$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: wGz0OTKO+65OL9aXTW21cDRMRN2KVxtP0FO6jnXdDWA= Subject key identifier: 7D:35:04:12:03:7D:90:F6:49:BB:C8:AB:46:6A:9E:9E:98:FF:85:96 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 6623AF3879E6A2FAF0B64A5F78640B34B7B5F51B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 70 Signing time: Wed 23 Sep 2026 03:49:40 +0000 Manifest this update: Wed 23 Sep 2026 03:44:40 +0000 Manifest next update: Thu 24 Sep 2026 07:24:40 +0000 Files and hashes: 1: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A=) 2: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) 3: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: yRpVtK9bySTIefWoTIQpxrqogZ9HwF4RianzpXNdTqs=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:23:af:38:79:e6:a2:fa:f0:b6:4a:5f:78:64:0b:34:b7:b5:f5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Sep 23 03:44:40 2026 GMT Not After : Sep 24 07:24:40 2026 GMT Subject: CN=7D350412037D90F649BBC8AB466A9E9E98FF8596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:b2:92:ea:51:a3:ab:1a:a3:f0:4a:13:2c: e7:4b:a4:84:9e:4e:d6:49:db:b5:57:cf:5d:fc:fd: bd:ff:de:44:44:2e:7e:97:94:d0:a8:7e:30:2f:4d: 3b:37:de:68:9b:42:c7:c0:00:30:7d:f0:85:c4:21: c9:35:67:78:79:45:65:e9:2c:01:04:5e:5e:ee:a4: ee:bc:b5:55:f3:d7:d5:72:86:ae:8e:be:c1:5f:52: 24:e7:d8:47:3e:86:71:ab:bf:dd:b4:0b:f5:fc:5e: 5c:53:76:ee:83:c3:03:37:dd:82:06:eb:86:2c:6c: e2:2f:cb:ba:6a:c4:49:bf:94:51:3b:72:3f:19:4c: c1:ef:26:66:8c:66:8f:fe:6e:c6:a7:a1:84:9a:8c: 36:46:93:97:90:ca:20:05:ad:35:49:2d:9d:ae:6c: 6c:76:bd:b6:26:99:7d:a7:b0:53:71:61:5d:b1:b0: e0:a5:95:f9:d8:e6:ef:24:8d:00:7c:18:92:64:03: bc:9e:03:2f:ee:12:f7:e6:df:93:0e:ac:8a:90:85: b0:1b:4d:4f:47:f6:ff:ab:c2:17:5d:c7:e8:6a:5a: 41:4a:d0:e2:de:5b:8f:ff:c0:6f:4a:32:17:de:ab: 90:8b:4c:10:d0:14:15:79:8c:f3:00:5a:f6:f1:0a: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:04:12:03:7D:90:F6:49:BB:C8:AB:46:6A:9E:9E:98:FF:85:96 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0a:8a:44:23:fc:9d:e4:dc:3f:ec:9e:6e:5a:ba:3d:40:d2: 72:2b:6e:bf:47:ca:28:d3:77:d1:39:21:d3:97:20:a3:a2:de: de:b4:1b:45:39:72:47:7d:88:ce:fb:23:90:de:ef:ce:93:9a: 9b:75:a7:1c:a4:18:1a:f1:a2:a5:8b:b4:13:f2:09:ae:eb:5b: b7:a0:7b:de:1e:e9:1e:0f:97:df:e0:f5:ed:9c:fa:28:4a:c6: 41:98:52:94:f6:f5:1a:0b:db:c6:27:b2:a3:7c:75:df:7d:ce: 6f:7e:54:31:bb:48:50:45:dd:0c:fe:c5:b4:c2:61:10:f4:5b: 22:7d:51:ee:7f:76:db:55:fb:4a:b0:93:d6:cf:8c:4c:d2:2d: 32:41:9d:d3:4e:1c:d8:4b:7b:95:42:b1:10:f4:d4:04:4b:23: e5:15:7e:a8:76:81:21:29:60:3c:47:7c:46:c0:07:ad:d1:b6: 29:1e:77:58:67:40:4c:a2:47:54:97:39:4b:68:27:40:38:02: 4e:86:23:9c:19:72:e5:c7:16:e6:d5:29:62:7f:d0:13:8b:85: f9:55:74:43:ef:c0:50:d4:2c:27:e1:a1:b4:86:0a:0d:92:11: 82:5f:19:0f:30:47:4d:68:fb:f7:85:cd:f0:4d:69:26:77:54: 36:6e:30:13 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUZiOvOHnmovrwtkpfeGQLNLe19RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA5MjMwMzQ0NDBaFw0yNjA5MjQwNzI0NDBaMDMxMTAvBgNV BAMTKDdEMzUwNDEyMDM3RDkwRjY0OUJCQzhBQjQ2NkE5RTlFOThGRjg1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4grKS6lGjqxqj8EoTLOdLpISe TtZJ27VXz138/b3/3kRELn6XlNCofjAvTTs33mibQsfAADB98IXEIck1Z3h5RWXp LAEEXl7upO68tVXz19Vyhq6OvsFfUiTn2Ec+hnGrv920C/X8XlxTdu6DwwM33YIG 64YsbOIvy7pqxEm/lFE7cj8ZTMHvJmaMZo/+bsanoYSajDZGk5eQyiAFrTVJLZ2u bGx2vbYmmX2nsFNxYV2xsOCllfnY5u8kjQB8GJJkA7yeAy/uEvfm35MOrIqQhbAb TU9H9v+rwhddx+hqWkFK0OLeW4//wG9KMhfeq5CLTBDQFBV5jPMAWvbxCg8vAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUfTUEEgN9kPZJu8irRmqenpj/hZYwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAK CopEI/yd5Nw/7J5uWro9QNJyK26/R8oo03fROSHTlyCjot7etBtFOXJHfYjO+yOQ 3u/Ok5qbdaccpBga8aKli7QT8gmu61u3oHveHukeD5ff4PXtnPooSsZBmFKU9vUa C9vGJ7KjfHXffc5vflQxu0hQRd0M/sW0wmEQ9FsifVHuf3bbVftKsJPWz4xM0i0y QZ3TThzYS3uVQrEQ9NQESyPlFX6odoEhKWA8R3xGwAet0bYpHndYZ0BMokdUlzlL aCdAOAJOhiOcGXLlxxbm1Slif9ATi4X5VXRD78BQ1Cwn4aG0hgoNkhGCXxkPMEdN aPv3hc3wTWkmd1Q2bjAT -----END CERTIFICATE-----Generated at Wed Sep 23 16:20:23 2026 by rpki-client