600F0FFAA6E9B7C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:38:00 2021
Certificate notAfter: Thu Jul 15 13:38:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123891/0/7F933A6145A4F39DDAE1E224924C7E0B2F4E70D5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:01 2021
Certificate notAfter: Thu Jul 15 06:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/63/7C4F0322AE78E2429EECD69C71F6E6221694CEAD.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:38:00 2021
Certificate notAfter: Thu Jul 15 13:38:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123851/0/7D411262B9614AB16A0FDACCF703676C6FD7B066.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:00 2021
Certificate notAfter: Thu Jul 15 06:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635153/0/7D99D2758F25260E783E9FADCBA2F104EE8FA5EB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/122/7E7B4B4010541F8E95DB7EBD28D73EA9272C86CA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:56:01 2021
Certificate notAfter: Thu Jul 15 12:56:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/164/7EBD1421D6EE46B714647FB7D198AE4601B63729.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:24:00 2021
Certificate notAfter: Thu Jul 15 11:24:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/13/8000E2F09D2BDD9BEE9D4694E4779BCA485A6067.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:26:00 2021
Certificate notAfter: Thu Jul 15 17:26:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/148/825149927F22B7279E356DF85D383E6F490CF56A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:46:00 2021
Certificate notAfter: Thu Jul 15 02:46:00 2021

rpki-client: rsync/chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul  8 19:33:44 2021
Certificate notAfter: Fri Jul  1 00:00:00 2022

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/156/82B2BC4FF3F534179488BB4725C4B5C40918E437.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:06:01 2021
Certificate notAfter: Thu Jul 15 06:06:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/125/8467455AFCEA75872DB292FCE926794267055F02.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 04:54:00 2021
Certificate notAfter: Thu Jul 15 04:54:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635161/0/864D0F3997EA2BEAB230F310FD7E160F661A2770.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1047641/0/8BC8AD01D9C09360CEE1E902A211B5EB21AD36D6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:00 2021
Certificate notAfter: Thu Jul 15 07:00:00 2021

