$ rpki-client -vvf krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft File: 953F58832273DFD14187910ADCB3972B70B9BD3A.mft (raw, json) Hash identifier: nFqQMxFZ90DPJUh0CqI7ymI8xb6/ijfVuvSa46yjxns= Subject key identifier: B3:88:1C:73:3A:61:25:DD:FB:13:AC:11:6A:99:4A:6C:04:EC:FA:15 Authority key identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A Certificate issuer: /CN=953F58832273DFD14187910ADCB3972B70B9BD3A Certificate serial: 66778B49BF222FF9DA0314E069F26F30672812CE Authority info access: rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer Subject info access: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft Manifest number: 20 Signing time: Fri 20 Mar 2026 15:52:59 +0000 Manifest this update: Fri 20 Mar 2026 15:47:59 +0000 Manifest next update: Sat 21 Mar 2026 17:58:59 +0000 Files and hashes: 1: 953F58832273DFD14187910ADCB3972B70B9BD3A.crl (hash: v0hPRzkOMpR8jwmOStx2/c2lwfqUqOk/bfHghxG3+UE=) 2: 326130613a363034353a636530303a3a2f34302d3438203d3e20323030313630.roa (hash: hh350u76l+iJ1oBrj2M0JfCFJysLphQG1jRv54eZW3U=) 3: 326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa (hash: HcaRJrqt46U5y6uERiSMiBPPn6NWtH+Sf2e1pKTXtm4=) 4: 326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa (hash: UIdyyXR0S2bMgGEjmuwln+NkXK9hjAR8o+mH7WTeK74=) Validation: OK Signature path: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 17:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:77:8b:49:bf:22:2f:f9:da:03:14:e0:69:f2:6f:30:67:28:12:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=953F58832273DFD14187910ADCB3972B70B9BD3A Validity Not Before: Mar 20 15:47:59 2026 GMT Not After : Mar 21 17:58:59 2026 GMT Subject: CN=B3881C733A6125DDFB13AC116A994A6C04ECFA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:41:20:d2:0d:02:04:b4:03:e9:bd:9b:f5: f7:58:7d:f4:d3:75:ea:89:90:de:7b:d9:b0:64:7e: 95:e7:83:bd:5e:ac:81:1a:72:14:ab:77:ee:d5:35: ef:45:1e:6c:2a:89:3f:44:d9:db:ed:15:81:3e:52: 87:90:0a:14:43:b5:cf:ca:6b:da:87:90:b2:76:3c: d1:95:7e:36:aa:d6:1d:95:92:b8:1e:bb:30:df:19: f0:e8:11:54:0e:48:69:cf:c6:a0:a2:83:b9:21:fb: 04:31:67:40:5c:e8:35:5d:7e:b0:a8:47:08:bb:ba: 81:f7:42:53:a7:74:6f:cf:0f:9c:a7:46:80:69:2e: 94:b8:16:0f:3f:d8:de:33:fa:e4:82:0b:71:6e:31: e7:1a:eb:df:29:fd:1e:38:0c:b0:67:ba:79:18:53: db:30:28:b3:1f:d5:e0:4e:bd:3b:d2:f0:06:f8:ed: a9:6f:e3:06:72:68:0d:64:45:af:01:6b:a5:be:9a: 0e:0e:b2:93:56:d0:98:3f:5a:0e:cb:ba:d3:5e:f9: 2d:b0:7c:e7:38:4d:dd:37:ed:c6:25:1a:0b:78:d6: 88:65:ee:d2:06:54:2d:1e:2b:f7:34:42:9b:6d:cb: da:b1:ce:a0:46:6c:1d:18:91:aa:23:34:25:04:b6: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:1C:73:3A:61:25:DD:FB:13:AC:11:6A:99:4A:6C:04:EC:FA:15 X509v3 Authority Key Identifier: