$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: lb9JNNyyFfSmYeHVwn0a4JmCl0KKMR+pQLbK7dHTT2I= Subject key identifier: 41:F7:5B:7C:27:42:F6:5B:38:C9:22:FE:1B:5B:30:AB:13:71:22:AF Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 32CC93149FB542EB8D56FC155C6199F868DB3D8A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 13 Signing time: Tue 21 Jul 2026 17:23:55 +0000 Manifest this update: Tue 21 Jul 2026 17:18:55 +0000 Manifest next update: Wed 22 Jul 2026 19:46:55 +0000 Files and hashes: 1: 326130363a613030303a313030333a3a2f34382d3438203d3e20323134343230.roa (hash: MBsK6gEdd4CWmS6ZD1epVj6NubYo5l++MJFJzZXzLps=) 2: 326130363a613030303a313030323a3a2f34382d3438203d3e20323134343230.roa (hash: XCdqkREhW4jI3mzzAV50kBmwuU0vlE5BBestCEi30Uc=) 3: 326130363a613030303a313030313a3a2f34382d3438203d3e20323134343230.roa (hash: ncn3/03uOQ28XWoZW9rZLmk9izrB2k4KTvuWUwIbc2o=) 4: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) 5: 326130363a613030303a3a2f33322d3438203d3e20323139313839.roa (hash: 0AtjwM4P+NrBu9C8k0a3NpF+FQ/24FdKj1jU2kFPqrs=) 6: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: P+W0Ip9rso7Ym95jVuyzYQQQRBDrdIfQa7wHJRISlHs=) 7: 326130363a613030303a313030343a3a2f34382d3438203d3e20323134343230.roa (hash: kHUz2ekMB3TuQ3o6qIFFLEgDBVXto8hmxI5D77g+O6I=) 8: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: f310Yj+/zUZD4JIZ785ri/MA2XK9mya+5OTWbLqzQQ8=) 9: 326130363a613030303a313030303a3a2f34382d3438203d3e20323134343230.roa (hash: p4gnkORMgvFDsq9nz7FG5WOIqptfTiLQCY7htms5ES4=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:93:14:9f:b5:42:eb:8d:56:fc:15:5c:61:99:f8:68:db:3d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 21 17:18:55 2026 GMT Not After : Jul 22 19:46:55 2026 GMT Subject: CN=41F75B7C2742F65B38C922FE1B5B30AB137122AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:a4:79:c3:15:39:a7:27:d4:5a:48:6e:52: ca:b7:30:63:cf:e4:06:b1:7a:3f:a8:98:6f:1a:43: 25:76:e0:1d:bf:f6:5c:ed:f9:33:ce:9b:da:1f:6c: 5a:73:92:39:82:a1:cd:e1:ef:18:38:3b:23:e8:6a: c9:3e:04:dc:71:b9:81:32:ae:9d:26:af:2a:24:2c: 87:85:6a:bf:ca:89:96:49:09:eb:0e:20:b5:7d:de: a8:1f:e8:8c:ba:a8:6b:00:25:a2:f9:25:ce:ff:63: 98:0a:ff:2b:fa:bb:5f:93:c4:5d:6d:d3:6f:fd:8b: 93:e7:06:81:c0:db:b9:c8:fd:27:b9:90:f7:ab:ff: 90:bc:66:ca:7b:99:d9:63:2f:60:e2:81:93:f7:12: 38:27:7f:8e:06:d7:b4:80:7e:23:b1:88:9d:52:4a: 4b:ed:e6:8a:e9:dd:13:e0:b4:fb:d7:d2:3f:aa:e8: