$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/4/7014A80340764DCFEEC196466A7A4EB1A76C9469.mft File: 7014A80340764DCFEEC196466A7A4EB1A76C9469.mft (raw, json) Hash identifier: IctYxasbgZaSWnc9l8Xdeg7jy0TsO+q69OBx+E5awWM= Subject key identifier: 04:64:A2:D9:83:1F:B8:DF:9E:23:0C:72:BA:D1:F1:E9:44:13:B0:F2 Authority key identifier: 70:14:A8:03:40:76:4D:CF:EE:C1:96:46:6A:7A:4E:B1:A7:6C:94:69 Certificate issuer: /CN=7014A80340764DCFEEC196466A7A4EB1A76C9469 Certificate serial: 646CFC8828C4A765B12CDE599D4FD0096342495C Authority info access: rsync://rpki.cc/repo/MythicalKitten/17/7014A80340764DCFEEC196466A7A4EB1A76C9469.cer Subject info access: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/4/7014A80340764DCFEEC196466A7A4EB1A76C9469.mft Manifest number: 50 Signing time: Sat 23 Aug 2025 07:32:07 +0000 Manifest this update: Sat 23 Aug 2025 07:27:07 +0000 Manifest next update: Sun 24 Aug 2025 11:02:07 +0000 Files and hashes: 1: 326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa (hash: kYxoW6oEWjh16Ls7wnzTWQ3BLg+JqpriTesR0VkPQzs=) 2: 7014A80340764DCFEEC196466A7A4EB1A76C9469.crl (hash: 82MIy2Kjs4pVxi+u9qOOFYEvZ2EwzxHKNCo9I0ULh84=) Validation: OK Signature path: rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/4/7014A80340764DCFEEC196466A7A4EB1A76C9469.crl rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/4/7014A80340764DCFEEC196466A7A4EB1A76C9469.mft rsync://rpki.cc/repo/MythicalKitten/17/7014A80340764DCFEEC196466A7A4EB1A76C9469.cer rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6c:fc:88:28:c4:a7:65:b1:2c:de:59:9d:4f:d0:09:63:42:49:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7014A80340764DCFEEC196466A7A4EB1A76C9469 Validity Not Before: Aug 23 07:27:07 2025 GMT Not After : Aug 24 11:02:07 2025 GMT Subject: CN=0464A2D9831FB8DF9E230C72BAD1F1E94413B0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:49:f7:84:eb:7f:43:11:20:8b:7b:59:36: ac:d9:fd:68:9a:25:4a:33:a8:c5:bb:36:00:c9:6a: fe:02:2c:14:34:61:23:2f:85:89:3c:f0:45:28:cb: 18:d7:43:42:01:c4:93:0c:2f:ab:2d:bb:7b:53:88: 52:a8:39:07:00:41:d9:e3:63:b9:8f:2c:43:e0:ba: a0:f6:33:63:40:55:ac:d0:aa:8a:7b:c0:43:49:0b: 85:1b:b8:a6:c1:51:71:fe:14:73:fb:a8:a3:4e:2e: 86:83:90:6e:6f:bc:28:02:49:d6:12:62:39:b4:32: de:d6:22:ab:eb:18:24:f7:9e:b6:34:c5:be:ec:7a: 77:ea:8a:55:e8:5d:de:d5:29:05:50:59:6a:27:41: b0:83:c8:9d:04:22:b5:2a:a3:31:0e:0e:95:22:52: 20:af:2e:93:08:f3:57:03:92:c6:eb:89:b7:b5:dd: 3e:ff:9a:10:ec:2f:f3:49:40:76:84:be:7e:c6:ce: c4:28:dc:91:a4:85:51:79:31:6c:19:8d:f7:1f:3c: d9:75:b4:7d:20:17:e7:60:cf:fc:02:a6:48:bb:e5: dd:c6:00:1b:e6:82:78:a1:38:b8:e8:58:50:e4:d9: 25:2b:65:1e:67:0e:ee:e6:ab:c9:6f:91:2f:f3:fc: 97:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:A2:D9:83:1F:B8:DF:9E:23:0C:72:BA:D1:F1:E9:44:13:B0:F2 X509v3 Authority Key Identifier: keyid:70:14:A8:03:40:76:4D:CF:EE:C1:96:46:6A:7A:4E:B1:A7:6C:94:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/4/7014A80340764DCFEEC196466A7A4EB1A76C9469.