$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: Z0ikLwRhNgpa4RvJ6ycIDVMASDkqCbHbd+gcLDyjm4E= Subject key identifier: 57:D1:60:FE:E1:06:0A:4A:1E:95:CF:0B:0E:39:14:3C:D3:F4:05:AB Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 4DED2A1D4406404BDF0CC4EE47A7DCEA31E9D380 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 25 Signing time: Tue 28 Jul 2026 10:56:59 +0000 Manifest this update: Tue 28 Jul 2026 10:51:59 +0000 Manifest next update: Wed 29 Jul 2026 14:46:59 +0000 Files and hashes: 1: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A=) 2: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) 3: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: MiXiMX9bTpOK0XgKNIV0DaMX3m9575mTg2E3+ppZbiQ=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ed:2a:1d:44:06:40:4b:df:0c:c4:ee:47:a7:dc:ea:31:e9:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 28 10:51:59 2026 GMT Not After : Jul 29 14:46:59 2026 GMT Subject: CN=57D160FEE1060A4A1E95CF0B0E39143CD3F405AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:b0:a0:67:ff:39:a9:84:7f:aa:0c:5e:46: af:05:d9:e5:1c:02:2a:f2:65:a9:ec:b4:ec:e6:f4: 7f:5d:f2:16:dd:68:9d:6d:af:2a:c0:37:23:a9:9c: 49:19:6a:4a:79:e8:41:a0:8c:53:4d:7e:2f:99:96: 28:cf:e7:73:59:1d:9c:23:29:ca:3d:c8:20:1e:41: c8:fe:0a:2e:7c:2a:0d:9a:d0:c9:84:00:43:e9:33: 85:53:61:80:28:f1:cd:1c:c5:9c:68:e7:cf:6f:e6: be:68:59:1b:7e:4c:04:36:9c:35:31:ed:15:19:8b: 1a:16:2c:d9:c3:40:6e:a6:fa:05:34:f4:78:27:88: 8b:47:33:93:94:1a:d6:ec:13:66:47:90:96:81:a3: 7b:76:05:78:c5:ae:57:98:e2:49:01:25:a7:21:08: ea:d0:82:cf:f8:b4:3b:42:92:ad:ea:f0:2e:40:ec: 4c:a8:54:b7:38:34:41:0b:eb:76:0b:ca:89:f5:35: 3e:fd:b2:c6:8d:fb:e5:9c:c0:a5:ac:d5:dd:48:35: 18:26:16:d2:4d:fc:40:6c:1c:c0:14:ba:6f:8a:dd: 5d:94:31:0f:98:9a:e2:f1:55:b4:52:a4:52:ce:4d: b6:fd:19:1c:7d:ec:d4:b7:05:93:0c:ae:f1:1a:54: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D1:60:FE:E1:06:0A:4A:1E:95:CF:0B:0E:39:14:3C:D3:F4:05:AB X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:db:70:cd:6f:eb:93:6c:cb:49:d4:a7:e9:4e:0f:68:1b:cf: 4f:a3:46:9b:13:7a:c0:f4:b3:48:ba:33:4b:f4:a0:ae:f8:96: dc:5a:2b:80:9e:49:20:07:1d:40:61:d2:f2:14:a0:f8:b0:8b: 4a:87:5e:25:66:bb:09:59:61:b1:08:53:73:50:e3:a1:19:c9: 9e:5d:36:e2:7d:57:86:13:d1:f3:4d:d0:91:5f:ca:5a:04:5b: 73:d6:39:51:fb:7f:da:ab:2b:d0:20:cf:8a:74:e0:d8:6c:d0: 87:4a:e8:39:38:ad:ab:18:7f:14:02:8b:9b:54:e8:5c:9c:0a: 70:41:21:f0:90:7d:6e:d5:34:16:05:6d:49:e7:1b:90:ae:77: 35:51:1b:69:a4:01:5f:78:e9:b4:12:b5:32:c5:d3:83:f0:2f: 3b:8a:61:51:03:de:9a:b8:ff:2f:c6:a2:3c:07:a4:6e:81:70: 1e:fb:f8:a0:e8:c5:4c:e8:5c:c1:d6:1b:5e:89:a6:5c:35:c0: 92:57:6f:c5:71:f1:cd:f7:eb:01:c8:b5:16:89:bd:76:00:e5: ad:ea:7f:3c:af:2b:c3:7a:7a:20:35:38:f6:ff:ce:a2:4c:cd: 49:b8:49:29:93:68:9d:98:cc:57:8c:43:1e:9d:69:91:b5:19: b2:9f:ed:80 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUTe0qHUQGQEvfDMTuR6fc6jHp04AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjgxMDUxNTlaFw0yNjA3MjkxNDQ2NTlaMDMxMTAvBgNV BAMTKDU3RDE2MEZFRTEwNjBBNEExRTk1Q0YwQjBFMzkxNDNDRDNGNDA1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RLCgZ/85qYR/qgxeRq8F2eUc AiryZanstOzm9H9d8hbdaJ1tryrANyOpnEkZakp56EGgjFNNfi+ZlijP53NZHZwj Kco9yCAeQcj+Ci58Kg2a0MmEAEPpM4VTYYAo8c0cxZxo589v5r5oWRt+TAQ2nDUx 7RUZixoWLNnDQG6m+gU09HgniItHM5OUGtbsE2ZHkJaBo3t2BXjFrleY4kkBJach COrQgs/4tDtCkq3q8C5A7EyoVLc4NEEL63YLyon1NT79ssaN++WcwKWs1d1INRgm FtJN/EBsHMAUum+K3V2UMQ+YmuLxVbRSpFLOTbb9GRx97NS3BZMMrvEaVJB5AgMB AAGjggIlMIICITAdBgNVHQ4EFgQUV9Fg/uEGCkoelc8LDjkUPNP0BaswHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCT 23DNb+uTbMtJ1KfpTg9oG89Po0abE3rA9LNIujNL9KCu+JbcWiuAnkkgBx1AYdLy FKD4sItKh14lZrsJWWGxCFNzUOOhGcmeXTbifVeGE9HzTdCRX8paBFtz1jlR+3/a qyvQIM+KdODYbNCHSug5OK2rGH8UAoubVOhcnApwQSHwkH1u1TQWBW1J5xuQrnc1 URtppAFfeOm0ErUyxdOD8C87imFRA96auP8vxqI8B6RugXAe+/ig6MVM6FzB1hte iaZcNcCSV2/FcfHN9+sByLUWib12AOWt6n88ryvDenogNTj2/86iTM1JuEkpk2id mMxXjEMenWmRtRmyn+2A -----END CERTIFICATE-----Generated at Tue Jul 28 15:35:52 2026 by rpki-client