rpki-client: rrdp/2a2616114ee9de7f6cc668d607c8d2e1cfa629cb731e56fd7a6f8d952c4a1da7/rpki.caramelfox.net/repo/caramelfox/1/815A0AC37F00104FD75CB8C1BD1189A0599DCB33.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:50:00 2021
Certificate notAfter: Thu Jul 15 17:50:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/106/8F6453E2506013C51894FDD8E9E20D529CF7264F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:14:01 2021
Certificate notAfter: Thu Jul 15 03:14:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/59/8F99633584532C7C77927B6E59ED938D69FCB344.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:12:00 2021
Certificate notAfter: Thu Jul 15 13:12:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123985/0/8FC49DCE8C866194920B10D42C6DAC1F761A6BBC.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:04 2021
Certificate notAfter: Thu Jul 15 07:00:04 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/25/8DAF139E91666188240F83221B219C82C135BC90.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:20:02 2021
Certificate notAfter: Thu Jul 15 09:20:02 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/37/8E1D5C9ECCC6649B81D9E687DB8D6E71F2D40E36.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:38:19 2021
Certificate notAfter: Thu Jul 15 09:38:19 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123761/0/8E3F6C771022E8003F543F72047DD19A6AF057A3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:00 2021
Certificate notAfter: Thu Jul 15 07:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123821/0/8EBF5E94CF9CAA8D5732909BF62D619AE40F415A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:01 2021
Certificate notAfter: Thu Jul 15 07:00:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123882/0/8EEDFABEFAFF25C81EFFFCABE9E54B0FD32657B3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:01:08 2021
Certificate notAfter: Thu Jul 15 11:01:08 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/24/8F3BD7C0DC789C872F6DD2623CEE32BD0A2029D3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:08:00 2021
Certificate notAfter: Thu Jul 15 07:08:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/42/91A5B1996D18DBA58483B2A1C2FA8FECF42D5E5D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:52:00 2021
Certificate notAfter: Thu Jul 15 11:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/109/933121DD90966549050297DE150385243A040EC5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:00:00 2021
Certificate notAfter: Thu Jul 15 03:00:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/49/9582C3C68DAD52961367C795EB1BCFD2213D57DB.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:10:03 2021
Certificate notAfter: Thu Jul 15 07:10:03 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123921/0/9FC536862CED439CB6BE4E401A6EAE1BB17523E6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:01 2021
Certificate notAfter: Thu Jul 15 06:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/26/A3DB7DFF5117060C1B3C7BCF8DF5DDB1EBCC96E3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:40:00 2021
Certificate notAfter: Thu Jul 15 06:40:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/48/A115100E0CC80F5B5017BC86187B071FB1CCE200.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:58:43 2021
Certificate notAfter: Thu Jul 15 12:58:43 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/146/A16E04048CF20BD166059B1DF407E11104CFBBF2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:26:00 2021
Certificate notAfter: Thu Jul 15 02:26:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123983/0/A16C909DDCECBB0AE97F01E8EF998001A8FBA42A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:01 2021
Certificate notAfter: Thu Jul 15 15:00:01 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/3/A21E0EF4AC7B7BF40F7E51BF003BC44D9FA940B0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:07:57 2021
Certificate notAfter: Thu Jul 15 12:07:57 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635142/0/A29B5E172EB778C7D7E804429E71A60DD477504B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:26:00 2021
Certificate notAfter: Thu Jul 15 11:26:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/12/A799F27C2E40C087EB6BA8D2A342A7243BFE3676.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:48:18 2021
Certificate notAfter: Thu Jul 15 08:48:18 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635292/0/A46C8809FBAFD30E336903D08C1B8044AA88949C.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:05 2021
Certificate notAfter: Thu Jul 15 02:00:05 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123861/0/A4FEFDB4BC4820DAE8906C78B46A324C872BDF8E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:00:01 2021
Certificate notAfter: Thu Jul 15 06:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/21/A5E8DB0731D10AC821C1D6329DACFDE419679D86.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:24:00 2021
Certificate notAfter: Thu Jul 15 06:24:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123972/0/A64932C56A5DA5F4A5974B8C7F431AFCC2E45208.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:04 2021
Certificate notAfter: Thu Jul 15 02:00:04 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/113/A6A5D71360DACE4CAD2C2936DB14344B9AAACEC1.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:24:00 2021
Certificate notAfter: Thu Jul 15 02:24:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:28:00 2021
Certificate notAfter: Thu Jul 15 11:28:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/tt1-51/0/A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:34:00 2021
Certificate notAfter: Thu Jul 15 03:34:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/171/AA7DE755165181EE768376D8A9F7480309AD4C2E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:48:00 2021
Certificate notAfter: Thu Jul 15 13:48:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/99/AAC035144EF01FEA05CB97862C36968F2F74B711.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 03:08:00 2021
Certificate notAfter: Thu Jul 15 03:08:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123831/0/AF8C3EDF238BDF876478418FC48E7FCFF1A33803.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:00 2021
Certificate notAfter: Thu Jul 15 15:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/81/AE99F7A676C12B1CEBE350580B4C5CD4AB286B74.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 05:58:00 2021
Certificate notAfter: Thu Jul 15 05:58:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/67/B385A7117D54091430FDA0C9EC823C3F6127140D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:38:00 2021
Certificate notAfter: Thu Jul 15 13:38:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123742/0/B3919F74B2E68185234D70908743FEA094016AFA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:01 2021
Certificate notAfter: Thu Jul 15 07:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/138/B3BA5B0F9C03E715B9833B41F449802A2E0EF17A.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:30:00 2021
Certificate notAfter: Thu Jul 15 17:30:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635212/0/B11613BBAD5E542FA4BE98E52300439F81C6E5C3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123741/0/B1F5DD1EE2CC4C25D89EDC228FEDA81265F83FAE.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/136/B2404A9CE303C57B302A987C082B65545A93D13B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:16:00 2021
Certificate notAfter: Thu Jul 15 17:16:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123691/0/B26B6B99004CC9B4B3A0C5B6E85F5E41E86565FC.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/170/B27835C0416430BB6488B0A9976DDD06DB7C07F7.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:22:00 2021
Certificate notAfter: Thu Jul 15 07:22:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/119/B2F6BD90F42B8808DC04924AED3CDFFE9004EFB9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:50:00 2021
Certificate notAfter: Thu Jul 15 17:50:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/50/B313AE6F32255D0C6CA43A34EC6E149C0EF58C60.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:48:40 2021
Certificate notAfter: Thu Jul 15 15:48:40 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123572/0/B747F92DEEA436510C8B0720624CE19A62BC08F8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:04 2021
Certificate notAfter: Thu Jul 15 02:00:04 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/167/B4371B77201DEE34AC47F1E080DD3468642210D4.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:02:01 2021
Certificate notAfter: Thu Jul 15 06:02:01 2021

rpki-client: rrdp/202bd4f43bc8c2ffd23aefb5c5f62c2d208bf9aa03d4d72e07e3ad458156b708/rpki-rsync.e15f.net/repo/MISAKA-RPKI/1/B44B2B66E96F6786C1A5F004FF57D93BD0090B6D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:30:00 2021
Certificate notAfter: Thu Jul 15 08:30:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/174/B47076935336EB2A6F20687AF653CEA9651BE6D8.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:52:01 2021
Certificate notAfter: Thu Jul 15 08:52:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/157/B4C673CB54E8255AEFC6C52160B9A98B372E0262.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:18:00 2021
Certificate notAfter: Thu Jul 15 06:18:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/137/B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 05:58:00 2021
Certificate notAfter: Thu Jul 15 05:58:00 2021

