$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: bqO7pzLvqBO691akr6uWJSMSS57uhL/O57z7DtTFQTM= Subject key identifier: 68:7A:78:EF:9A:FA:29:50:E6:0E:47:08:17:11:F7:DA:69:C9:E4:62 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 0323C941D396903B67B4401FB218AA8E65B1193A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: B7 Signing time: Sun 15 Nov 2026 02:37:36 +0000 Manifest this update: Sun 15 Nov 2026 02:32:36 +0000 Manifest next update: Mon 16 Nov 2026 04:29:36 +0000 Files and hashes: 1: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A=) 2: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: d7MqS8q6KGlPX8o+mpM8lUogxJp8Fs6ULlEqEq6N7EQ=) 3: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:23:c9:41:d3:96:90:3b:67:b4:40:1f:b2:18:aa:8e:65:b1:19:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Nov 15 02:32:36 2026 GMT Not After : Nov 16 04:29:36 2026 GMT Subject: CN=687A78EF9AFA2950E60E47081711F7DA69C9E462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:74:18:9a:c6:c1:01:64:47:db:b6:29:ff: 93:f1:33:60:14:21:90:ef:aa:2d:d8:f4:58:59:e3: a6:f9:71:79:06:2d:85:e6:4d:77:04:85:cb:bc:d4: 5a:99:d4:e0:2b:94:35:33:ad:a3:14:4a:aa:1f:5a: 4f:41:3b:84:2c:81:19:7f:92:b6:94:03:08:7e:a4: f5:d1:eb:a8:08:66:28:35:cb:a6:ca:6d:cc:15:ae: fa:36:53:10:7d:94:ff:89:4b:63:bb:5d:19:98:6c: ce:e8:b7:12:f9:b1:a1:87:a9:cb:a3:21:8d:19:01: b4:f2:d0:27:b7:da:49:aa:38:c3:cd:d5:e2:6d:e7: e8:cd:9c:4b:53:df:50:fd:6c:82:37:bb:f5:00:3a: 9c:aa:8b:03:22:6f:12:ff:a3:a8:52:86:60:a1:ac: 8e:57:7c:a9:31:5e:17:8f:6c:87:24:de:97:e8:07: b6:0a:07:80:39:fd:30:f8:77:da:de:d6:a7:67:92: 8c:f2:cc:28:c3:db:14:05:a3:17:a6:b5:a4:ce:c9: e9:10:3c:c2:b5:06:2d:a9:e1:b1:0f:fb:62:fe:cf: 32:36:d2:1a:d8:dd:54:d6:81:6d:aa:63:81:23:ce: 3b:b6:15:cb:f9:17:3b:13:00:ab:10:d0:a2:bc:c5: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:78:EF:9A:FA:29:50:E6:0E:47:08:17:11:F7:DA:69:C9:E4:62 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:93:51:de:61:3e:6a:d6:fb:bf:ce:a1:56:1f:54:0b:8d:b3: 73:f4:82:10:a5:93:a6:22:3f:81:31:78:14:21:96:d9:6e:34: 61:2c:ba:96:e3:41:9f:11:40:a0:0e:43:10:0e:0b:54:10:d1: 47:19:74:f4:38:6c:00:b9:69:5a:9d:8f:71:aa:81:1d:a0:00: b6:36:a4:87:cc:0b:79:d3:4b:fb:1b:e3:a6:24:43:93:92:58: 6a:d2:9f:5b:07:dd:db:73:81:36:d5:be:72:af:c3:7a:ac:a5: 9b:a5:28:8b:bf:e1:ce:23:6f:f2:c3:6d:50:86:82:84:4b:fe: b4:50:22:10:91:6a:22:38:2b:64:47:4a:2e:09:de:11:f0:9f: a8:59:8e:e1:3c:5d:54:2d:12:4e:d7:ff:69:59:16:3a:03:0d: 74:c6:78:87:69:ca:02:f0:8d:76:51:7c:19:c5:9e:e0:d1:e1: 9b:10:21:23:77:47:ab:7d:8f:f2:a7:c9:81:bf:ab:5c:97:4b: 70:d5:bb:94:8e:9e:88:88:20:fd:0c:84:89:67:e9:f8:eb:ee: 7d:13:f0:64:53:49:90:f7:7c:9f:bb:39:08:ea:60:45:22:b2: b3:b7:5a:5f:85:34:a1:8c:74:38:34:bf:17:fd:26:6d:fa:77: 44:97:af:e6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUAyPJQdOWkDtntEAfshiqjmWxGTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjExMTUwMjMyMzZaFw0yNjExMTYwNDI5MzZaMDMxMTAvBgNV BAMTKDY4N0E3OEVGOUFGQTI5NTBFNjBFNDcwODE3MTFGN0RBNjlDOUU0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2XQYmsbBAWRH27Yp/5PxM2AU IZDvqi3Y9FhZ46b5cXkGLYXmTXcEhcu81FqZ1OArlDUzraMUSqofWk9BO4QsgRl/ kraUAwh+pPXR66gIZig1y6bKbcwVrvo2UxB9lP+JS2O7XRmYbM7otxL5saGHqcuj IY0ZAbTy0Ce32kmqOMPN1eJt5+jNnEtT31D9bII3u/UAOpyqiwMibxL/o6hShmCh rI5XfKkxXhePbIck3pfoB7YKB4A5/TD4d9re1qdnkozyzCjD2xQFoxemtaTOyekQ PMK1Bi2p4bEP+2L+zzI20hrY3VTWgW2qY4Ejzju2Fcv5FzsTAKsQ0KK8xZqJAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUaHp475r6KVDmDkcIFxH32mnJ5GIwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBg k1HeYT5q1vu/zqFWH1QLjbNz9IIQpZOmIj+BMXgUIZbZbjRhLLqW40GfEUCgDkMQ DgtUENFHGXT0OGwAuWlanY9xqoEdoAC2NqSHzAt500v7G+OmJEOTklhq0p9bB93b c4E21b5yr8N6rKWbpSiLv+HOI2/yw21QhoKES/60UCIQkWoiOCtkR0ouCd4R8J+o WY7hPF1ULRJO1/9pWRY6Aw10xniHacoC8I12UXwZxZ7g0eGbECEjd0erfY/yp8mB v6tcl0tw1buUjp6IiCD9DISJZ+n46+59E/BkU0mQ93yfuzkI6mBFIrKzt1pfhTSh jHQ4NL8X/SZt+ndEl6/m -----END CERTIFICATE-----Generated at Sun Nov 15 15:48:41 2026 by rpki-client