$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: 9yTIDshyCA12QVkc3puxecrqAc2S7Dqq0AO7SXTj0Yw= Subject key identifier: 91:1A:4D:2B:CF:89:89:43:B4:3B:69:51:0B:83:00:0E:B6:36:C5:E5 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 2D48CD20C735540A9D0AD62E2DE6838E4A912D10 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 97 Signing time: Thu 22 Oct 2026 12:59:46 +0000 Manifest this update: Thu 22 Oct 2026 12:54:46 +0000 Manifest next update: Fri 23 Oct 2026 15:46:46 +0000 Files and hashes: 1: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A=) 2: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: XE/xl3hSdRP7V7gSFps79etP6e7QKorR8cA3qexcfnQ=) 3: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 15:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:48:cd:20:c7:35:54:0a:9d:0a:d6:2e:2d:e6:83:8e:4a:91:2d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Oct 22 12:54:46 2026 GMT Not After : Oct 23 15:46:46 2026 GMT Subject: CN=911A4D2BCF898943B43B69510B83000EB636C5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:2f:e4:ca:21:87:4e:01:a5:39:13:48:6d: 85:f7:43:d9:5f:8d:61:65:99:1c:80:06:83:67:4d: 66:a4:6a:8e:10:27:b6:22:45:b0:ab:94:c1:2b:c4: 45:f8:ec:8f:07:06:fa:57:01:62:8b:cc:3f:0a:1b: 58:dd:03:2d:bb:fc:d0:67:58:53:f8:86:80:81:d7: 35:57:fd:80:cd:a7:5a:c7:1a:f4:5f:74:a7:e5:0a: a6:ff:3a:10:7f:44:1b:e6:15:b2:1b:e9:56:11:c8: 14:1f:e0:5c:e6:a7:fe:71:90:3a:c2:50:09:c6:76: 0a:71:50:09:cd:ac:a5:c1:b9:ae:9a:4a:cf:da:b0: 72:cb:e6:d2:d6:ff:38:12:17:04:c5:92:63:51:7d: 73:17:79:91:3d:30:c1:41:14:85:c2:c3:45:91:a6: 0d:35:a2:24:15:7b:12:06:08:72:83:a7:d3:f1:84: 8b:fd:77:bb:87:c6:47:fd:53:ad:73:67:0c:13:40: a5:77:22:5b:31:cd:5f:c1:bd:b3:8d:e2:15:fa:ea: 3c:05:24:13:0f:4b:b4:72:c2:d5:81:32:1c:a2:40: 47:b8:b2:7c:1f:28:fb:ae:11:1f:09:51:9b:e1:54: 35:02:cd:a2:3e:8c:6c:d1:0b:60:7f:8f:e0:f5:bc: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:4D:2B:CF:89:89:43:B4:3B:69:51:0B:83:00:0E:B6:36:C5:E5 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6a:06:6b:32:f2:35:78:9d:a8:7d:d9:99:8e:bf:7c:ef:05: c1:a6:72:74:85:2b:ea:36:3b:68:b5:57:61:02:4e:1e:f8:b3: a5:40:11:39:c2:bb:9c:2c:a9:40:5e:11:51:8e:de:1a:52:61: 64:9d:83:17:be:8f:ff:25:74:44:15:05:0b:f1:22:13:75:eb: fe:cf:ee:01:8f:3b:f4:84:44:dc:94:da:2d:72:40:42:2b:f9: 5c:a4:ec:c8:64:5d:1b:7b:16:ad:73:11:25:fb:90:4f:b1:ac: cf:c0:2b:b2:34:36:2d:de:3c:80:e6:8b:66:48:b9:7c:9c:b0: 93:ee:cf:2a:f2:f1:80:11:a3:ed:9a:68:9b:bc:22:45:d4:ac: e7:29:15:32:47:97:26:94:60:ca:b5:c0:cc:d2:58:e0:d7:f1: ac:e6:c3:a4:1e:b5:ca:d2:01:4b:95:e8:65:ab:b2:1c:b3:6c: d5:b1:91:81:7e:e3:e6:d4:27:9b:de:eb:ac:aa:72:d6:24:d8: 94:be:2e:0a:be:8c:3b:e7:20:cb:d3:b6:1b:a2:b1:14:54:1a: 3d:fd:f1:91:bf:9d:53:66:8d:cd:cc:74:39:93:08:3c:1c:36: 2c:d4:e6:f5:4d:9f:c8:61:6d:9e:54:d5:a6:6a:48:d5:f3:04: 46:a3:3a:bc -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIULUjNIMc1VAqdCtYuLeaDjkqRLRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjEwMjIxMjU0NDZaFw0yNjEwMjMxNTQ2NDZaMDMxMTAvBgNV BAMTKDkxMUE0RDJCQ0Y4OTg5NDNCNDNCNjk1MTBCODMwMDBFQjYzNkM1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHi/kyiGHTgGlORNIbYX3Q9lf jWFlmRyABoNnTWakao4QJ7YiRbCrlMErxEX47I8HBvpXAWKLzD8KG1jdAy27/NBn WFP4hoCB1zVX/YDNp1rHGvRfdKflCqb/OhB/RBvmFbIb6VYRyBQf4Fzmp/5xkDrC UAnGdgpxUAnNrKXBua6aSs/asHLL5tLW/zgSFwTFkmNRfXMXeZE9MMFBFIXCw0WR pg01oiQVexIGCHKDp9PxhIv9d7uHxkf9U61zZwwTQKV3IlsxzV/BvbON4hX66jwF JBMPS7RywtWBMhyiQEe4snwfKPuuER8JUZvhVDUCzaI+jGzRC2B/j+D1vICRAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUkRpNK8+JiUO0O2lRC4MADrY2xeUwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBG agZrMvI1eJ2ofdmZjr987wXBpnJ0hSvqNjtotVdhAk4e+LOlQBE5wrucLKlAXhFR jt4aUmFknYMXvo//JXREFQUL8SITdev+z+4Bjzv0hETclNotckBCK/lcpOzIZF0b exatcxEl+5BPsazPwCuyNDYt3jyA5otmSLl8nLCT7s8q8vGAEaPtmmibvCJF1Kzn KRUyR5cmlGDKtcDM0ljg1/Gs5sOkHrXK0gFLlehlq7Ics2zVsZGBfuPm1Ceb3uus qnLWJNiUvi4Kvow75yDL07YborEUVBo9/fGRv51TZo3NzHQ5kwg8HDYs1Ob1TZ/I YW2eVNWmakjV8wRGozq8 -----END CERTIFICATE-----Generated at Thu Oct 22 20:39:12 2026 by rpki-client