rpki-client: rrdp/202bd4f43bc8c2ffd23aefb5c5f62c2d208bf9aa03d4d72e07e3ad458156b708/rpki-rsync.e15f.net/repo/MISAKA-RPKI/3/BB7C48166B7DE5DD11F22C18C2DBA9388B46ACB3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:20:00 2021
Certificate notAfter: Thu Jul 15 08:20:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635213/0/BB8EE959FCEF3CFD1F26903BD1C0F26516A6C36E.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123602/0/B8626C25DADB2C2444AF85025ABCD8CD36A3EF20.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123871/0/B89A471DC45B5B4267FAE016AB6E622C8FBDE36D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:03 2021
Certificate notAfter: Thu Jul 15 15:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/139/BA64145A80CFA7C7419F4267577A609757391020.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:42:01 2021
Certificate notAfter: Thu Jul 15 17:42:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/147/BAF16081F99F9D082AFFA5BCF0A3708BB7557098.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:52:00 2021
Certificate notAfter: Thu Jul 15 02:52:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 16:00:00 2021
Certificate notAfter: Thu Jul 15 16:00:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/58/BCAED5F08757228C01C24880ADC8A9C62162E8D9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 13:06:00 2021
Certificate notAfter: Thu Jul 15 13:06:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635374/0/BCF6CA432AEFBCF505BFC4FCCACCF45C251EA236.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:03 2021
Certificate notAfter: Thu Jul 15 07:00:03 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1204241/0/BE1A7AB2EE112F84A3F9811657DB822FDAB7EA16.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:00:02 2021
Certificate notAfter: Thu Jul 15 15:00:02 2021

rpki-client: rrdp/202bd4f43bc8c2ffd23aefb5c5f62c2d208bf9aa03d4d72e07e3ad458156b708/rpki-rsync.e15f.net/repo/MISAKA-RPKI/5/C38D503EE789AE2ECB0EE9AECE73B11D38EB288D.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:20:00 2021
Certificate notAfter: Thu Jul 15 08:20:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123962/0/C0A01CBA0AE7BA83D9DD2BEF14A8E34C4A413C6F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123721/0/C32B801E043D695357982C977967EAAC01FE5FF6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:03 2021
Certificate notAfter: Thu Jul 15 02:00:03 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/78/C33D2418B3C0F42E9804416757714E24A96CA3A9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 14:08:01 2021
Certificate notAfter: Thu Jul 15 14:08:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/133/C78D14202870448E8DB1CBC7B5DEB5CF79208CB9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:16:00 2021
Certificate notAfter: Thu Jul 15 17:16:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/35/C47E96D7581AA7B530AAD4CD249DD55AA4235BC3.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 09:30:02 2021
Certificate notAfter: Thu Jul 15 09:30:02 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635211/0/C4A0ABD2404D307CC21550F5115D03CB375312B2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:00 2021
Certificate notAfter: Thu Jul 15 02:00:00 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635373/0/C4C241C9FE8F5A2D86B6AFC88F04D5CBE3576BA6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:04 2021
Certificate notAfter: Thu Jul 15 07:00:04 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/635232/0/C56882BEEF6F85BCD0FA0656184125D708CE3D33.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:04 2021
Certificate notAfter: Thu Jul 15 02:00:04 2021

rpki-client: rrdp/202bd4f43bc8c2ffd23aefb5c5f62c2d208bf9aa03d4d72e07e3ad458156b708/rpki-rsync.e15f.net/repo/MISAKA-RPKI/6/C64C7FD841B8BC78583062EEAD5157A59EC3A182.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:10:00 2021
Certificate notAfter: Thu Jul 15 08:10:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/121/C72B5B9CE9D2A9118B420E77E13499EE0F0CBDA6.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:04:00 2021
Certificate notAfter: Thu Jul 15 02:04:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/144/CBC876DDFB2981E2765311E513E90894C91611F2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:24:00 2021
Certificate notAfter: Thu Jul 15 02:24:00 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/94/C864CECFC2F1B959551A17962994DECF61213298.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:36:01 2021
Certificate notAfter: Thu Jul 15 02:36:01 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/34/C87179C1501E173869629BE525AFD3206B2588D9.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:56:00 2021
Certificate notAfter: Thu Jul 15 02:56:00 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/33/C9786D63C87D85D441146724ECFAC93527EF6FD5.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 10:00:02 2021
Certificate notAfter: Thu Jul 15 10:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:30:01 2021
Certificate notAfter: Thu Jul 15 17:30:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123984/0/CD16E8ED604F0B30A17C7FC5181800BB4672AA19.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/fa54b08b53fd52fc4d336806bfe9f1cfebd943bb71d5c4a36eb7629c69031b21/rpki1.terratransit.de/repo/TerraTransit/49/CEA0C3CF3CC202205D896F10A8CABF07FF1E5895.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:50:01 2021
Certificate notAfter: Thu Jul 15 12:50:01 2021

