$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: QsSCfZcd753IKFgyQrbHhRCUWliRSEsPCgxK4BqqXQo= Subject key identifier: 10:83:D4:16:DD:6A:94:1C:A2:52:64:47:77:E3:12:D5:E1:E2:1D:EA Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 4901FD688A01428BECA45956EC689531B33C383E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 57 Signing time: Fri 04 Sep 2026 07:42:39 +0000 Manifest this update: Fri 04 Sep 2026 07:37:39 +0000 Manifest next update: Sat 05 Sep 2026 08:39:39 +0000 Files and hashes: 1: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: 6BPlpEvLY2ym7gicsVgMIYg/e0970ApukpVTlPXh0bg=) 2: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) 3: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 08:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:01:fd:68:8a:01:42:8b:ec:a4:59:56:ec:68:95:31:b3:3c:38:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Sep 4 07:37:39 2026 GMT Not After : Sep 5 08:39:39 2026 GMT Subject: CN=1083D416DD6A941CA252644777E312D5E1E21DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b0:5b:7a:7f:c4:ac:03:41:e1:a8:2f:69:c3: f2:ae:b2:7c:f3:bb:db:c2:61:25:8d:9c:8f:63:d8: 29:79:b0:b4:87:a3:02:b8:88:64:d8:00:1a:7b:17: 90:10:ab:ba:57:6b:03:9f:bf:ab:a6:e7:1a:d1:e1: d2:95:ba:ef:e1:0a:8f:1f:32:2b:3f:b0:3b:63:2f: f3:8f:f8:9c:eb:ed:05:a6:a7:de:4e:8e:63:4e:ae: 96:76:cf:22:16:99:bd:c9:45:25:6f:6c:bb:37:0b: 28:26:bb:d9:ed:a4:4e:fd:dc:65:27:46:74:6c:0b: 3c:60:49:14:2c:d8:36:b8:71:74:9a:92:75:3a:16: 06:68:fd:58:a0:e1:76:a1:ca:e6:dc:1d:43:26:e7: e2:df:40:7a:55:bc:e8:45:13:bf:da:61:fe:06:0f: eb:74:c5:d6:3d:37:ab:41:99:7b:9d:ff:93:a1:12: f5:e0:db:80:3f:a3:d3:e7:28:5a:78:68:47:d6:17: 4e:52:06:67:25:7e:ac:09:aa:42:72:c0:fe:42:81: ca:31:23:2a:f5:7c:07:eb:34:2b:6c:dd:ef:c8:6e: ec:60:ba:08:ac:92:93:9b:56:9a:1d:d1:ef:e1:de: c7:cb:cb:8f:9f:39:34:7f:85:7e:83:bf:66:c9:d9: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:D4:16:DD:6A:94:1C:A2:52:64:47:77:E3:12:D5:E1:E2:1D:EA X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8c:56:c2:f6:dd:29:e7:f7:ef:91:81:d6:49:4b:f6:ac:78: 92:de:9a:b6:7e:b2:3a:89:02:ce:95:4c:18:a4:4f:38:d0:8c: e6:d8:1f:d7:3c:b8:1b:d6:63:3f:1a:81:ec:b9:85:0f:5a:22: 8d:00:a5:bd:7e:84:f2:f0:73:21:dc:e1:0b:0e:12:bf:9b:d7: 32:6c:7a:ff:d3:62:59:fa:33:39:af:05:01:89:35:43:91:25: 44:36:2d:18:c3:fe:aa:e2:3b:a9:6f:06:a5:2f:83:33:6f:21: 4e:67:c5:8d:7c:3a:ff:65:d4:79:b0:c6:2a:16:19:80:81:ee: d7:c9:e9:df:da:b1:bd:e3:e6:0b:c9:b5:5c:05:be:b2:62:2c: 22:3a:6e:92:99:68:d8:f2:f0:88:16:91:d9:9f:c7:0f:85:54: 64:66:ca:f6:cd:77:a6:ed:7f:1d:4c:7c:19:3f:1d:f3:6d:e6: 78:29:ab:c6:f2:ca:ef:6d:88:70:cb:23:f6:3d:ef:88:a8:9e: 48:4f:00:8d:e0:e5:8e:93:28:c5:c7:f0:d0:cb:e6:f9:50:9a: 35:47:44:47:16:e7:43:5e:aa:fd:a8:0a:77:c0:d7:b7:a3:41: 20:a9:8f:0e:eb:a1:d7:0d:65:81:a2:9b:01:da:72:57:7d:4f: a8:c1:38:47 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUSQH9aIoBQovspFlW7GiVMbM8OD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA5MDQwNzM3MzlaFw0yNjA5MDUwODM5MzlaMDMxMTAvBgNV BAMTKDEwODNENDE2REQ2QTk0MUNBMjUyNjQ0Nzc3RTMxMkQ1RTFFMjFERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsFt6f8SsA0HhqC9pw/Kusnzz u9vCYSWNnI9j2Cl5sLSHowK4iGTYABp7F5AQq7pXawOfv6um5xrR4dKVuu/hCo8f Mis/sDtjL/OP+Jzr7QWmp95OjmNOrpZ2zyIWmb3JRSVvbLs3Cygmu9ntpE793GUn RnRsCzxgSRQs2Da4cXSaknU6FgZo/Vig4XahyubcHUMm5+LfQHpVvOhFE7/aYf4G D+t0xdY9N6tBmXud/5OhEvXg24A/o9PnKFp4aEfWF05SBmclfqwJqkJywP5Cgcox Iyr1fAfrNCts3e/IbuxgugiskpObVpod0e/h3sfLy4+fOTR/hX6Dv2bJ2UIpAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUEIPUFt1qlByiUmRHd+MS1eHiHeowHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCK jFbC9t0p5/fvkYHWSUv2rHiS3pq2frI6iQLOlUwYpE840Izm2B/XPLgb1mM/GoHs uYUPWiKNAKW9foTy8HMh3OELDhK/m9cybHr/02JZ+jM5rwUBiTVDkSVENi0Yw/6q 4jupbwalL4MzbyFOZ8WNfDr/ZdR5sMYqFhmAge7Xyenf2rG94+YLybVcBb6yYiwi Om6SmWjY8vCIFpHZn8cPhVRkZsr2zXem7X8dTHwZPx3zbeZ4KavG8srvbYhwyyP2 Pe+IqJ5ITwCN4OWOkyjFx/DQy+b5UJo1R0RHFudDXqr9qAp3wNe3o0EgqY8O66HX DWWBopsB2nJXfU+owThH -----END CERTIFICATE-----Generated at Fri Sep 4 23:39:23 2026 by rpki-client