
$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft
File: ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft (raw, json)
Hash identifier: cvGtQJ4PD2HG2p3G5Yhzae/DTB5CFddUVNuyUFQEdrw=
Subject key identifier: B0:47:46:A7:D1:7C:D6:F6:7D:F3:7E:38:4E:96:53:71:C1:D5:07:3D
Authority key identifier: AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40
Certificate issuer: /CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40
Certificate serial: 2EC012B54C6EEB54DB6AA0294E739553B63EB7EC
Authority info access: rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer
Subject info access: rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft
Manifest number: 9F
Signing time: Tue 04 Nov 2025 15:08:46 +0000
Manifest this update: Tue 04 Nov 2025 15:03:46 +0000
Manifest next update: Wed 05 Nov 2025 17:47:46 +0000
Files and hashes: 1: 326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (hash: Eg5srRiirzi2SKwG4qxjpV15+yKIPOzSmbyRqjnR5WA=)
2: ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl (hash: kEFI9VjyvnozybJs0YHuRhAJ0msYM1TCp7L/nUbdL4M=)
Validation: OK
Signature path: rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl
rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft
rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer
rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c0:12:b5:4c:6e:eb:54:db:6a:a0:29:4e:73:95:53:b6:3e:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40
Validity
Not Before: Nov 4 15:03:46 2025 GMT
Not After : Nov 5 17:47:46 2025 GMT
Subject: CN=B04746A7D17CD6F67DF37E384E965371C1D5073D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:7f:58:45:bc:9a:25:46:d0:d4:44:43:ca:
4c:b9:f7:69:d7:33:d5:74:e1:f2:1a:40:dc:a0:a7:
c6:65:c6:de:3f:55:53:18:9b:9f:a1:dc:8e:ff:5d:
66:9d:25:b4:f0:bb:b3:d0:c4:7d:1b:f3:7c:a2:75:
3f:6e:7f:6c:a2:7c:f3:ad:a8:fa:04:55:79:ec:bb:
c5:6e:f2:24:ba:97:10:1a:bc:a1:80:8a:ab:45:50:
64:54:de:d0:80:de:0e:64:db:ec:57:b2:0c:7a:7a:
11:9a:43:e1:8c:b9:55:6f:14:b8:e2:b2:8b:3c:fd:
c8:28:b2:9a:02:72:99:58:eb:d8:be:66:c3:dc:59:
e8:c0:76:6b:ee:42:9f:6a:ce:69:3b:61:bc:1f:25:
1e:d2:52:81:7b:1b:5d:95:e4:89:c6:44:33:16:01:
db:3c:f5:a8:d2:e4:ec:79:a4:63:92:6e:be:cc:75:
dc:0d:04:7c:e9:fe:18:48:6f:0f:15:ad:47:b3:bf:
44:2d:61:27:9a:4a:1e:ee:ed:b7:fc:6d:6b:91:ef:
41:3f:41:09:b3:7f:2b:58:f3:c6:1a:7f:a6:97:9f:
95:85:36:b2:7d:8a:bf:e0:69:ca:08:f9:a1:70:ab:
52:15:85:1e:bf:52:18:e6:9d:f4:ed:f7:85:2a:cc:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:46:A7:D1:7C:D6:F6:7D:F3:7E:38:4E:96:53:71:C1:D5:07:3D
X509v3 Authority Key Identifier:
keyid:AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer
Subject Information Access:
Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:58:b7:e6:39:1f:62:81:f2:42:ef:03:70:c7:df:23:38:
bc:c1:27:ad:a8:ce:d3:d6:69:56:66:3e:2a:2f:b2:a8:70:d2:
6d:e0:ea:1f:db:c7:2c:d5:1e:a4:3b:28:65:64:95:4c:4d:2b:
90:d0:73:3d:4e:f6:98:c5:50:14:7f:de:23:5b:08:0f:97:f1:
88:5c:2d:f2:f9:7f:1d:9a:fb:43:fd:ff:d7:e1:18:96:57:d1:
9b:e7:d9:da:e6:09:0f:90:55:ba:f4:e6:e0:07:1a:c5:0f:b2:
80:8c:b3:d0:a4:0a:6c:e2:cc:c0:49:8e:10:52:80:e9:3c:ba:
65:da:86:e3:83:43:3d:21:22:27:b9:c3:08:b6:f3:ba:e9:82:
1c:b1:9f:b3:e6:d1:ad:22:c3:d5:ce:e8:4f:20:ee:75:8c:97:
bd:f3:8d:0f:0e:9d:04:54:fb:dc:f5:de:e9:94:b8:38:3a:dc:
8a:47:e6:0a:64:d2:d8:75:44:90:9b:0f:d4:ad:d2:9d:42:0a:
44:67:99:6e:43:45:37:a5:ea:84:81:5a:df:04:f7:d9:ce:a7:
03:c4:70:f1:38:38:5e:e5:b3:5c:55:8f:90:2b:d7:7a:63:e6:
1b:e8:47:99:e0:87:0a:23:df:52:55:65:c4:84:58:30:13:32:
60:ce:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:54:33 2025 by rpki-client