rpki-client: rrdp/91e3e19cafb7ee175588222937d204265ba7f108c73672c1a11a311e3466c2df/nostromo.heficed.net/repo/1123986/0/C8440003E9762D35DD78D4D41DF524E7FD49D68F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:00:02 2021
Certificate notAfter: Thu Jul 15 07:00:02 2021

rpki-client: rrdp/4ef50f74739587a1a351febfb29ed7dee43d20a3ce1afa2217455f815f47e559/rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 17:46:00 2021
Certificate notAfter: Thu Jul 15 17:46:00 2021

rpki-client: rrdp/671750482f65ee15d8b52820215c643292e3823c700382e474ca6c30ce9bdf94/rsync.rpki.blade.sh/repo/Blade/0/407047ADB0ABA85AE234970052228E9B1F0239E2.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 08:18:00 2021
Certificate notAfter: Thu Jul 15 08:18:00 2021

rpki-client: rrdp/f6a694168e8f80dca1191e86fda5d09a71ff95347426136d387c2b1ae769ef5f/rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:40:00 2021
Certificate notAfter: Thu Jul 15 11:40:00 2021

rpki-client: rrdp/f6a694168e8f80dca1191e86fda5d09a71ff95347426136d387c2b1ae769ef5f/rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:56:01 2021
Certificate notAfter: Thu Jul 15 06:56:01 2021

rpki-client: rrdp/e7f341c938b6f9332d4cd50816aed016a3fd5ad554d63d1c99895e9c6a7d1694/rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 12:00:00 2021
Certificate notAfter: Thu Jul 15 12:00:00 2021

rpki-client: rrdp/f6a694168e8f80dca1191e86fda5d09a71ff95347426136d387c2b1ae769ef5f/rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:56:01 2021
Certificate notAfter: Thu Jul 15 06:56:01 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:58:16 2021
Certificate notAfter: Thu Jul 15 02:58:16 2021

rpki-client: rrdp/12b59c119c5956616eb2d8f0b85a6713a46372ff6f28fbf4a9a9eb3072a07a58/rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:10:02 2021
Certificate notAfter: Thu Jul 15 07:10:02 2021

rpki-client: rrdp/f6a694168e8f80dca1191e86fda5d09a71ff95347426136d387c2b1ae769ef5f/rpki.sub.apnic.net/repository/A91905300000/1/4A19DB1BBDB332C4EC1079728213C2E58ED7DE56.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 06:54:01 2021
Certificate notAfter: Thu Jul 15 06:54:01 2021

rpki-client: rrdp/b7d09bd965bdf12facac67f95443d33dc69d215ed03cdff8c06a10c07e20d5a3/rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Sat Jul 10 14:28:59 2021
Certificate notAfter: Thu Sep 30 00:00:00 2021

rpki-client: rrdp/b7d09bd965bdf12facac67f95443d33dc69d215ed03cdff8c06a10c07e20d5a3/rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Sat Jul 10 15:39:01 2021
Certificate notAfter: Thu Sep 30 00:00:00 2021

rpki-client: rrdp/b7d09bd965bdf12facac67f95443d33dc69d215ed03cdff8c06a10c07e20d5a3/rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Sat Jul 10 15:39:01 2021
Certificate notAfter: Thu Sep 30 00:00:00 2021

rpki-client: rrdp/0490c1fe6e4d4ae5cc354948115ff5751c104eedc561c193af7ec5b93d3a7d80/sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 07:26:00 2021
Certificate notAfter: Thu Jul 15 07:26:00 2021

rpki-client: rrdp/4e1351660a022d4c670344b0717bab21468f628a04588d618d0165784babf150/repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 11:00:00 2021
Certificate notAfter: Thu Jul 15 11:00:00 2021

rpki-client: rrdp/4e1351660a022d4c670344b0717bab21468f628a04588d618d0165784babf150/repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 02:00:01 2021
Certificate notAfter: Thu Jul 15 02:00:01 2021

rpki-client: rrdp/4e1351660a022d4c670344b0717bab21468f628a04588d618d0165784babf150/repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Fri Jul  9 15:33:40 2021
Certificate notAfter: Thu Jul 15 15:33:40 2021

rpki-client: rsync/rpki-repository.nic.ad.jp/ap/A91A73810000/F-TkmJq5ThVb8f2By1hVIMq_0zc.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul 15 02:50:50 2021
Certificate notAfter: Sat Jul 30 00:00:00 2022

rpki-client: rsync/rpki-repository.nic.ad.jp/ap/A91A73810000/oWhEB7GUTj5ZqlXo7X2VbNrJ9xw.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Mon Jul 12 05:07:07 2021
Certificate notAfter: Sat Jul 30 00:00:00 2022

