
$ rpki-client -vvf krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft
File: 953F58832273DFD14187910ADCB3972B70B9BD3A.mft (raw, json)
Hash identifier: iDocgHUQFpbokGrx0WBYzdqj4Z7e7fwINFO24AzzCFk=
Subject key identifier: CF:D8:E6:8D:6F:0C:B5:CD:8E:6C:32:A4:47:B2:1D:DF:DA:CD:67:72
Authority key identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A
Certificate issuer: /CN=953F58832273DFD14187910ADCB3972B70B9BD3A
Certificate serial: 713FF7F3BC742E335B544EA6640CD2FB4344EB4B
Authority info access: rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
Subject info access: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft
Manifest number: 47
Signing time: Fri 17 Apr 2026 09:13:20 +0000
Manifest this update: Fri 17 Apr 2026 09:08:20 +0000
Manifest next update: Sat 18 Apr 2026 09:45:20 +0000
Files and hashes: 1: 326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa (hash: HcaRJrqt46U5y6uERiSMiBPPn6NWtH+Sf2e1pKTXtm4=)
2: 326130613a363034353a636530303a3a2f34302d3438203d3e20323030313630.roa (hash: hh350u76l+iJ1oBrj2M0JfCFJysLphQG1jRv54eZW3U=)
3: 326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa (hash: UIdyyXR0S2bMgGEjmuwln+NkXK9hjAR8o+mH7WTeK74=)
4: 953F58832273DFD14187910ADCB3972B70B9BD3A.crl (hash: onnKggfQFnjb9zyRe66RtgKrfSJJjYBIW2ThglhV098=)
Validation: OK
Signature path: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl
rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft
rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl
rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3f:f7:f3:bc:74:2e:33:5b:54:4e:a6:64:0c:d2:fb:43:44:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953F58832273DFD14187910ADCB3972B70B9BD3A
Validity
Not Before: Apr 17 09:08:20 2026 GMT
Not After : Apr 18 09:45:20 2026 GMT
Subject: CN=CFD8E68D6F0CB5CD8E6C32A447B21DDFDACD6772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:6e:1d:67:52:49:e6:51:d5:15:66:49:86:
55:28:f5:10:8a:b7:43:e9:14:60:4e:23:92:b4:98:
33:94:34:41:c5:f7:89:22:42:76:3e:8b:20:c0:a9:
85:a9:12:e9:76:f9:6f:44:ff:79:6b:3e:07:a2:33:
17:a9:0e:f2:f6:37:89:f2:77:7d:b3:b6:8f:8a:f4:
0e:e5:72:48:ef:ae:20:90:cb:dc:02:a8:a8:28:d3:
ee:00:36:3a:c5:5e:bb:8d:31:15:c4:6e:eb:97:6d:
ec:c2:0c:62:50:08:72:55:d1:3b:27:11:56:82:39:
36:1c:f6:64:fa:b2:a8:cf:81:73:be:89:f6:af:09:
ca:b4:4c:11:2e:6b:68:eb:27:5e:c9:92:12:4e:35:
0e:14:44:78:c5:8f:32:7d:ce:9a:5f:b1:2f:f5:37:
ad:9c:3b:e9:b1:1e:fe:06:1d:fe:c2:ce:bb:c2:42:
a2:b8:99:58:6d:78:94:c8:da:d6:51:45:9f:9e:90:
3e:a8:17:f5:54:47:6b:18:75:53:f9:a3:43:c9:a5:
52:a3:8d:97:8b:f3:06:fd:3a:e0:42:b4:e8:5a:d5:
42:65:dc:5c:40:17:bc:8d:f8:8b:16:81:96:71:d7:
98:f7:d6:96:bc:b1:7d:8d:f9:66:38:92:14:20:9a:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:E6:8D:6F:0C:B5:CD:8E:6C:32:A4:47:B2:1D:DF:DA:CD:67:72
X509v3 Authority Key Identifier:
keyid:95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer
Subject Information Access:
Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:b7:6d:35:77:2f:5b:24:80:30:35:e4:56:56:8f:4d:12:
ae:10:a1:31:d5:09:25:3a:41:96:0d:31:45:61:46:d0:6b:ca:
36:ee:a5:21:d4:5d:e8:56:53:b2:8f:d4:93:02:40:19:6c:ef:
55:e2:a0:db:16:11:a6:50:73:e0:e8:a9:88:e9:73:ad:6f:23:
1c:06:c6:30:43:35:53:5a:ba:e2:b5:3d:e6:90:87:88:d3:15:
9a:2c:11:ec:6a:b2:09:15:c5:da:87:1e:64:ca:ff:c6:9e:a9:
e5:53:9e:4e:f3:b9:c1:72:4e:e8:ed:56:7b:c6:22:64:8f:d7:
b7:15:94:b0:28:1f:d5:fc:32:d2:2a:d2:76:ae:27:0f:ed:c9:
3d:1b:4d:8e:b4:49:67:79:34:7f:59:80:20:42:a5:6d:b7:04:
37:45:3e:46:51:ef:f6:92:cd:48:ba:d2:5a:5b:19:95:1e:22:
60:53:77:5b:2b:29:11:41:37:89:5a:94:d5:ad:b6:67:cf:0a:
10:c1:60:ea:4e:61:59:ef:a5:de:7a:6f:e5:74:1e:ea:d6:83:
06:33:9c:d9:68:b6:94:be:f7:c9:41:6b:2e:10:4e:76:c1:2b:
37:b6:a0:e6:c0:6c:32:b8:49:8c:50:07:74:42:9e:65:f8:46:
fa:3b:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:27 2026 by rpki-client