$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft File: ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft (raw, json) Hash identifier: +OW1nXcOq+/b6CV6lK90/S5qtOEO4t4lgvfErQeMndI= Subject key identifier: B5:A0:39:55:BB:75:DB:5D:42:BF:82:02:C6:F0:4C:91:BC:67:D8:57 Authority key identifier: AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40 Certificate issuer: /CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40 Certificate serial: 17CD98EA2775369C6CA5ED304D39FCED129C80BB Authority info access: rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer Subject info access: rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft Manifest number: 43 Signing time: Sat 23 Aug 2025 16:02:08 +0000 Manifest this update: Sat 23 Aug 2025 15:57:08 +0000 Manifest next update: Sun 24 Aug 2025 17:19:08 +0000 Files and hashes: 1: 326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (hash: Eg5srRiirzi2SKwG4qxjpV15+yKIPOzSmbyRqjnR5WA=) 2: ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl (hash: +2c5kC84obHcJ9Y/6djqmcB2bADsX/L3UziD9JrgxnI=) Validation: OK Signature path: rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 17:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cd:98:ea:27:75:36:9c:6c:a5:ed:30:4d:39:fc:ed:12:9c:80:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40 Validity Not Before: Aug 23 15:57:08 2025 GMT Not After : Aug 24 17:19:08 2025 GMT Subject: CN=B5A03955BB75DB5D42BF8202C6F04C91BC67D857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:55:78:74:d9:ee:c6:08:cc:a7:c3:f7:d4: 1f:8b:f1:1f:ad:f8:5b:bf:ed:d9:42:27:48:be:da: 7e:5a:bd:f9:3b:66:ff:40:8f:bb:ea:1b:57:12:06: 97:67:7c:d5:ce:f4:3e:73:b6:e2:55:8c:b8:68:f5: de:12:09:29:12:6f:9d:af:46:34:84:f5:3e:e1:63: 5b:bf:db:f4:7e:ca:bd:82:b7:5e:25:a9:05:02:6e: 32:2e:8a:e9:e5:72:2d:80:6c:2a:88:66:a4:c3:95: 29:bd:64:3b:47:48:db:16:27:c3:79:bf:c4:55:5f: f1:a8:ab:ec:62:f4:35:d0:6d:ac:cc:fb:bb:a1:55: f7:dc:1d:84:f6:20:58:b2:c6:e5:51:42:67:5e:20: 14:4a:04:59:2f:4d:63:ba:1c:05:6e:2d:9e:a1:10: 6a:44:ec:aa:7a:8e:85:3d:5a:e3:a4:65:a0:be:c8: f9:23:6a:16:26:05:12:b8:fd:89:07:66:86:4e:9d: 50:f3:69:23:65:c1:2d:7f:9a:6c:ac:de:c2:49:ec: 23:3a:34:17:78:2e:27:1f:f2:f8:8f:c9:63:97:b5: 0f:12:ea:a0:3e:39:2c:18:57:7f:bd:38:7c:02:e4: d9:0c:d7:68:03:d1:4e:d6:14:66:91:ac:be:a9:90: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:39:55:BB:75:DB:5D:42:BF:82:02:C6:F0:4C:91:BC:67:D8:57 X509v3 Authority Key Identifier: keyid:AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer Subject Information