keyid:95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer Subject Information Access: Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a0:d3:9a:a0:a7:fd:8a:70:c4:a8:22:9f:56:23:35:40:dc: 06:2f:0e:1e:78:4c:dd:dd:39:92:06:35:c2:b8:be:a6:82:47: 7d:6b:83:1b:bf:22:d2:48:8e:3e:3b:7a:32:78:f8:52:a7:24: e3:33:1e:85:ba:3d:a2:f5:be:86:29:09:55:e9:c9:2d:a9:5c: c9:4b:89:c1:62:52:2e:08:0c:b6:a1:df:7c:ba:1f:54:22:d5: da:eb:59:64:e3:96:cc:64:b2:81:6f:16:27:29:25:23:0d:db: 84:d7:5e:f4:27:b5:2a:6a:a5:89:96:2d:96:55:08:7a:e0:4a: 3f:fd:97:39:e1:7b:a2:a7:73:06:49:0d:96:a4:4a:01:f5:9c: 8b:ae:85:da:27:1d:3d:43:85:e4:e2:6a:27:e7:cc:c2:15:c6: 2f:bc:10:4a:10:b9:c7:36:93:d7:ee:9e:cc:07:95:b6:11:ae: c8:a1:ae:56:a7:38:aa:26:88:7d:59:17:6e:f2:68:b3:59:01: 07:49:47:c7:1a:2e:e1:60:5c:a7:35:44:f9:a2:08:d4:aa:50: 27:96:48:99:66:94:31:c8:85:08:be:1b:99:75:c9:96:74:c6: af:8a:eb:3a:6d:b0:5a:9b:52:9f:1f:fd:b5:4b:e8:02:0c:9b: 09:06:fe:ab -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUZneLSb8iL/naAxTgafJvMGcoEs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzRjU4ODMyMjczREZEMTQxODc5MTBBRENCMzk3MkI3 MEI5QkQzQTAeFw0yNjAzMjAxNTQ3NTlaFw0yNjAzMjExNzU4NTlaMDMxMTAvBgNV BAMTKEIzODgxQzczM0E2MTI1RERGQjEzQUMxMTZBOTk0QTZDMDRFQ0ZBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZckEg0g0CBLQD6b2b9fdYffTT deqJkN572bBkfpXng71erIEachSrd+7VNe9FHmwqiT9E2dvtFYE+UoeQChRDtc/K a9qHkLJ2PNGVfjaq1h2VkrgeuzDfGfDoEVQOSGnPxqCig7kh+wQxZ0Bc6DVdfrCo Rwi7uoH3QlOndG/PD5ynRoBpLpS4Fg8/2N4z+uSCC3FuMeca698p/R44DLBnunkY U9swKLMf1eBOvTvS8Ab47alv4wZyaA1kRa8Ba6W+mg4OspNW0Jg/Wg7LutNe+S2w fOc4Td037cYlGgt41ohl7tIGVC0eK/c0Qptty9qxzqBGbB0YkaojNCUEtnlhAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUs4gcczphJd37E6wRaplKbATs+hUwHwYDVR0j BBgwFoAUlT9YgyJz39FBh5EK3LOXK3C5vTowDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuaXBndWEuY29tL3JlcG8vcG9uZ2Vy eS80Lzk1M0Y1ODgzMjI3M0RGRDE0MTg3OTEwQURDQjM5NzJCNzBCOUJEM0EuY3Js MHYGCCsGAQUFBwEBBGowaDBmBggrBgEFBQcwAoZacnN5bmM6Ly9ycGtpLmtvbW9y ZWJpLm5ldHdvcmsvcmVwby9rb21vcmViaS81Lzk1M0Y1ODgzMjI3M0RGRDE0MTg3 OTEwQURDQjM5NzJCNzBCOUJEM0EuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEF BQcwC4ZTcnN5bmM6Ly9rcmlsbC5pcGd1YS5jb20vcmVwby9wb25nZXJ5LzQvOTUz RjU4ODMyMjczREZEMTQxODc5MTBBRENCMzk3MkI3MEI5QkQzQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AJWg05qgp/2KcMSoIp9WIzVA3AYvDh54TN3dOZIGNcK4vqaCR31rgxu/ItJIjj47 ejJ4+FKnJOMzHoW6PaL1voYpCVXpyS2pXMlLicFiUi4IDLah33y6H1Qi1drrWWTj lsxksoFvFicpJSMN24TXXvQntSpqpYmWLZZVCHrgSj/9lznhe6KncwZJDZakSgH1 nIuuhdonHT1DheTiaifnzMIVxi+8EEoQucc2k9funswHlbYRrsihrlanOKomiH1Z F27yaLNZAQdJR8caLuFgXKc1RPmiCNSqUCeWSJlmlDHIhQi+G5l1yZZ0xq+K6zpt sFqbUp8f/bVL6AIMmwkG/qs= -----END CERTIFICATE-----Generated at Sat Mar 21 05:24:53 2026 by rpki-client