rpki-client: rsync/rpki-repository.nic.ad.jp/ap/A91A73810000/V9yZdt-1j-vKv_Awu9S_t5Lpfg8.mft: draft-ietf-sidrops-6486bis-05: unequal thisUpdate notBefore
eContent thisUpdate:   Thu Jul  8 16:14:16 2021
Certificate notBefore: Wed Jun 16 04:08:52 2021

rpki-client: rsync/rpki-repository.nic.ad.jp/ap/A91A73810000/U0ElRP4CPi5oGQIYxQ_lWFazoLk.mft: draft-ietf-sidrops-6486bis-05: unequal thisUpdate notBefore
eContent thisUpdate:   Thu Jul  8 16:09:17 2021
Certificate notBefore: Wed Jun 16 04:08:11 2021

rpki-client: rrdp/b8f24a9d701c0fa9bc46d97164baf1c97cc608a7211b021a0cc972ea5bfcd2ac/rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul  8 22:06:29 2021
Certificate notAfter: Thu Sep 30 00:00:00 2021

rpki-client: rrdp/b8f24a9d701c0fa9bc46d97164baf1c97cc608a7211b021a0cc972ea5bfcd2ac/rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft: draft-ietf-sidrops-6486bis-05: unequal nextUpdate notAfter
eContent nextUpdate : Thu Jul  8 23:36:36 2021
Certificate notAfter: Thu Sep 30 00:00:00 2021

---

From: Tim Bruijnzeels <[email-masked]>
Date: Fri, 9 Jul 2021 12:39:48 +0200

Hi Job, all,

> On 8 Jul 2021, at 20:09, Job Snijders <job=[email-masked]> wrote:
> 
> Hi all,
> 

Indeed, I mentioned that Krill is doing it wrong (or well following earlier discussions but let's not dwell).

The fix is in the 0.9.1-dev branch but will take time to be deployed. There may also be other CA implementations which are affected by this. Though generally speaking hosted CA services could re-issue all their objects without the need for users of the service to upgrade.

> eContent, and merely recommend to align the two...

It may be appropriate to differentiate between what a CA MUST or SHOULD do and what an RP MUST reject.

What I am after is that I think:
- a CA SHOULD (not MUST) have a validity period that coincides with the interval from thisUpdate to nextUpdate
- an RP MUST reject a manifest if:
    - thisUpdate is after now
    - nextUpdate is before now
    - EE not-before is after now
    - EE not-after is before now

One other note. NTP not being as perfect as we would like, I would advise backdating the 'thisUpdate' and not before a tiny bit, say 5 minutes. 

Kind regards,

Tim

> _______________________________________________
> Sidrops mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/sidrops

---

From: Job Snijders <[email-masked]>
Date: Fri, 9 Jul 2021 12:59:37 +0200

Hi,

On Fri, Jul 09, 2021 at 12:39:48PM +0200, Tim Bruijnzeels wrote:
> Indeed, I mentioned that Krill is doing it wrong (or well following
> earlier discussions but let's not dwell).
> 
> The fix is in the 0.9.1-dev branch but will take time to be deployed.
> There may also be other CA implementations which are affected by this.
> Though generally speaking hosted CA services could re-issue all their
> objects without the need for users of the service to upgrade.

Other CA implementations also appear impacted. What I meant with 'not
operationally feasible' is that we'd have to wait for all CAs to be
upgraded, then to upgrade all RPs to add the '-05 check', and all this
work would take place merely to decrease CRL traffic.

If we are looking to decrease traffic, I'd first remove XML from RRDP as
that appears a 50% bloat compared to using DER as container :-)

Given the sheer amount of upgrade work, and the particular order 'first
CA' -> 'then RP', I just don't see the current text as feasible.

>     - EE not-after is before now

You'll also want to check if nextUpdate is not before thisUpdate!

The below link shows how rpki-client validates thisUpdate and
nextUpdate:

https://github.com/openbsd/src/blob/01ae73c5eb2d059ceb1d1734f72282cefb78d440/usr.sbin/rpki-client/mft.c#L82-L120

> One other note. NTP not being as perfect as we would like, I would
> advise backdating the 'thisUpdate' and not before a tiny bit, say 5
> minutes. 

Can you elaborate on your concern related to NTP and the need for
backdating?

I suspect that in this context it might not be needed to document such a
recommendation given that the WG appears to have agreed that polling
more frequently than once every ten minutes shouldn't happen, and the
publication server usually has some delays here and there in the
pipeline anyway (such as copying newly issued objects into a spool
directory).

Promoting the concept of backdating will probably bite us when we get a
proper Certificate Transparency project on the road. I expect that the
log operators and the certificate issuers will have their clocks synced
well within 5 minutes of slack.

Kind regards,

Job

---

From: Ties de Kock <[email-masked]>
Date: Fri, 9 Jul 2021 13:14:15 +0200

Hi Job,

> On 9 Jul 2021, at 12:59, Job Snijders <job=[email-masked]> wrote:
> 
> Hi,
> 

I would suspect that Tim’s concern is that a certificate is effectively published
and read by an RP before its validity period starts according to the local clock
of the RP.

