$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft File: 9450D551BB071689045ED8318A0D2E8F75FED7AF.mft (raw, json) Hash identifier: g/ATuSuvsR+KCXMfSyJuozX673Sp0AhyUjNofTXS3h4= Subject key identifier: E5:CC:07:A9:B9:7A:D9:3E:EE:FA:86:BD:E1:CB:81:60:DF:CF:9D:92 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 3104889B176BA93951E66C3C7D2617127F4EEB3F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft Manifest number: 71 Signing time: Wed 23 Sep 2026 23:29:40 +0000 Manifest this update: Wed 23 Sep 2026 23:24:40 +0000 Manifest next update: Fri 25 Sep 2026 01:57:40 +0000 Files and hashes: 1: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (hash: 9JZzMCJAELBsiTvytsIe+HR/s0JxrrsJjiQWl8yw42A=) 2: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (hash: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI=) 3: 9450D551BB071689045ED8318A0D2E8F75FED7AF.crl (hash: X2XZFXAasBmWcxTjad1u8oHTiVi9uduem5IUJoJZnZY=) Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:04:88:9b:17:6b:a9:39:51:e6:6c:3c:7d:26:17:12:7f:4e:eb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Sep 23 23:24:40 2026 GMT Not After : Sep 25 01:57:40 2026 GMT Subject: CN=E5CC07A9B97AD93EEEFA86BDE1CB8160DFCF9D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:75:96:62:4d:f0:88:c1:3a:a3:0e:66:7d: 97:3d:95:21:ee:7d:95:b7:4d:4c:90:0c:94:9d:62: 30:0d:7e:c0:e5:0f:21:fc:e8:1d:1c:eb:d0:3d:5a: 46:f6:5c:0c:85:f0:ee:58:95:48:cb:8c:69:0d:64: 18:9a:7e:2e:80:46:e9:43:ed:99:ba:4a:ca:f9:14: 73:05:de:ad:f2:4d:5f:c3:17:bc:3e:dd:d2:a5:77: 23:65:56:35:97:aa:b6:7d:9e:9e:81:7b:d9:5d:f9: 39:d1:78:95:4c:d2:00:18:d8:cb:18:4e:e8:10:69: 39:c4:a0:5c:61:68:2c:76:35:4c:51:d3:44:7d:5e: da:b9:e0:9d:28:16:41:db:b7:98:ee:61:9c:70:18: 6b:77:a2:5b:bc:e3:6f:61:a2:d3:9b:9f:61:a2:6a: 88:a1:c5:0f:41:6f:6d:93:fd:48:fd:2d:b3:e7:90: 19:fb:7d:6a:15:6d:ba:af:a0:de:7f:1e:cd:69:05: 92:9d:d5:2f:cb:e0:79:f8:9d:37:0a:17:2a:9c:20: 84:16:7a:54:b2:6a:4b:e9:66:4d:44:d8:93:4f:a4: cd:b7:75:90:2b:0b:15:e1:e0:4c:aa:d6:41:6a:fe: d6:bd:b0:b4:22:ee:56:8e:49:fb:24:00:d6:41:d1: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:07:A9:B9:7A:D9:3E:EE:FA:86:BD:E1:CB:81:60:DF:CF:9D:92 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cf:c2:e1:aa:ce:1c:5a:24:f4:ca:59:74:27:29:fd:71:e3: 3b:60:5d:2a:4c:0f:fc:5e:33:0c:1f:b6:aa:01:85:0c:75:82: 77:0b:6c:66:89:a0:ce:1a:82:98:65:74:9d:ce:be:2f:63:5a: 78:ef:bb:b1:58:be:db:72:bd:91:83:cb:b4:3b:10:f5:78:b0: 9d:b4:28:0f:56:66:b1:d8:85:64:ba:29:d9:2a:4b:c0:b3:c8: a6:7a:3e:ee:cf:6d:ce:4b:7f:e1:0f:8f:6f:06:7d:a7:1b:b7: d0:5c:cf:8e:de:12:bc:e3:fe:65:9e:b3:7c:fd:24:0e:18:fd: 62:36:39:2f:5c:20:d9:5f:78:ce:65:55:17:cb:0a:b6:52:29: 36:2d:bb:b1:04:08:04:62:61:00:0a:b6:49:e9:1a:fd:6b:d1: f8:be:36:de:36:f2:e7:b7:36:cf:ba:32:7c:47:c1:d2:ad:4b: f7:9f:df:11:55:4b:a0:a4:2e:88:dc:98:c4:6a:8f:f9:27:05: 6d:49:31:2e:0c:62:c3:e2:f6:a3:99:7d:83:12:12:b2:e2:95: 8e:b4:d7:40:b1:c8:c6:b1:27:5d:88:0e:b9:d7:25:6c:88:0d: f8:18:57:4d:b2:aa:18:25:71:fc:6e:eb:da:19:7f:a2:7d:64: 98:16:8a:ae -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUMQSImxdrqTlR5mw8fSYXEn9O6z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA5MjMyMzI0NDBaFw0yNjA5MjUwMTU3NDBaMDMxMTAvBgNV BAMTKEU1Q0MwN0E5Qjk3QUQ5M0VFRUZBODZCREUxQ0I4MTYwREZDRjlEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycnWWYk3wiME6ow5mfZc9lSHu fZW3TUyQDJSdYjANfsDlDyH86B0c69A9Wkb2XAyF8O5YlUjLjGkNZBiafi6ARulD 7Zm6Ssr5FHMF3q3yTV/DF7w+3dKldyNlVjWXqrZ9np6Be9ld+TnReJVM0gAY2MsY TugQaTnEoFxhaCx2NUxR00R9Xtq54J0oFkHbt5juYZxwGGt3olu8429hotObn2Gi aoihxQ9Bb22T/Uj9LbPnkBn7fWoVbbqvoN5/Hs1pBZKd1S/L4Hn4nTcKFyqcIIQW elSyakvpZk1E2JNPpM23dZArCxXh4Eyq1kFq/ta9sLQi7laOSfskANZB0ZaPAgMB AAGjggIlMIICITAdBgNVHQ4EFgQU5cwHqbl62T7u+oa94cuBYN/PnZIwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3lu YzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1cy8yLzk0NTBE NTUxQkIwNzE2ODkwNDVFRDgzMThBMEQyRThGNzVGRUQ3QUYubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX z8Lhqs4cWiT0yll0Jyn9ceM7YF0qTA/8XjMMH7aqAYUMdYJ3C2xmiaDOGoKYZXSd zr4vY1p477uxWL7bcr2Rg8u0OxD1eLCdtCgPVmax2IVkuinZKkvAs8imej7uz23O S3/hD49vBn2nG7fQXM+O3hK84/5lnrN8/SQOGP1iNjkvXCDZX3jOZVUXywq2Uik2 LbuxBAgEYmEACrZJ6Rr9a9H4vjbeNvLntzbPujJ8R8HSrUv3n98RVUugpC6I3JjE ao/5JwVtSTEuDGLD4vajmX2DEhKy4pWOtNdAscjGsSddiA651yVsiA34GFdNsqoY JXH8buvaGX+ifWSYFoqu -----END CERTIFICATE-----Generated at Thu Sep 24 08:25:43 2026 by rpki-client