$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer File: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer (raw, json) Hash identifier: 759JSWPMroO0sBWluFHTkhK9ORxLa6aiqvD62ap7QMU= Subject key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 1B3C37EED09F6D7A510B6DFA3489B54BA3D199B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Manifest: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft caRepository: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/ Notify URL: https://krill.peering.ee.columbia.edu/rrdp/notification.xml Certificate not before: Tue 17 Mar 2026 00:47:35 +0000 Certificate not after: Tue 16 Mar 2027 00:52:35 +0000 Subordinate resources: AS: 61574 -- 61576 IP: 2804:269c:2c::/46 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3c:37:ee:d0:9f:6d:7a:51:0b:6d:fa:34:89:b5:4b:a3:d1:99:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Mar 17 00:47:35 2026 GMT Not After : Mar 16 00:52:35 2027 GMT Subject: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:77:49:76:8c:8c:51:41:8d:42:80:4c:65: ed:8e:6b:cc:ae:11:c8:2f:d0:54:31:2d:8a:2a:ab: 16:9a:b4:51:0e:62:fa:69:2e:af:bb:7c:3b:4f:a4: 91:82:6d:51:97:f0:66:5a:73:e4:7b:c6:77:fd:55: 58:cb:a5:ed:ad:8c:0d:1f:de:0e:2a:6f:13:ff:dc: 44:50:fa:dc:b1:c2:fb:9b:97:dc:14:26:aa:f7:bb: 4c:32:a9:26:81:24:d8:c2:7c:25:ed:29:b6:b8:19: 5b:5d:fe:09:63:84:07:ae:39:09:ce:78:12:8e:85: 4f:10:1d:39:3f:88:58:c7:1e:4e:ab:4d:40:db:59: 55:a1:4b:13:72:8a:a1:08:90:f9:15:7d:51:04:28: 55:ce:fb:e6:cd:e4:43:8b:18:ed:62:35:75:c2:3a: cb:c2:4e:c0:36:37:a5:a0:4b:5e:b9:ec:2d:3b:c5: 65:59:99:a5:7a:12:59:a8:24:62:66:33:de:f2:95: c2:fc:3b:ae:ab:b0:23:a8:16:e0:78:fd:d8:c1:fa: 14:70:a4:37:38:8a:25:9a:93:92:52:b2:14:f8:9c: 3a:a1:4b:b9:57:09:89:ba:e6:b5:64:49:4a:be:88: 74:52:e3:6d:6b:db:f6:f6:93:b2:10:ea:ed:cb:4e: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: CA Repository - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/ RPKI Manifest - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft RPKI Notify - URI:https://krill.peering.ee.columbia.edu/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:2c::/46 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 Signature Algorithm: sha256WithRSAEncryption 1a:82:4e:1d:b8:6c:08:ed:e1:76:7d:52:92:35:82:2d:44:e1: 95:4f:2e:59:c5:e0:e4:5d:4a:8c:3f:9e:04:d7:f2:97:4c:03: cf:26:1b:4d:4e:94:b3:7e:68:7c:ad:f6:c6:d4:00:32:93:37: fb:c8:5f:d4:5e:6d:26:bc:bc:e1:78:2e:26:f8:60:38:ed:e7: 81:3c:d6:0c:3e:37:43:55:e6:d9:ac:fc:e5:4f:a6:cf:48:5d: be:21:e6:2b:00:88:b3:9c:e4:b2:3a:61:d2:46:ec:39:fe:98: b0:58:f0:74:55:bf:de:7b:a3:1a:7e:70:8b:c9:db:a0:29:5a: 2e:7e:a8:84:01:bd:47:8e:bd:2e:aa:d6:ae:e3:18:69:87:05: 2a:6b:cf:56:ec:9a:b7:fd:8a:28:c9:ff:25:63:73:85:66:ce: d9:3d:b3:d2:43:b3:83:80:d9:46:27:e2:62:74:6e:55:fc:4d: 55:19:d0:10:a5:ed:d8:4a:12:4d:e6:fd:08:36:a1:e6:8f:23: 7a:00:49:88:d1:36:6c:64:52:77:b4:eb:80:80:bc:f3:49:7e: b6:82:70:ea:13:53:47:d7:fc:cf:93:f4:49:4e:57:0e:03:64: 65:fe:cb:10:cf:ce:11:c3:fb:83:66:13:9a:97:a7:4a:b2:98: 12:0e:af:82 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUGzw37tCfbXpRC236NIm1S6PRmbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjAzMTcwMDQ3MzVaFw0yNzAzMTYwMDUyMzVaMDMxMTAvBgNV BAMTKDE2MEZEMjFBOTc2QTE5QTdCODFBNTlBQUZBNjlGNkEwQUZFMzZEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi33dJdoyMUUGNQoBMZe2Oa8yu Ecgv0FQxLYoqqxaatFEOYvppLq+7fDtPpJGCbVGX8GZac+R7xnf9VVjLpe2tjA0f 3g4qbxP/3ERQ+tyxwvubl9wUJqr3u0wyqSaBJNjCfCXtKba4GVtd/gljhAeuOQnO eBKOhU8QHTk/iFjHHk6rTUDbWVWhSxNyiqEIkPkVfVEEKFXO++bN5EOLGO1iNXXC OsvCTsA2N6WgS1657C07xWVZmaV6ElmoJGJmM97ylcL8O66rsCOoFuB4/djB+hRw pDc4iiWak5JSshT4nDqhS7lXCYm65rVkSUq+iHRS421r2/b2k7IQ6u3LTo+XAgMB AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWD9Ial2oZp7ga War6afagr+NtDDAfBgNVHSMEGDAWgBQ/jrzAQo3WCPOdhYvokbhbADJoGjAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8wLzNGOEVC Q0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5 MUI4NUIwMDMyNjgxQS5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMEwGCCsGAQUF BzAFhkByc3luYzovL2tyaWxsLnBlZXJpbmcuZWUuY29sdW1iaWEuZWR1L3JlcG8v bGlmZW5nLWhpdGNvd2hvcnNlLzAvMHgGCCsGAQUFBzAKhmxyc3luYzovL2tyaWxs LnBlZXJpbmcuZWUuY29sdW1iaWEuZWR1L3JlcG8vbGlmZW5nLWhpdGNvd2hvcnNl LzAvMTYwRkQyMUE5NzZBMTlBN0I4MUE1OUFBRkE2OUY2QTBBRkUzNkQwQy5tZnQw RwYIKwYBBQUHMA2GO2h0dHBzOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIoBCacACwwIQYIKwYBBQUH AQgBAf8EEjAQoA4wDDAKAgMA8IYCAwDwiDANBgkqhkiG9w0BAQsFAAOCAQEAGoJO HbhsCO3hdn1SkjWCLUThlU8uWcXg5F1KjD+eBNfyl0wDzyYbTU6Us35ofK32xtQA MpM3+8hf1F5tJry84XguJvhgOO3ngTzWDD43Q1Xm2az85U+mz0hdviHmKwCIs5zk sjph0kbsOf6YsFjwdFW/3nujGn5wi8nboClaLn6ohAG9R469LqrWruMYaYcFKmvP Vuyat/2KKMn/JWNzhWbO2T2z0kOzg4DZRifiYnRuVfxNVRnQEKXt2EoSTeb9CDah 5o8jegBJiNE2bGRSd7TrgIC880l+toJw6hNTR9f8z5P0SU5XDgNkZf7LEM/OEcP7 g2YTmpenSrKYEg6vgg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:36:43 2026 by rpki-client