$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft File: ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft (raw, json) Hash identifier: pcZ2CdJOylOV3rGyplfKC9CU0UoeNwXvmVJzFfKgYm8= Subject key identifier: BB:80:E5:6A:B8:BA:DB:02:16:A8:85:FC:4A:D4:E3:5E:C6:B8:B4:94 Authority key identifier: AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40 Certificate issuer: /CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40 Certificate serial: 43FFAC1AC1A558A796E3F6EDA109ECCC5B10BF4D Authority info access: rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer Subject info access: rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft Manifest number: 94 Signing time: Mon 27 Oct 2025 10:19:39 +0000 Manifest this update: Mon 27 Oct 2025 10:14:39 +0000 Manifest next update: Tue 28 Oct 2025 10:33:39 +0000 Files and hashes: 1: ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl (hash: nBR+H1Faofa2QSiRkVbyfMgdX6Jvvf3jVu8D+wnI3Ic=) 2: 326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (hash: Eg5srRiirzi2SKwG4qxjpV15+yKIPOzSmbyRqjnR5WA=) Validation: OK Signature path: rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 21:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ff:ac:1a:c1:a5:58:a7:96:e3:f6:ed:a1:09:ec:cc:5b:10:bf:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40 Validity Not Before: Oct 27 10:14:39 2025 GMT Not After : Oct 28 10:33:39 2025 GMT Subject: CN=BB80E56AB8BADB0216A885FC4AD4E35EC6B8B494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:1f:4f:e0:b5:46:ae:a4:97:91:88:aa:ed: 4a:5a:9f:cc:2d:b8:83:44:13:68:2a:d8:c2:5c:e4: c6:ad:01:aa:af:39:0f:f1:04:64:9e:3d:ce:99:23: 60:fe:03:e3:f0:36:42:78:dc:da:d2:c7:e0:d2:0f: d8:46:d5:5e:31:d2:c1:ee:ef:c2:1a:5f:c8:2f:d9: 97:11:19:79:d2:63:17:be:63:2e:1c:be:ce:47:f7: 5e:cb:1b:45:54:8c:6f:8a:e4:2e:86:c3:89:50:df: 92:21:e2:3d:1b:f5:23:bb:7e:05:43:0f:a3:21:96: 6f:01:63:36:45:ad:ef:9b:ca:8a:77:c9:ab:40:6c: b6:da:c9:a6:1a:21:f9:4d:f7:08:d9:05:c4:4a:fd: f1:19:ca:d5:97:a2:43:69:e3:d0:85:a1:c2:b2:bb: 9c:73:3a:d9:76:1a:24:7f:20:d5:79:98:27:a3:36: 75:1f:3f:e6:de:a4:00:e6:e8:14:2f:32:77:73:3a: 57:a0:c9:ce:c1:62:1e:2b:bc:02:0c:53:0d:4b:ae: 1c:b4:39:04:72:cb:76:f8:2a:c7:d0:47:d0:3b:5c: 97:7f:7f:59:20:95:03:9d:b4:e8:05:5c:1b:34:c9: 2f:7c:87:00:4d:63:8c:82:b3:36:67:70:f9:9e:56: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:80:E5:6A:B8:BA:DB:02:16:A8:85:FC:4A:D4:E3:5E:C6:B8:B4:94 X509v3 Authority Key Identifier: keyid:AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer Subject Information