$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer File: F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer (raw, json) Hash identifier: RJ01XoOHPfWLkR8PwmFL+ze2TFvWzRhOgvRC4tKIXsw= Subject key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 24EEB5663790008190ED2D8508ACC921CED3510E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Manifest: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft caRepository: rsync://rpki-pp.com/repo/GOOFL/3/ Notify URL: https://rpki-pp.com/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 15:42:48 +0000 Certificate not after: Fri 12 Mar 2027 15:47:48 +0000 Subordinate resources: AS: 61574 -- 61576 IP: 138.185.228.0/22 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:b5:66:37:90:00:81:90:ed:2d:85:08:ac:c9:21:ce:d3:51:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Mar 13 15:42:48 2026 GMT Not After : Mar 12 15:47:48 2027 GMT Subject: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:d3:7c:49:d2:70:63:6c:22:7f:c2:14:b1: c6:e9:fe:05:ea:8b:25:93:05:c0:a4:30:1c:d0:95: 0e:6c:2d:83:bf:2c:0a:84:72:d9:d8:ba:bc:3b:bc: ec:cf:c5:59:6f:17:eb:1a:01:65:a5:fc:ef:3f:fd: 5c:ed:2e:1c:8b:2b:08:5b:d0:88:12:a0:0f:07:f1: 21:f7:9a:f7:62:42:f2:8d:47:5d:00:4f:11:a6:ea: c7:57:a4:d7:07:74:b2:57:5a:09:1d:8e:fb:73:83: c0:9e:67:a3:88:79:ec:1c:cc:d7:16:2b:79:be:c9: 8b:d6:ca:65:83:5a:3e:93:95:39:4e:49:26:c5:16: 66:32:a1:56:b9:0e:a8:7f:fb:78:5e:8c:f3:18:ef: f5:a7:58:d7:88:ba:e5:aa:f1:84:86:2c:f6:43:2f: eb:ba:99:90:44:bd:f2:90:10:4a:9f:8a:ca:3b:2a: 67:01:0f:38:49:f1:3a:27:5d:78:67:25:6c:88:b7: e9:30:ce:81:03:6a:a0:ee:53:c1:4e:55:5c:87:bc: aa:cd:e7:1b:ce:a0:b1:b6:9b:5a:f4:f5:c3:e5:65: 36:aa:85:9e:81:d7:50:28:cd:60:ac:a7:75:50:f4: c9:fd:f5:37:b4:e9:16:f6:c9:eb:17:e1:a2:5d:c9: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: CA Repository - URI:rsync://rpki-pp.com/repo/GOOFL/3/ RPKI Manifest - URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft RPKI Notify - URI:https://rpki-pp.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 Signature Algorithm: sha256WithRSAEncryption 9f:b0:59:26:32:3b:2e:b7:09:8c:5d:fe:df:53:53:48:5c:41: b0:74:f1:2c:34:77:2d:eb:97:9d:47:16:fb:f2:e2:89:fe:82: 0d:4b:ce:a9:fb:b9:17:ff:60:c0:f0:68:c7:e6:bf:c5:4d:2e: 13:b8:6a:e8:b1:85:4c:15:0b:fb:80:a6:dc:9b:ed:6e:cc:df: 81:08:f7:4c:e6:df:19:ff:b0:d3:44:b0:0d:32:e2:6a:84:78: c2:ba:87:6d:28:a1:c0:44:84:f3:61:a6:10:c7:c8:cd:89:bb: 0f:04:5b:d1:9e:d6:7a:d4:16:2d:b8:f8:28:ee:70:2f:a3:4a: 1b:7b:9c:5c:97:1e:4e:df:e1:5f:a0:77:68:d1:64:28:a3:87: 76:7f:75:93:60:74:3f:41:39:a7:68:29:d7:6b:c4:33:a8:83: 07:7a:cb:26:90:da:d5:56:2b:b8:f0:2c:71:50:25:90:93:57: 35:1b:88:af:52:25:1c:57:c7:ff:d1:ce:aa:f0:60:04:7d:1d: 20:07:68:5f:89:a8:86:34:44:d2:be:3a:72:12:ff:f7:38:22: a4:7e:f0:33:ab:87:4a:fa:78:3d:65:1a:c3:c9:f1:28:fa:e6: b8:82:20:66:50:22:87:eb:ff:fb:30:67:9f:77:73:e0:fb:d4: 21:c5:1a:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUJO61ZjeQAIGQ7S2FCKzJIc7TUQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjAzMTMxNTQyNDhaFw0yNzAzMTIxNTQ3NDhaMDMxMTAvBgNV BAMTKEYwQUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybtN8SdJwY2wif8IUscbp/gXq iyWTBcCkMBzQlQ5sLYO/LAqEctnYurw7vOzPxVlvF+saAWWl/O8//VztLhyLKwhb 0IgSoA8H8SH3mvdiQvKNR10ATxGm6sdXpNcHdLJXWgkdjvtzg8CeZ6OIeewczNcW K3m+yYvWymWDWj6TlTlOSSbFFmYyoVa5Dqh/+3hejPMY7/WnWNeIuuWq8YSGLPZD L+u6mZBEvfKQEEqfiso7KmcBDzhJ8TonXXhnJWyIt+kwzoEDaqDuU8FOVVyHvKrN 5xvOoLG2m1r09cPlZTaqhZ6B11AozWCsp3VQ9Mn99Te06Rb2yesX4aJdyfV7AgMB AAGjggKNMIICiTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwqtkl5TS9cuaz 6YaSAdBGx5Fq/DAfBgNVHSMEGDAWgBQ/jrzAQo3WCPOdhYvokbhbADJoGjAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8wLzNGOEVC Q0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5 MUI4NUIwMDMyNjgxQS5jZXIwgdEGCCsGAQUFBwELBIHEMIHBMC0GCCsGAQUFBzAF hiFyc3luYzovL3Jwa2ktcHAuY29tL3JlcG8vR09PRkwvMy8wWQYIKwYBBQUHMAqG TXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0YwQUFEOTI1RTUzNEJE NzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMubWZ0MDUGCCsGAQUFBzANhilodHRw czovL3Jwa2ktcHAuY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirnk MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIDAPCGAgMA8IgwDQYJKoZIhvcNAQEL BQADggEBAJ+wWSYyOy63CYxd/t9TU0hcQbB08Sw0dy3rl51HFvvy4on+gg1Lzqn7 uRf/YMDwaMfmv8VNLhO4auixhUwVC/uAptyb7W7M34EI90zm3xn/sNNEsA0y4mqE eMK6h20oocBEhPNhphDHyM2Juw8EW9Ge1nrUFi24+CjucC+jSht7nFyXHk7f4V+g d2jRZCijh3Z/dZNgdD9BOadoKddrxDOogwd6yyaQ2tVWK7jwLHFQJZCTVzUbiK9S JRxXx//RzqrwYAR9HSAHaF+JqIY0RNK+OnIS//c4IqR+8DOrh0r6eD1lGsPJ8Sj6 5riCIGZQIofr//swZ593c+D71CHFGkE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:43:26 2026 by rpki-client