$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json) Hash identifier: 1l75Wj8n4V8EohWi1aIQVyNmIx+uQKNP2oa+JTGzAv8= Subject key identifier: DA:5F:D9:10:F3:9E:23:54:D3:12:7E:9B:D8:96:A8:FA:83:E5:6B:87 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 46C9C761D65B8CD47894488C95A442E54DA7B4EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft Manifest number: 0167 Signing time: Tue 12 May 2026 05:28:24 +0000 Manifest this update: Tue 12 May 2026 05:23:24 +0000 Manifest next update: Wed 13 May 2026 07:11:24 +0000 Files and hashes: 1: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=) 2: F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer (hash: RJ01XoOHPfWLkR8PwmFL+ze2TFvWzRhOgvRC4tKIXsw=) 3: AS61575.roa (hash: 28h1c2Unte9m6JfK2qV2CncYmTmTY54Ou2BLMXZE2TI=) 4: AS61574.roa (hash: mJSNTI1CmowbL/Jt9Ht6Kr+3PEoJsC+guXaJ+TUQYew=) 5: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: IKWzU8v5oNAQ2ldm41mWpV2NPX27zzfY6udz1NqgMH4=) 6: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer (hash: 759JSWPMroO0sBWluFHTkhK9ORxLa6aiqvD62ap7QMU=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 07:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c9:c7:61:d6:5b:8c:d4:78:94:48:8c:95:a4:42:e5:4d:a7:b4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: May 12 05:23:24 2026 GMT Not After : May 13 07:11:24 2026 GMT Subject: CN=DA5FD910F39E2354D3127E9BD896A8FA83E56B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:3f:79:d5:6b:e2:fc:7e:12:25:40:84:b1: b2:00:13:08:a5:b2:c0:27:40:41:5b:06:7e:2a:69: 7c:71:09:58:12:dd:2f:0d:2b:c8:d4:1f:97:55:ac: a4:1d:e6:94:52:af:33:47:77:27:9f:11:aa:4c:37: 8f:bf:de:b5:85:e5:5d:a2:06:4a:80:ac:de:59:25: 22:e3:41:2b:0f:55:24:49:72:b8:e5:4e:a1:75:e6: 93:d9:51:8e:e8:2c:1b:d1:d7:9b:ed:dc:9f:83:bd: 5d:ca:ff:1e:3e:a1:98:c9:a6:a5:5f:19:4e:33:04: 0b:12:c9:18:78:00:7d:c8:46:14:b4:62:f2:58:de: e6:1c:72:10:cc:3d:77:dc:77:8f:71:41:7f:2b:4d: 62:12:9b:54:c9:6c:3e:61:d1:5c:0a:90:39:5e:52: 73:cd:4a:98:03:95:a6:45:30:5e:96:da:ef:d3:a7: a3:ae:db:da:11:64:08:0c:b6:31:41:df:d8:63:c1: bc:25:d3:ed:1f:de:77:73:da:b9:53:b3:cc:4a:5b: 39:56:c2:5f:a2:d7:ed:62:13:7f:77:93:b8:45:a0: c4:bd:8c:22:4d:ea:c8:cd:dc:9a:b2:8a:26:b2:1b: f1:39:9c:40:ff:0b:08:4d:19:8d:83:83:a5:35:88: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5F:D9:10:F3:9E:23:54:D3:12:7E:9B:D8:96:A8:FA:83:E5:6B:87 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:41:89:83:19:32:b3:54:f1:1b:4a:d2:a0:5d:81:0f:f3:30: 4e:30:6f:69:98:5c:18:5d:7b:09:f6:a3:18:1c:9d:e3:af:7f: d3:27:93:65:34:62:10:6b:40:cd:48:4e:1e:43:91:65:46:4d: 60:8f:0e:03:fc:e6:3d:76:52:05:82:da:9f:f7:41:05:dc:b7: e5:c4:da:78:a7:b5:be:dd:57:cc:dd:77:e8:6c:96:54:e4:53: be:f6:64:a6:97:9a:a4:5e:db:09:9c:b4:a2:bd:d7:87:75:12: f6:d2:20:b9:fe:d7:aa:61:e5:d2:5e:0e:c6:1e:8b:72:32:05: db:61:fd:41:4d:ad:a0:03:a6:71:b3:06:c6:13:1f:83:77:e7: ac:39:5f:98:6e:ad:b8:b6:80:1a:6d:80:c3:50:fe:bd:7d:b2: 3f:64:b8:a5:4b:8e:de:a1:eb:68:4b:bc:dd:cf:2d:b7:a2:c9: 14:79:ab:78:95:5f:f4:6b:c2:15:c4:44:8a:47:fb:c3:6f:3b: a6:68:45:59:1a:9b:4e:4b:eb:d9:76:ab:7b:b3:3e:44:94:2e: 9f:ad:a1:7c:41:be:7c:1d:20:e0:12:72:72:53:81:14:f5:b8: ab:ec:52:eb:3a:68:b4:00:88:94:8f:7e:8d:f8:b1:62:26:73: ec:50:37:81 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIURsnHYdZbjNR4lEiMlaRC5U2ntOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjA1MTIwNTIzMjRaFw0yNjA1MTMwNzExMjRaMDMxMTAvBgNV BAMTKERBNUZEOTEwRjM5RTIzNTREMzEyN0U5QkQ4OTZBOEZBODNFNTZCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRD951Wvi/H4SJUCEsbIAEwil ssAnQEFbBn4qaXxxCVgS3S8NK8jUH5dVrKQd5pRSrzNHdyefEapMN4+/3rWF5V2i BkqArN5ZJSLjQSsPVSRJcrjlTqF15pPZUY7oLBvR15vt3J+DvV3K/x4+oZjJpqVf GU4zBAsSyRh4AH3IRhS0YvJY3uYcchDMPXfcd49xQX8rTWISm1TJbD5h0VwKkDle UnPNSpgDlaZFMF6W2u/Tp6Ou29oRZAgMtjFB39hjwbwl0+0f3ndz2rlTs8xKWzlW wl+i1+1iE393k7hFoMS9jCJN6sjN3JqyiiayG/E5nED/CwhNGY2Dg6U1iCbLAgMB AAGjggImMIICIjAdBgNVHQ4EFgQU2l/ZEPOeI1TTEn6b2Jao+oPla4cwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA zEGJgxkys1TxG0rSoF2BD/MwTjBvaZhcGF17CfajGByd469/0yeTZTRiEGtAzUhO HkORZUZNYI8OA/zmPXZSBYLan/dBBdy35cTaeKe1vt1XzN136GyWVORTvvZkppea pF7bCZy0or3Xh3US9tIguf7XqmHl0l4Oxh6LcjIF22H9QU2toAOmcbMGxhMfg3fn rDlfmG6tuLaAGm2Aw1D+vX2yP2S4pUuO3qHraEu83c8tt6LJFHmreJVf9GvCFcRE ikf7w287pmhFWRqbTkvr2Xare7M+RJQun62hfEG+fB0g4BJyclOBFPW4q+xS6zpo tACIlI9+jfixYiZz7FA3gQ== -----END CERTIFICATE-----Generated at Tue May 12 22:14:22 2026 by rpki-client