$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: zOvG2CY1qCEtgeDhD1nQVWViGuC2HMmuLcPrO/qYSGc= Subject key identifier: 26:AC:4B:32:EC:4E:5E:F4:6D:2A:0F:84:F8:C4:5C:7F:4D:7F:32:A6 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 4C88F54BB29B750124F61D4E52C29A410307B73B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 1C Signing time: Thu 23 Jul 2026 15:14:58 +0000 Manifest this update: Thu 23 Jul 2026 15:09:58 +0000 Manifest next update: Fri 24 Jul 2026 17:22:58 +0000 Files and hashes: 1: 326130363a613030303a313030303a3a2f34342d3438203d3e20323134343230.roa (hash: ZB1QPuwv47KCk1dr0dg362pR9GKXH/C39xSKmvQJXCM=) 2: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: MByaI8yZXgd6psHIUyrT65EPkm7nIPC4oqsqN11xufM=) 3: 326130363a613030303a3a2f33322d3438203d3e20323139313839.roa (hash: 0AtjwM4P+NrBu9C8k0a3NpF+FQ/24FdKj1jU2kFPqrs=) 4: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:88:f5:4b:b2:9b:75:01:24:f6:1d:4e:52:c2:9a:41:03:07:b7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 23 15:09:58 2026 GMT Not After : Jul 24 17:22:58 2026 GMT Subject: CN=26AC4B32EC4E5EF46D2A0F84F8C45C7F4D7F32A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:b9:a3:a7:3d:ae:cc:9e:f6:79:b7:a2:db: 65:41:26:2c:a7:82:a9:46:02:76:d1:42:38:91:e8: e6:68:b2:26:dd:6f:81:9d:b5:63:f3:b4:5e:05:2f: 81:9b:e6:67:12:54:1f:82:d4:e6:2a:9b:4f:e6:83: b1:18:96:fd:02:cf:17:c2:2e:ed:32:5a:e9:09:7b: 90:c5:7e:dd:31:4d:d7:c8:98:d5:fa:4d:ab:e8:fa: b4:d1:38:7a:4d:87:51:42:dc:f3:55:09:cd:44:2f: 85:7b:34:5d:ba:a7:c8:d2:44:47:b8:a9:e0:ee:b3: d3:ab:6c:dc:17:59:95:c0:18:30:72:c2:92:38:9f: 91:3b:a6:a8:f1:ed:68:f2:44:53:43:71:a7:c3:b8: 47:f7:b5:37:28:6d:94:a2:9a:b8:36:a0:54:8b:09: ea:a1:21:23:59:67:2a:40:26:97:57:3e:94:07:84: fb:26:97:d5:e5:57:a9:e2:03:76:24:a5:bf:45:3f: f4:67:96:4c:f9:88:1e:cc:b9:c2:aa:cf:0f:e0:04: 8b:92:df:98:60:df:96:0a:89:87:cf:2f:51:5f:04: f4:e4:8f:c5:a7:69:a7:da:f2:7a:50:cf:64:26:f4: e2:0d:5e:8c:06:5d:19:f8:8a:c1:b4:43:d6:d6:6d: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AC:4B:32:EC:4E:5E:F4:6D:2A:0F:84:F8:C4:5C:7F:4D:7F:32:A6 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:aa:46:b5:90:79:8f:d4:dd:50:44:c3:80:06:40:22:62: d7:61:a7:c6:4d:1b:ef:49:ce:75:9b:06:03:32:d2:0e:ef:40: 4a:e0:26:9d:1e:61:87:c9:52:42:0c:1f:65:bd:63:fd:f7:bd: ac:35:f7:41:0f:07:af:27:d1:4e:3c:20:c7:d4:dd:b7:78:9b: 1c:d9:0b:f1:c7:75:16:a0:05:2b:df:29:85:fd:54:11:ee:27: c1:8d:16:fa:fe:6d:ce:ad:f7:d9:8d:b2:e1:45:33:91:a1:f6: b6:5f:cc:82:9a:31:55:c3:e3:d0:07:01:b5:92:af:c0:2a:06: 6d:b3:14:48:9a:93:2e:0d:be:ad:86:80:00:c7:54:1b:5f:e6: a3:97:b8:1b:0f:d4:38:9a:a5:16:96:b4:91:67:b5:60:9a:dc: 1c:df:88:07:8e:38:79:dc:1e:9b:06:bb:23:40:08:f6:a4:8e: 08:a2:d4:27:0f:15:ff:f8:96:ad:17:4e:bb:24:9f:02:a6:66: b0:fc:dd:2f:97:ad:ca:93:f0:4d:6a:1e:c4:e2:8a:fa:be:85: 52:5a:98:f4:f8:f0:4d:11:ee:17:c4:40:f2:f1:00:d6:17:d7: 2b:ce:6e:e7:24:1d:ff:e2:88:89:49:1f:28:4b:72:87:b8:43: 5f:68:1f:4e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUTIj1S7KbdQEk9h1OUsKaQQMHtzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MjMxNTA5NThaFw0yNjA3MjQxNzIyNThaMDMxMTAvBgNV BAMTKDI2QUM0QjMyRUM0RTVFRjQ2RDJBMEY4NEY4QzQ1QzdGNEQ3RjMyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWbmjpz2uzJ72ebei22VBJiyn gqlGAnbRQjiR6OZosibdb4GdtWPztF4FL4Gb5mcSVB+C1OYqm0/mg7EYlv0CzxfC Lu0yWukJe5DFft0xTdfImNX6Tavo+rTROHpNh1FC3PNVCc1EL4V7NF26p8jSREe4 qeDus9OrbNwXWZXAGDBywpI4n5E7pqjx7WjyRFNDcafDuEf3tTcobZSimrg2oFSL CeqhISNZZypAJpdXPpQHhPsml9XlV6niA3Ykpb9FP/Rnlkz5iB7MucKqzw/gBIuS 35hg35YKiYfPL1FfBPTkj8Wnaafa8npQz2Qm9OINXowGXRn4isG0Q9bWbW2LAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUJqxLMuxOXvRtKg+E+MRcf01/MqYwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBG qKpGtZB5j9TdUETDgAZAImLXYafGTRvvSc51mwYDMtIO70BK4CadHmGHyVJCDB9l vWP9972sNfdBDwevJ9FOPCDH1N23eJsc2Qvxx3UWoAUr3ymF/VQR7ifBjRb6/m3O rffZjbLhRTORofa2X8yCmjFVw+PQBwG1kq/AKgZtsxRImpMuDb6thoAAx1QbX+aj l7gbD9Q4mqUWlrSRZ7Vgmtwc34gHjjh53B6bBrsjQAj2pI4IotQnDxX/+JatF067 JJ8Cpmaw/N0vl63Kk/BNah7E4or6voVSWpj0+PBNEe4XxEDy8QDWF9crzm7nJB3/ 4oiJSR8oS3KHuENfaB9O -----END CERTIFICATE-----Generated at Thu Jul 23 20:03:13 2026 by rpki-client