a6:a0:f5:83:4c:6a:e7:14:79:11:d3:2f:81:01:3b: 58:3e:d1:4c:04:e9:7b:ed:86:35:36:6d:a9:97:a0: 54:e6:03:4f:52:cd:00:92:2b:29:d4:29:ae:2f:38: 04:ae:61:f4:4c:8b:2e:c1:ca:83:42:f2:98:a2:de: 97:72:02:24:a9:fd:85:a8:95:c1:53:f4:7d:db:bb: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F7:5B:7C:27:42:F6:5B:38:C9:22:FE:1B:5B:30:AB:13:71:22:AF X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:17:af:10:71:7b:34:b0:0e:fc:c7:53:0f:8f:21:1a:21:06: 80:e1:63:35:69:e8:62:2c:86:94:ca:18:6f:08:65:b9:3e:4c: 42:31:11:e1:84:70:22:32:76:0f:da:be:bc:8b:65:77:ad:6c: 56:25:0d:9d:50:6e:ea:da:18:31:c3:f4:23:0b:d5:0e:91:42: dc:cc:93:a4:2c:22:12:24:32:bf:d1:8b:0d:51:73:56:c0:db: 3d:2d:6e:d8:66:4f:de:57:a0:c8:00:5e:a9:55:d5:98:a8:80: 4a:05:6c:39:d2:a1:7a:74:3d:c9:24:ef:10:67:6a:8f:13:e6: 8e:6f:f5:87:99:cb:61:f8:34:54:64:98:d1:1f:ea:a9:3d:d7: 8a:bc:f8:31:23:0e:18:ff:c6:0f:b8:ed:76:53:8b:07:b1:8e: aa:40:0e:74:04:8f:0b:ba:8f:19:81:3c:d5:a1:72:a0:f5:ae: 4c:85:c4:38:4b:65:e5:3a:0a:bb:6b:72:a8:aa:cb:20:8a:ba: 7b:45:42:56:bf:ff:42:fb:58:d9:0d:a8:56:e7:9f:e7:ff:8c: 62:80:c5:f0:76:de:5d:7b:cd:41:70:48:be:3c:72:60:33:1b: 87:61:f0:d0:e1:67:ff:0f:09:27:0e:3f:20:b6:22:c1:09:6f: 5d:a0:90:28 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUMsyTFJ+1QuuNVvwVXGGZ+GjbPYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjExNzE4NTVaFw0yNjA3MjIxOTQ2NTVaMDMxMTAvBgNV BAMTKDQxRjc1QjdDMjc0MkY2NUIzOEM5MjJGRTFCNUIzMEFCMTM3MTIyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEqR5wxU5pyfUWkhuUsq3MGPP 5Aaxej+omG8aQyV24B2/9lzt+TPOm9ofbFpzkjmCoc3h7xg4OyPoask+BNxxuYEy rp0mryokLIeFar/KiZZJCesOILV93qgf6Iy6qGsAJaL5Jc7/Y5gK/yv6u1+TxF1t 02/9i5PnBoHA27nI/Se5kPer/5C8Zsp7mdljL2DigZP3Ejgnf44G17SAfiOxiJ1S Skvt5orp3RPgtPvX0j+q6Kag9YNMaucUeRHTL4EBO1g+0UwE6XvthjU2bamXoFTm A09SzQCSKynUKa4vOASuYfRMiy7ByoNC8pii3pdyAiSp/YWolcFT9H3buw/1AgMB AAGjggIlMIICITAdBgNVHQ4EFgQUQfdbfCdC9ls4ySL+G1swqxNxIq8wHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAp F68QcXs0sA78x1MPjyEaIQaA4WM1aehiLIaUyhhvCGW5PkxCMRHhhHAiMnYP2r68 i2V3rWxWJQ2dUG7q2hgxw/QjC9UOkULczJOkLCISJDK/0YsNUXNWwNs9LW7YZk/e V6DIAF6pVdWYqIBKBWw50qF6dD3JJO8QZ2qPE+aOb/WHmcth+DRUZJjRH+qpPdeK vPgxIw4Y/8YPuO12U4sHsY6qQA50BI8Luo8ZgTzVoXKg9a5MhcQ4S2XlOgq7a3Ko qssgirp7RUJWv/9C+1jZDahW55/n/4xigMXwdt5de81BcEi+PHJgMxuHYfDQ4Wf/ DwknDj8gtiLBCW9doJAo -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:10 2026 by rpki-client