$ rpki-client -vvf krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft File: 953F58832273DFD14187910ADCB3972B70B9BD3A.mft (raw, json) Hash identifier: /582kui0HlOnMnsbIQBFhW38gR1AOXj3vA3mlTPNfCs= Subject key identifier: 1C:0B:42:35:47:4D:A4:CF:93:60:AD:AF:66:3C:ED:19:7F:9C:25:A0 Authority key identifier: 95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A Certificate issuer: /CN=953F58832273DFD14187910ADCB3972B70B9BD3A Certificate serial: 3B12D5A2B84C0ED319F0C9D80F24406AFA1791E2 Authority info access: rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer Subject info access: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft Manifest number: 2A Signing time: Fri 27 Mar 2026 15:47:25 +0000 Manifest this update: Fri 27 Mar 2026 15:42:25 +0000 Manifest next update: Sat 28 Mar 2026 18:52:25 +0000 Files and hashes: 1: 326130613a363034353a636530303a3a2f34302d3438203d3e20323030313630.roa (hash: hh350u76l+iJ1oBrj2M0JfCFJysLphQG1jRv54eZW3U=) 2: 326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa (hash: HcaRJrqt46U5y6uERiSMiBPPn6NWtH+Sf2e1pKTXtm4=) 3: 953F58832273DFD14187910ADCB3972B70B9BD3A.crl (hash: d1C24JRDCwC5dUoKtVzKs0QNdb3Bv/jU9Q3r7G7k6Uk=) 4: 326130613a363034353a636130303a3a2f34302d3438203d3e20323030313630.roa (hash: UIdyyXR0S2bMgGEjmuwln+NkXK9hjAR8o+mH7WTeK74=) Validation: OK Signature path: rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.crl rsync://rpki.komorebi.network/repo/komorebi/5/421B765C540F139258E8C8E64499AC6317AE6F93.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/421B765C540F139258E8C8E64499AC6317AE6F93.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 15:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:12:d5:a2:b8:4c:0e:d3:19:f0:c9:d8:0f:24:40:6a:fa:17:91:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=953F58832273DFD14187910ADCB3972B70B9BD3A Validity Not Before: Mar 27 15:42:25 2026 GMT Not After : Mar 28 18:52:25 2026 GMT Subject: CN=1C0B4235474DA4CF9360ADAF663CED197F9C25A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:f1:3a:2d:c0:6c:3d:bc:4e:0f:78:dd:1f: d9:4f:54:11:c2:03:f7:15:2c:dd:c0:d2:f5:ec:da: 29:19:6f:63:14:01:29:68:68:13:02:6b:1c:88:27: 8a:31:2b:f1:84:2c:12:bb:df:17:fa:e4:0f:e8:c7: 84:a1:12:fd:26:c3:94:5e:08:83:97:f1:ed:8b:9d: ee:6d:e3:58:ba:37:70:19:22:59:e3:5b:b1:de:92: 0d:80:66:72:8f:c9:14:17:a5:bc:2d:00:aa:e9:9e: 41:0d:5c:dc:44:93:d8:13:a1:69:76:07:ec:81:2c: 6d:5d:3d:b4:44:d8:81:1e:e2:38:64:4b:69:16:8f: f0:e3:27:ec:13:00:8b:9f:94:f0:36:e5:e0:17:82: 21:cf:26:aa:74:fd:32:cc:b5:3b:29:91:d4:73:3d: 32:f4:d4:0e:76:33:8e:57:67:9e:ff:58:e3:03:20: 0b:4b:e0:d6:9d:02:48:31:f1:7f:e3:88:a2:5f:86: 73:3f:18:0d:81:f5:ff:45:3f:c7:9e:3a:36:05:9c: 58:a4:2e:5e:ef:53:d0:26:20:92:4d:89:74:d0:9d: 67:c6:56:74:0d:38:e1:f3:43:9e:37:ff:cb:b5:e7: 9f:f2:51:a9:e5:9d:7a:a4:1e:28:b4:18:de:fd:1c: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:42:35:47:4D:A4:CF:93:60:AD:AF:66:3C:ED:19:7F:9C:25:A0 X509v3 Authority