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/17/7014A80340764DCFEEC196466A7A4EB1A76C9469.cer Subject Information Access: Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/SsmidgeLLC/4/7014A80340764DCFEEC196466A7A4EB1A76C9469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:28:aa:53:43:9f:07:b2:67:b0:54:3f:d3:87:25:14:5e:e9: 4a:81:16:b3:27:25:c0:c5:bc:1f:25:5f:f9:a4:3d:0f:33:72: 47:29:c4:99:28:b5:d7:d5:5f:04:3c:a4:bc:6f:d6:3f:a1:ed: 85:b4:fa:50:ff:5b:46:17:ed:28:d7:4f:39:46:bf:f7:a6:92: 97:b6:5e:67:3c:75:e1:05:1d:95:50:3c:91:8d:12:87:c4:0d: 82:c5:8a:8b:4a:e3:cf:82:52:71:8d:c6:42:9b:3d:0a:5e:ce: 5e:2b:09:a4:a8:18:da:cf:7e:79:3a:dd:58:d3:9b:75:72:19: 4d:c4:06:2a:6b:b0:04:c2:f7:83:2a:37:b7:ea:84:ac:25:98: 84:fd:fd:a1:a8:c9:9a:71:3c:bf:8d:ea:4c:7f:c1:94:d4:f7: e1:6d:6c:dc:4c:1a:74:ec:53:8a:cf:10:5b:ad:07:b4:79:7f: 98:cb:1b:97:ee:9b:c4:38:01:de:90:0e:59:c5:93:ae:8f:c8: 76:04:cb:a8:6a:0e:a4:dc:93:45:4f:da:7d:6a:93:7f:dd:fb: ac:c9:57:e8:cd:5c:46:d2:40:be:56:8b:3c:1b:65:cd:a1:3d: 5f:59:4f:a3:b0:f3:82:ab:5b:bc:08:77:21:87:ae:22:b6:e8: 4e:a0:86:0d -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUZGz8iCjEp2WxLN5ZnU/QCWNCSVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAxNEE4MDM0MDc2NERDRkVFQzE5NjQ2NkE3QTRFQjFB NzZDOTQ2OTAeFw0yNTA4MjMwNzI3MDdaFw0yNTA4MjQxMTAyMDdaMDMxMTAvBgNV BAMTKDA0NjRBMkQ5ODMxRkI4REY5RTIzMEM3MkJBRDFGMUU5NDQxM0IwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlUn3hOt/QxEgi3tZNqzZ/Wia JUozqMW7NgDJav4CLBQ0YSMvhYk88EUoyxjXQ0IBxJMML6stu3tTiFKoOQcAQdnj Y7mPLEPguqD2M2NAVazQqop7wENJC4UbuKbBUXH+FHP7qKNOLoaDkG5vvCgCSdYS Yjm0Mt7WIqvrGCT3nrY0xb7senfqilXoXd7VKQVQWWonQbCDyJ0EIrUqozEODpUi UiCvLpMI81cDksbribe13T7/mhDsL/NJQHaEvn7GzsQo3JGkhVF5MWwZjfcfPNl1 tH0gF+dgz/wCpki75d3GABvmgnihOLjoWFDk2SUrZR5nDu7mq8lvkS/z/JexAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUBGSi2YMfuN+eIwxyutHx6UQTsPIwHwYDVR0j BBgwFoAUcBSoA0B2Tc/uwZZGanpOsadslGkwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXov cmVwby9Tc21pZGdlTExDLzQvNzAxNEE4MDM0MDc2NERDRkVFQzE5NjQ2NkE3QTRF QjFBNzZDOTQ2OS5jcmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3lu YzovL3Jwa2kuY2MvcmVwby9NeXRoaWNhbEtpdHRlbi8xNy83MDE0QTgwMzQwNzY0 RENGRUVDMTk2NDY2QTdBNEVCMUE3NkM5NDY5LmNlcjB9BggrBgEFBQcBCwRxMG8w bQYIKwYBBQUHMAuGYXJzeW5jOi8va3JpbGwuY2EtYmMtMDEuc3NtaWRnZS54eXov cmVwby9Tc21pZGdlTExDLzQvNzAxNEE4MDM0MDc2NERDRkVFQzE5NjQ2NkE3QTRF QjFBNzZDOTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4oqlNDnweyZ7BUP9OHJRRe6UqBFrMnJcDF vB8lX/mkPQ8zckcpxJkotdfVXwQ8pLxv1j+h7YW0+lD/W0YX7SjXTzlGv/emkpe2 Xmc8deEFHZVQPJGNEofEDYLFiotK48+CUnGNxkKbPQpezl4rCaSoGNrPfnk63VjT m3VyGU3EBiprsATC94MqN7fqhKwlmIT9/aGoyZpxPL+N6kx/wZTU9+FtbNxMGnTs U4rPEFutB7R5f5jLG5fum8Q4Ad6QDlnFk66PyHYEy6hqDqTck0VP2n1qk3/d+6zJ V+jNXEbSQL5WizwbZc2hPV9ZT6Ow84KrW7wIdyGHriK26E6ghg0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:21:44 2025 by rpki-client