Access: Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:79:6c:62:d7:87:28:d5:8e:93:3a:93:b3:21:36:a7:60:a7: 9d:ca:15:d2:67:de:63:16:bb:77:84:b6:ee:2d:f8:00:86:41: 74:ae:84:fa:73:f6:49:f8:24:02:a3:e0:84:75:b2:a0:82:56: 45:a9:c7:5a:2c:95:47:1e:7d:98:cf:7b:0f:82:9c:61:10:21: b9:00:81:7b:8e:2a:57:bb:af:23:2c:7a:23:1d:3f:d8:a9:b5: 37:38:35:4a:ac:aa:07:bc:9b:c4:93:55:44:38:40:fc:33:8e: 91:e5:98:cc:43:d4:d0:67:be:08:c4:d0:ce:be:f7:04:69:73: 02:ca:53:80:b7:08:a9:0f:a7:a0:32:e8:e7:65:3e:bd:54:a0: 30:bb:25:48:d1:bd:cc:04:4b:ae:f9:b1:b9:86:ec:67:5a:ae: ce:21:4f:8b:04:26:c7:56:ef:bc:81:a8:bc:ce:1e:c3:38:69: 7b:08:3e:cf:5e:3f:5f:34:a3:1c:8c:6e:59:7e:82:ed:cb:45: 4e:4c:bc:95:50:2b:54:f1:eb:43:f0:1b:3f:45:fe:4d:c2:a9: 17:30:8e:72:2d:02:0b:65:b9:31:d0:d2:78:e3:09:85:ee:e3: dc:85:fc:2e:e1:45:fa:59:10:aa:4b:fa:9f:d1:2b:43:11:53: 16:a4:41:04 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUQ/+sGsGlWKeW4/btoQnszFsQv00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJDM0YzRjI1N0FCNjJBNUMzRTRGRkI1RkM2NEM1RDJE RjdFQUQ0MDAeFw0yNTEwMjcxMDE0MzlaFw0yNTEwMjgxMDMzMzlaMDMxMTAvBgNV BAMTKEJCODBFNTZBQjhCQURCMDIxNkE4ODVGQzRBRDRFMzVFQzZCOEI0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOh9P4LVGrqSXkYiq7Upan8wt uINEE2gq2MJc5MatAaqvOQ/xBGSePc6ZI2D+A+PwNkJ43NrSx+DSD9hG1V4x0sHu 78IaX8gv2ZcRGXnSYxe+Yy4cvs5H917LG0VUjG+K5C6Gw4lQ35Ih4j0b9SO7fgVD D6Mhlm8BYzZFre+byop3yatAbLbayaYaIflN9wjZBcRK/fEZytWXokNp49CFocKy u5xzOtl2GiR/INV5mCejNnUfP+bepADm6BQvMndzOlegyc7BYh4rvAIMUw1Lrhy0 OQRyy3b4KsfQR9A7XJd/f1kglQOdtOgFXBs0yS98hwBNY4yCszZncPmeVh93AgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUu4Dlari62wIWqIX8StTjXsa4tJQwHwYDVR0j BBgwFoAUq8Pz8lerYqXD5P+1/GTF0t9+rUAwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXov cmVwby9BUzE5OTE3Ny8xL0FCQzNGM0YyNTdBQjYyQTVDM0U0RkZCNUZDNjRDNUQy REY3RUFENDAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6 Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTgvQUJDM0YzRjI1N0FCNjJB NUMzRTRGRkI1RkM2NEM1RDJERjdFQUQ0MC5jZXIwewYIKwYBBQUHAQsEbzBtMGsG CCsGAQUFBzALhl9yc3luYzovL2tyaWxsLmNhLWJjLTAxLnNzbWlkZ2UueHl6L3Jl cG8vQVMxOTkxNzcvMS9BQkMzRjNGMjU3QUI2MkE1QzNFNEZGQjVGQzY0QzVEMkRG N0VBRDQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAQXlsYteHKNWOkzqTsyE2p2CnncoV0mfeYxa7d4S2 7i34AIZBdK6E+nP2SfgkAqPghHWyoIJWRanHWiyVRx59mM97D4KcYRAhuQCBe44q V7uvIyx6Ix0/2Km1Nzg1SqyqB7ybxJNVRDhA/DOOkeWYzEPU0Ge+CMTQzr73BGlz AspTgLcIqQ+noDLo52U+vVSgMLslSNG9zARLrvmxuYbsZ1quziFPiwQmx1bvvIGo vM4ewzhpewg+z14/XzSjHIxuWX6C7ctFTky8lVArVPHrQ/AbP0X+TcKpFzCOci0C C2W5MdDSeOMJhe7j3IX8LuFF+lkQqkv6n9ErQxFTFqRBBA== -----END CERTIFICATE-----Generated at Mon Oct 27 14:56:21 2025 by rpki-client