Access: Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:42:ba:a5:fa:94:af:90:fa:2d:60:7e:23:3c:0f:bb:ab:72: e7:64:a3:de:1f:02:cd:81:40:a5:67:65:0b:f1:44:19:fb:28: 9d:99:60:31:3a:7b:36:cb:43:01:7c:7c:88:d9:1d:1b:58:f2: 38:e4:c9:eb:95:16:6e:7d:a5:70:5e:03:27:a8:8b:08:60:87: 1f:62:ac:35:9f:a8:83:50:b1:f2:d3:00:d0:8a:31:db:b2:21: 47:f1:f2:23:71:0d:fb:25:76:9f:02:d3:a7:35:d2:0d:7a:1b: 7e:4a:ca:22:52:98:0c:62:79:71:58:ac:92:4f:b0:67:18:f6: d1:93:eb:ee:1b:0a:d1:ea:fa:04:4b:0e:8d:36:cc:11:0b:79: fc:d7:4c:83:8d:19:c1:62:14:64:46:c2:d3:d3:d6:31:c9:6c: a4:b6:db:39:32:3f:b5:af:75:24:89:35:26:27:ec:97:b9:7b: 4d:10:a3:0b:d1:f9:e3:29:40:28:be:53:5a:b9:1b:eb:e1:85: bd:31:76:6d:98:8c:7b:8c:f5:be:b0:1f:0b:d1:29:88:6d:96: 87:9a:d9:5b:ee:70:fc:1a:cf:1f:73:c1:03:63:14:5a:5f:7d: 5b:b7:e3:61:e0:f8:8b:90:ea:66:83:b7:6d:1b:f1:20:61:d2: bd:e5:ca:b8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUF82Y6id1Npxspe0wTTn87RKcgLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJDM0YzRjI1N0FCNjJBNUMzRTRGRkI1RkM2NEM1RDJE RjdFQUQ0MDAeFw0yNTA4MjMxNTU3MDhaFw0yNTA4MjQxNzE5MDhaMDMxMTAvBgNV BAMTKEI1QTAzOTU1QkI3NURCNUQ0MkJGODIwMkM2RjA0QzkxQkM2N0Q4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtlV4dNnuxgjMp8P31B+L8R+t +Fu/7dlCJ0i+2n5avfk7Zv9Aj7vqG1cSBpdnfNXO9D5ztuJVjLho9d4SCSkSb52v RjSE9T7hY1u/2/R+yr2Ct14lqQUCbjIuiunlci2AbCqIZqTDlSm9ZDtHSNsWJ8N5 v8RVX/Goq+xi9DXQbazM+7uhVffcHYT2IFiyxuVRQmdeIBRKBFkvTWO6HAVuLZ6h EGpE7Kp6joU9WuOkZaC+yPkjahYmBRK4/YkHZoZOnVDzaSNlwS1/mmys3sJJ7CM6 NBd4Licf8viPyWOXtQ8S6qA+OSwYV3+9OHwC5NkM12gD0U7WFGaRrL6pkPpJAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUtaA5Vbt1211Cv4ICxvBMkbxn2FcwHwYDVR0j BBgwFoAUq8Pz8lerYqXD5P+1/GTF0t9+rUAwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXov cmVwby9BUzE5OTE3Ny8xL0FCQzNGM0YyNTdBQjYyQTVDM0U0RkZCNUZDNjRDNUQy REY3RUFENDAuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6 Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTgvQUJDM0YzRjI1N0FCNjJB NUMzRTRGRkI1RkM2NEM1RDJERjdFQUQ0MC5jZXIwewYIKwYBBQUHAQsEbzBtMGsG CCsGAQUFBzALhl9yc3luYzovL2tyaWxsLmNhLWJjLTAxLnNzbWlkZ2UueHl6L3Jl cG8vQVMxOTkxNzcvMS9BQkMzRjNGMjU3QUI2MkE1QzNFNEZGQjVGQzY0QzVEMkRG N0VBRDQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEA00K6pfqUr5D6LWB+IzwPu6ty52Sj3h8CzYFApWdl C/FEGfsonZlgMTp7NstDAXx8iNkdG1jyOOTJ65UWbn2lcF4DJ6iLCGCHH2KsNZ+o g1Cx8tMA0Iox27IhR/HyI3EN+yV2nwLTpzXSDXobfkrKIlKYDGJ5cViskk+wZxj2 0ZPr7hsK0er6BEsOjTbMEQt5/NdMg40ZwWIUZEbC09PWMclspLbbOTI/ta91JIk1 Jifsl7l7TRCjC9H54ylAKL5TWrkb6+GFvTF2bZiMe4z1vrAfC9EpiG2Wh5rZW+5w /BrPH3PBA2MUWl99W7fjYeD4i5DqZoO3bRvxIGHSveXKuA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:31:26 2025 by rpki-client