
$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
File: F3980A549A69CF361510BAE9C265FFA332C71DD2.mft (raw, json)
Hash identifier: 0i5YtwPfu2M8rYOi/JEaBRE1tJ+6k2Hj8Qzd8gBSg60=
Subject key identifier: 73:24:EB:7E:98:70:C7:2D:2E:56:49:01:F3:1F:97:DE:B0:F2:EC:B7
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial: 41874981FF4733D8BD7A627FF18BA02F92D20A5F
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 13:03:48 +0000
Manifest this update: Wed 23 Sep 2026 12:58:48 +0000
Manifest next update: Thu 24 Sep 2026 16:01:48 +0000
Files and hashes: 1: AS61575.asa (hash: KZsa3VppTCrO+eUTiZzuRn2DRov96vbhASXWcsKowaU=)
2: 323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa (hash: XZNIZFLX1ToBilKimiEPe/jgsV7oXQFmiCZTt8m3j64=)
3: F3980A549A69CF361510BAE9C265FFA332C71DD2.crl (hash: U+AFwVE1iPuCr08mzwwOhF2f03t3839wHEyDTA+4LzY=)
4: 323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa (hash: ItCTfp7Zm7miWrrl6fMguGUqGP9/OzhRMquw80N+nAQ=)
5: AS61576.asa (hash: hzL/GMtLjja5x0UhgZWzZWKpoXVKqQMpj0wnwqUlDfw=)
6: 323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa (hash: 3PiMeU5I4aQkssZPlJqNjiKEZlf65rAkgAPvpTvCabo=)
7: 323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa (hash: JxiztBjas9diXSq/zEeN4O0OCr6uoDsHqtp9NofLcyo=)
Validation: OK
Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 24 Sep 2026 13:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:87:49:81:ff:47:33:d8:bd:7a:62:7f:f1:8b:a0:2f:92:d2:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Validity
Not Before: Sep 23 12:58:48 2026 GMT
Not After : Sep 24 16:01:48 2026 GMT
Subject: CN=7324EB7E9870C72D2E564901F31F97DEB0F2ECB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:09:d7:20:1d:27:c1:03:c4:6b:c0:6c:93:
34:7d:a9:bf:a0:35:53:ce:3d:89:34:f3:3e:dd:47:
87:3b:6e:f1:50:47:7e:8b:18:37:79:d2:b7:cc:20:
47:07:81:3c:0a:4c:65:46:65:33:d8:89:a3:44:ef:
f2:7d:0e:84:c8:29:a2:1f:ab:62:39:fe:a9:ce:8b:
fb:8a:9f:da:fa:85:9b:18:9d:4d:39:df:fe:c2:b5:
e6:c9:50:fd:dc:21:1d:dc:5b:fd:57:d9:cb:c8:89:
1b:e2:eb:e9:63:7c:32:f3:f6:d1:dd:8e:5f:41:77:
97:de:b2:2c:d1:25:a2:78:58:22:81:86:2b:16:43:
fb:fb:95:38:5e:23:57:92:37:26:af:d0:69:46:7e:
c4:74:3a:5f:3c:c4:d4:cd:1a:a8:66:9c:62:76:75:
e0:43:cd:6e:43:44:25:1d:f4:a4:c4:f6:fd:96:08:
6d:d3:f5:f4:0a:2b:88:c2:78:a3:18:fa:1d:7e:60:
e4:bf:d2:b5:46:4c:b4:c5:21:f6:35:95:9b:c7:3b:
16:dc:f1:ca:8f:5c:15:f3:a0:e0:29:d2:2b:81:52:
bd:b5:aa:45:76:4d:20:ae:38:59:03:56:88:1f:dd:
67:12:50:45:a4:4b:fa:bb:fe:1d:12:f5:4d:3a:fa:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:24:EB:7E:98:70:C7:2D:2E:56:49:01:F3:1F:97:DE:B0:F2:EC:B7
X509v3 Authority Key Identifier:
keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject Information Access:
Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9c:93:5c:c1:01:9c:7d:3a:ac:62:11:f9:e5:a8:32:44:1e:
b6:51:15:c4:ac:eb:10:3b:aa:40:71:ae:e9:fd:c8:cb:a9:28:
6a:9d:25:9f:59:b3:ea:58:76:bc:8c:ec:fa:d8:90:e2:a2:cc:
f6:61:7a:06:ac:0f:aa:fa:39:ef:82:ba:e5:47:ea:bc:0b:dd:
49:67:b2:11:8d:c0:cd:06:27:ef:21:96:28:2e:47:92:bd:58:
86:e4:7d:3e:02:7d:18:46:4e:4c:46:6b:7b:02:f4:17:ca:22:
04:8e:72:ec:bc:bf:1d:21:82:90:da:7f:c4:f1:07:0c:0f:4f:
c4:f6:24:8b:20:1e:dd:92:2b:27:76:90:1f:7a:e4:64:13:bd:
b1:c7:48:ee:63:f0:03:f7:ce:96:85:70:86:8d:5c:6b:58:da:
84:60:03:69:9d:d6:0c:a8:17:0b:e5:7a:95:2e:74:d7:83:c7:
e9:af:c3:16:bb:46:18:4f:1e:d0:37:22:e0:91:fc:12:06:4d:
0c:06:c7:80:06:47:66:32:20:a7:4c:d1:60:49:d5:cd:60:fa:
08:dd:54:47:c3:2d:70:ea:20:22:45:2a:5f:37:f8:65:5f:c3:
1b:82:1c:e2:31:19:dc:8d:62:4c:3c:39:2e:10:27:58:b8:98:
0b:4d:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:39:56 2026 by rpki-client