Key Identifier: keyid:95:3F:58:83:22:73:DF:D1:41:87:91:0A:DC:B3:97:2B:70:B9:BD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/5/953F58832273DFD14187910ADCB3972B70B9BD3A.cer Subject Information Access: Signed Object - URI:rsync://krill.ipgua.com/repo/pongery/4/953F58832273DFD14187910ADCB3972B70B9BD3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2d:28:2a:b7:fc:c0:50:2f:94:54:0f:b6:58:0d:43:6a:2d: ee:71:c1:83:01:25:13:fa:a1:95:c2:7d:50:37:9a:9d:01:5c: c0:85:20:72:7e:4f:5e:89:40:42:86:1a:00:6d:a8:21:08:98: d1:86:4a:33:9a:5b:b4:48:5e:82:f5:a8:a5:09:f6:96:14:14: 14:56:59:ec:21:b2:a9:79:d9:37:81:9b:2f:c7:3e:e3:d8:e0: ad:04:d6:68:01:2a:bc:75:f6:52:ac:34:1b:56:01:d3:32:f8: 5e:62:2e:91:4d:20:18:6a:1b:b1:94:d6:4c:d1:7e:fc:7d:80: a4:34:84:51:09:bb:06:4c:6a:ca:50:44:d0:83:af:0a:0b:b4: 4c:0e:2e:38:dd:79:06:06:c5:8f:d9:95:e1:7c:e7:83:6a:39: 36:7e:36:0b:87:88:fe:7d:85:91:f7:89:4b:96:a5:3e:11:9a: 6c:ba:bd:ac:72:20:82:cf:66:74:ba:ca:14:41:0f:8b:05:47: 29:a3:df:4b:7d:d8:ee:e0:d1:0d:f9:a5:e2:20:74:3d:c5:4a: 5d:1f:e1:ce:b2:13:73:04:26:d0:f5:6c:69:7d:43:7f:05:bf: 6a:a7:47:ff:56:83:22:6d:00:23:ea:ed:17:33:e6:e8:24:3c: df:12:9a:55 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUOxLVorhMDtMZ8MnYDyRAavoXkeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzRjU4ODMyMjczREZEMTQxODc5MTBBRENCMzk3MkI3 MEI5QkQzQTAeFw0yNjAzMjcxNTQyMjVaFw0yNjAzMjgxODUyMjVaMDMxMTAvBgNV BAMTKDFDMEI0MjM1NDc0REE0Q0Y5MzYwQURBRjY2M0NFRDE5N0Y5QzI1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmPE6LcBsPbxOD3jdH9lPVBHC A/cVLN3A0vXs2ikZb2MUASloaBMCaxyIJ4oxK/GELBK73xf65A/ox4ShEv0mw5Re CIOX8e2Lne5t41i6N3AZIlnjW7Hekg2AZnKPyRQXpbwtAKrpnkENXNxEk9gToWl2 B+yBLG1dPbRE2IEe4jhkS2kWj/DjJ+wTAIuflPA25eAXgiHPJqp0/TLMtTspkdRz PTL01A52M45XZ57/WOMDIAtL4NadAkgx8X/jiKJfhnM/GA2B9f9FP8eeOjYFnFik Ll7vU9AmIJJNiXTQnWfGVnQNOOHzQ543/8u155/yUanlnXqkHii0GN79HFR/AgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUHAtCNUdNpM+TYK2vZjztGX+cJaAwHwYDVR0j BBgwFoAUlT9YgyJz39FBh5EK3LOXK3C5vTowDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuaXBndWEuY29tL3JlcG8vcG9uZ2Vy eS80Lzk1M0Y1ODgzMjI3M0RGRDE0MTg3OTEwQURDQjM5NzJCNzBCOUJEM0EuY3Js MHYGCCsGAQUFBwEBBGowaDBmBggrBgEFBQcwAoZacnN5bmM6Ly9ycGtpLmtvbW9y ZWJpLm5ldHdvcmsvcmVwby9rb21vcmViaS81Lzk1M0Y1ODgzMjI3M0RGRDE0MTg3 OTEwQURDQjM5NzJCNzBCOUJEM0EuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEF BQcwC4ZTcnN5bmM6Ly9rcmlsbC5pcGd1YS5jb20vcmVwby9wb25nZXJ5LzQvOTUz RjU4ODMyMjczREZEMTQxODc5MTBBRENCMzk3MkI3MEI5QkQzQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AFwtKCq3/MBQL5RUD7ZYDUNqLe5xwYMBJRP6oZXCfVA3mp0BXMCFIHJ+T16JQEKG GgBtqCEImNGGSjOaW7RIXoL1qKUJ9pYUFBRWWewhsql52TeBmy/HPuPY4K0E1mgB Krx19lKsNBtWAdMy+F5iLpFNIBhqG7GU1kzRfvx9gKQ0hFEJuwZMaspQRNCDrwoL tEwOLjjdeQYGxY/ZleF854NqOTZ+NguHiP59hZH3iUuWpT4Rmmy6vaxyIILPZnS6 yhRBD4sFRymj30t92O7g0Q35peIgdD3FSl0f4c6yE3MEJtD1bGl9Q38Fv2qnR/9W gyJtACPq7Rcz5ugkPN8SmlU= -----END CERTIFICATE-----Generated at Sat Mar 28 10:03:02 2026 by rpki-client