I have encountered this when using a VM where the clock had drifted.

I would expect that there is a fair amount of clock drift between RPs and issuing
at the ‘current’ time gives a risk of objects being rejected by (a few) RPs.
> well within 5 minutes of slack.

As far as I know backdating a tiny bit is common for web CAs (where CT
is common).

I could not quickly find a statement on “notBefore < now” in
the CAB forum guidelines, but backdating is on the list of problematic
practices of Mozilla [0] except for technical compatibility reasons - which this
five minute window is in my opinion.

When CT is used. I would encourage CT logs to only issue a SCT for a
pre-certificate that has a “reasonable” validity period - I could see, and
would encourage, both limitations on notBefore and validity period being
enforced there.

Kind regards,
Ties

[0]: https://wiki.mozilla.org/CA/Forbidden_or_Problematic_Practices#Backdating_the_notBefore_Date

---

From: Job Snijders <[email-masked]>
Date: Fri, 9 Jul 2021 13:24:38 +0200

On Fri, Jul 09, 2021 at 01:14:15PM +0200, Ties de Kock wrote:
> I would suspect that Tim’s concern is that a certificate is
> effectively published and read by an RP before its validity period
> starts according to the local clock of the RP.
> 
> I would expect that there is a fair amount of clock drift between RPs
> and issuing at the ‘current’ time gives a risk of objects being
> rejected by (a few) RPs.

I would argue that's the type of problem those few RPs need to overcome
themselves If the RP clock is wrong, the RP clock is wrong, which (in my
opinion) is not something the CA should try to resolve on their side. :-)

Even if the RP rejects some objects (because the RP's clock drifted),
the chances of the RP accepting the objects at the next validation run
are very high, because the RP will come back in 10 to 60 minutes.

Backdating to me seems a practic that'll cause confusion down the road,
and without backdating time-drifted RPs are likely to pick up the
objects a few minutes later anyway. Any log messages about 'not yet
valid objects' might help encourage the RPKI operator to fix their
clock. Masking such error messages through backdating is not entirely
helpful.

Where in WebPKI there might be an incentive for slight backdating (even
though it is consider a bad practise), inherent in the application of
the TLS technology stack there is no requirement 'to try again later',
in the RPKI technology stack we have clear requirements and expectations
about RPs periodically polling the CA repositories. This difference in
application and difference in timing parameters prompts me to caution
against backdating.

Kind regards,

Job

---

From: Julian Reschke <[email-masked]>
Date: Fri, 9 Jul 2021 13:31:01 +0200

Am 09.07.2021 um 12:59 schrieb Job Snijders:
> ... > If we are looking to decrease traffic, I'd first remove XML from RRDP as
> ...

1) Even with Content-Coding gzip?

2) How many RRDP requests are currently 304s, or could be 304s if
clients and servers would take advantage of it?

Best regards, Julian

---

From: Stephen Kent <[email-masked]>
Date: Fri, 9 Jul 2021 14:04:01 -0400

Job,
> count from ~ 263,175 down to ~ 209,931.
I am impressed by the work you did to discover which CAs are issuing EE 
certs for manifests that would not comply with the proposed changes. 
However, as Tim noted in his response, his CA code fails to follow the 
existing spec, so we should assume that there will need to a a gradual 
transition to a new, more restrictive spec. thus, saying that the 
proposed spec is "not operationally feasible" is an overstatement.

Nonetheless, I am open to suggestions on what we choose to mandate (vs. 
recommend) in terms of CA behavior, and to what extent we require (v.s 
recommend) that RPs check to see if CAs are following any new specs.

Steve

---

From: Stephen Kent <[email-masked]>
Date: Fri, 9 Jul 2021 14:28:50 -0400

Tim,
> The fix is in the 0.9.1-dev branch but will take time to be deployed. There may also be other CA implementations which are affected by this. Though generally speaking hosted CA services could re-is…
Good point.
> It may be appropriate to differentiate between what a CA MUST or SHOULD do and what an RP MUST reject.

I agree in principle, but we have lots of experience in the IETF (not 
just in SIDROPS) that when a client of a protocol fails to enforce a 
constraint that a peer should have followed, we are endorsing 
non-compliance.

> - a CA SHOULD (not MUST) have a validity period that coincides with the interval from thisUpdate to nextUpdate

First, I think you intended to write " - A CA SHOULD issue an EE cert 
for use with a manifest that ..." We ought to use the term SHOULD 
instead of MUST when we can describe circumstances that reasonably 
preclude adhering to the more stringent constraint. What circumstances 
would we cite as reasonable for a CA to not align these times?

>      - nextUpdate is before now
this is already stated in Section 6.3
>      - EE not-after is before now
The two checks immediately are required for any RP in any PKI, 
consistent with RFC 5280. We can reiterate this, but I don't want to 
restate all of the other checks an RP is expected to perform on a cert.
> One other note. NTP not being as perfect as we would like, I would advise backdating the 'thisUpdate' and not before a tiny bit, say 5 minutes.

I can modify the text to refer to this as a spec for version 1 (vs. 0) 
manifests, if folks want to adopt this approach to aid transition to 
more stringent CA and RP requirements.

Steve

---

From: Job Snijders <[email-masked]>
Date: Sat, 10 Jul 2021 00:00:53 +0200

On Fri, Jul 09, 2021 at 02:28:50PM -0400, Stephen Kent wrote:
> manifests, if folks want to adopt this approach to aid transition to more
> stringent CA and RP requirements.

I would like to suggest to not deploy the innate 'version' feature
aspect of RPKI objects, when it concerns the Manifest object, for this
purpose.

The community lacks experience with this type of transition mechanism,
and I suspect some RPs will not be able to parse the eContent when they
stumble upon a version field, even when it is set to 1. 

Given that CA's in their SIA currently can't point to two different
Manifest objects, unless a new accessDescription element for the
id-ad-rpkiManifest accessMethod is introduced. At that point CAs would
be doubly publishing Manifests (v0 + v1)... all to reduce some potential
churn in the CRL space.

If the objective only is to reduce CRL growth, the paragraph must be
written in a way that makes it clear it only applies to certificate
issuers, and is for their own benefit. 

I propose this text for Section 4.2.1 second paragraph:

"""
   When signing a manifest, it is RECOMMENDED to use an "one-time-use"
   keypair. The EE certificate SHOULD have a validity period that
   coincides with the interval from thisUpdate to nextUpdate in the
   manifest, to prevent needless growth of the CA's CRL.
"""

Kind regards,

Job

---

From: Russ Housley <[email-masked]>
Date: Sat, 10 Jul 2021 12:01:32 -0400

> On Jul 9, 2021, at 6:00 PM, Job Snijders <job=[email-masked]> wrote:
> 

Job:

The point of the version field is to help know what to do when you stumble.

Russ

---

From: Job Snijders <[email-masked]>
Date: Sat, 10 Jul 2021 19:39:42 +0200

> The point of the version field is to help know what to do when you

Who is it helping know and in what way? I'm not sure what to make of
your point. Perhaps I lack understanding.

A deployed RP unaware of 'draft-ietf-sidrops-6486bis-version', will when
validating a MFT object in which the 'version' field exists and is set
to 1, consider the manifest malformed (because RFC 6486 4.2.1 'MUST be 0').
It'll log an error along the lines of "object invalid: invalid version".
RFC 6486 4.4 again repeats "MUST check version of the rpkiManifest is 0"

In practise this means the error condition is detected by counting the
number of elements in the Manifest SEQUENCE, because according to X.690,
section 11.5: "The encoding of a set value or a sequence value shall not
include an encoding for any component value which is equal to its
default value."

The deployed unaware RP cannot recover this situation, it has to
consider the publication point 'distrusted' The RP is not aware that new
RFC specifications exist which define the version field and redefine
some of the rules related to the object profile, the RP expects only 1
Manifest per Publication Point (because thats what then-current specs
specified)

The CAs cannot know how many deployed unaware RPs are out there.

To make the dialogue more generic: in the case of the ROA or GBR
profile, the existence of a new version of the ROA object profile likely
can be managed to some degree. CAs could publish the two profiles next
to each other as separate objects on a Manifest for a period of time. In
such a situation older RPs would will ignore (error) on the newer
version objects, and new RPs will know how to deal with the situation.
Still a tricky migration strategy because dual-publishing in the same
PKI tree is not efficient.

Migrating to new codepoints always is challenging, especially when there
is no ability to perform any form of negotiation between CA and RP.
(unless a new accessDescription element for the id-ad-rpkiManifest
accessMethod is introduced towards a repo with newly formatted objects).

Kind regards,

Job

---

From: Stephen Kent <[email-masked]>
Date: Sat, 10 Jul 2021 14:56:47 -0400

Job,
> I would like to suggest to not deploy the innate 'version' feature 

As a native speaker of English I would not use the word "innate" in this 
context, but ...

> stumble upon a version field, even when it is set to 1.
In the IETF we usually employ a version number change to facilitate a 
transition to a new format, or to accommodate a change in the rules for 
processing an existing object. If RP software can't deal with a change 
of version number for an object, the RP software is seriously deficient.
> be doubly publishing Manifests (v0 + v1)... all to reduce some potential

I agree that a CA cannot point to two different manifests at the same 
time, using existing the existing SIA format. However, that does not 
mean that it's impossible to transition to a new manifest format. The 
CA  key rollover procedure, described in RFC 6489 describes a process 
which would allow a phased transition of a new manifest format.

> issuers, and is for their own benefit.

The objective of the proposed changes is to clarify how RPs should 
process manifests, given the ambiguity in the original specs and the 
recent decision to mandate use of single-use EE certs, etc. Reducing CRL 
churn is a desirable side-effect, as it reduces the frequency of RP 
accesses to repositories, and work for RPs, in general, thus it is not 
only for the benefit of CAs.

Steve

---

From: Tim Bruijnzeels <[email-masked]>
Date: Mon, 12 Jul 2021 09:41:48 +0200

> On 10 Jul 2021, at 00:00, Job Snijders <job=[email-masked]> wrote:
> 

This text for 4.2.1 works for me. I think the SHOULD is appropriate because of existing deployment where this restriction was not present. Furthermore, while shortening the lifetime will help to keep the CRLs a bit shorter (in case of Krill 1 previous MFT EE revocation entry instead of 10, bear in mind there might be other entries for ROAs, certs..), I think this gain is marginal. I do not see how the security aspects are changed here, it just saves a small number of cycles.

Furthermore, I fail to see why a version increment of the manifest would be needed in this context. Before discussing the 'how' of such a transition I think the 'why' should be clear.

Kind regards,

Tim

---

From: Stephen Kent <[email-masked]>
Date: Mon, 12 Jul 2021 09:32:39 -0400

Tim,
> This text for 4.2.1 works for me. I think the SHOULD is appropriate because of existing deployment where this restriction was not present.

It doesn't work for me ;-).

No CA indicated that they generated multi-use EE certs for manifests, 
and all the RIR CAs confirmed that they employ single-use EE certs for 
manifests. This argues for a MUST, not a SHOULD.

> Furthermore, while shortening the lifetime will help to keep the CRLs a bit shorter (in case of Krill 1 previous MFT EE revocation entry instead of 10, bear in mind there might be other entries for ROAs, certs..), I think this gain is marginal. I do not see how the security aspects are changed here, it just saves a small number of cycles.
You said earlier that you have no data indicating how often a manifest 
is issued to accommodate a change in signed products, other than CRLs. 
Thus your comment seems to be based on a perception, but not 
substantiated by any data.
> Furthermore, I fail to see why a version increment of the manifest would be needed in this context. Before discussing the 'how' of such a transition I think the 'why' should be clear.

A version number change is always used whenever formats change, and 
generally used when processing is changed in a way that would impact 
interoperability, e.g., RPs would reject published, signed objects.

So, for example, if we require CAs to use one-time EE certs, no version 
number change is needed for manifests, because an RP was required to 
accept either one-time or multi-use EE certs in this context, and there 
was no requirement for the RP to try to check which type was employed.

If we were to require CAs to align the manifest EE cert validity 
interval with the manifest update interval, this too would not require a 
version number change, UNLESS we mandate RP checking of this alignment. 
If we say that a CA SHOULD align these dates, then we can't require RPs 
to check that, so, again, no need for a version number change.

Steve

---

From: Tim Bruijnzeels <[email-masked]>
Date: Mon, 12 Jul 2021 16:32:49 +0200

> On 12 Jul 2021, at 15:32, Stephen Kent <stkent=[email-masked]> wrote:
> 
> Tim,
>> ...
> No CA indicated that they generated multi-use EE certs for manifests, and all the RIR CAs confirmed that they employ single-use EE certs for manifests. This argues for a MUST, not a SHOULD.

I can also live with a MUST, my motivation for the SHOULD was because it was implied by Job (if I understood correctly) that RPs would take this MUST for CAs as ground to reject any manifest where these times are not aligned.

As long as RPs do not reject based on this, but use the already defined checks for thisUpdate, nextUpdate, not before and not after, then I am fine with the MUST for the CAs.

> You said earlier that you have no data indicating how often a manifest is issued to accommodate a change in signed products, other than CRLs. Thus your comment seems to be based on a perception, but not substantiated by any data.

Indeed this is a feeling, I did not do the analysis yet.

I have some ideas about how to do this (essentially gather and parse RRDP deltas), but no time yet. If anyone else wants to have a go that would also be appreciated.

> A version number change is always used whenever formats change, and generally used when processing is changed in a way that would impact interoperability, e.g., RPs would reject published, signed objects.
> 
> So, for example, if we require CAs to use one-time EE certs, no version number change is needed for manifests, because an RP was required to accept either one-time or multi-use EE certs in this context, and there was no requirement for the RP to try to check which type was employed.
> 
> If we were to require CAs to align the manifest EE cert validity interval with the manifest update interval, this too would not require a version number change, UNLESS we mandate RP checking of this alignment. If we say that a CA SHOULD align these dates, then we can't require RPs to check that, so, again, no need for a version number change.

Ok, I think I was confused then. I thought you were implying that we should change the version. If we don't then this is much easier.

Thanks
Tim