$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/13134316A59A346059777B42752C571829EF804F.cer File: 13134316A59A346059777B42752C571829EF804F.cer (raw, json) Hash identifier: 7f8I0DfCpqUdNBTtoNs/5GMcwI4JdsScuLq8SWT8arA= Subject key identifier: 13:13:43:16:A5:9A:34:60:59:77:7B:42:75:2C:57:18:29:EF:80:4F Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D Certificate serial: 4995575BAA1E997CCC465FDF31C7081D5A396347 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Manifest: rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.mft caRepository: rsync://krill.dacs.utwente.nl/repo/utwente/0/ Notify URL: https://krill.dacs.utwente.nl/rrdp/notification.xml Certificate not before: Mon 29 Jun 2026 12:01:56 +0000 Certificate not after: Mon 28 Jun 2027 12:06:56 +0000 Subordinate resources: AS: 61574 -- 61576 IP: 2804:269c:38::/46 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 15:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:95:57:5b:aa:1e:99:7c:cc:46:5f:df:31:c7:08:1d:5a:39:63:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D Validity Not Before: Jun 29 12:01:56 2026 GMT Not After : Jun 28 12:06:56 2027 GMT Subject: CN=13134316A59A346059777B42752C571829EF804F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:ea:64:7e:f4:67:e1:55:01:11:7c:88:9c: d7:f7:f9:fd:36:09:41:43:b7:20:ed:40:9b:40:2a: 32:28:31:b8:da:a7:ee:ea:c9:9e:bd:45:bd:22:0b: 40:b3:88:4e:12:96:ae:50:08:2e:92:3a:6a:de:78: 30:5f:36:31:49:b6:85:dc:3a:76:60:10:12:be:d0: c3:53:a6:d0:2d:42:5e:d9:33:fc:dc:cb:48:81:d5: 9c:7b:90:e9:27:d8:67:08:24:52:59:ee:c6:5f:3b: ab:58:b8:e2:5f:68:8e:74:64:2c:61:1c:55:40:50: 82:d1:56:61:e0:e2:56:37:09:50:23:87:f5:a7:63: fb:70:9e:43:fa:f6:ac:23:c8:05:b6:e3:10:e4:e9: 9b:4d:63:5e:a8:c0:e4:12:46:cd:29:79:27:99:8c: 83:4f:c1:53:e8:e8:44:9e:54:b7:24:ae:81:84:e1: d9:81:e5:03:67:13:ff:35:6c:12:ae:62:34:ce:f3: 0a:ff:79:d5:36:35:4b:95:3c:72:16:1b:26:71:0d: a9:eb:83:3a:17:0f:53:a6:90:3e:b2:c6:31:e6:5c: 7e:ab:24:5f:38:38:18:b1:a5:f4:ae:f2:90:eb:cd: 21:bb:83:40:37:cf:84:72:39:d4:ff:d7:5b:aa:17: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:13:43:16:A5:9A:34:60:59:77:7B:42:75:2C:57:18:29:EF:80:4F X509v3 Authority Key Identifier: keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject Information Access: CA Repository - URI:rsync://krill.dacs.utwente.nl/repo/utwente/0/ RPKI Manifest - URI:rsync://krill.dacs.utwente.nl/repo/utwente/0/13134316A59A346059777B42752C571829EF804F.mft RPKI Notify - URI:https://krill.dacs.utwente.nl/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:38::/46 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 Signature Algorithm: sha256WithRSAEncryption 1a:59:a0:9a:6f:3e:0e:cf:1f:cb:fd:d2:eb:ac:39:e3:0e:8f: 44:d5:17:b7:f6:92:96:d6:02:e3:70:8e:5e:da:a7:db:ac:67: ec:32:2b:b6:47:f7:62:ca:dc:a8:8d:ec:86:71:ea:87:94:1e: a5:b8:d0:e1:c9:5b:5a:36:ee:1c:6b:31:9a:b7:54:f0:2c:b2: 71:c3:8e:a6:2e:fd:11:1d:dd:8e:45:01:23:b7:18:27:f9:53: d4:98:27:24:41:b4:28:ff:d6:fb:7c:bb:a1:b3:74:c1:b1:3a: 9b:19:e3:22:0e:3b:eb:35:2c:07:d4:76:b2:08:c0:2f:fb:09: 4d:c6:b5:cd:73:2a:63:d8:ae:ee:88:ea:5e:0b:ee:f8:ec:c3: 6b:3a:51:73:ad:58:0b:01:77:04:ed:1c:6e:99:16:b2:34:87: f4:a7:ba:dd:94:a5:82:32:fb:ff:1e:e5:7d:04:c1:89:66:60: d8:bc:5b:37:8f:b5:80:49:39:c2:b0:7c:40:ae:a4:da:70:5f: c7:40:56:99:ee:7e:02:e1:8d:e9:21:6d:7b:ed:69:79:e5:ce: 45:f0:e5:bf:85:eb:54:e5:d9:28:71:69:07:91:ca:46:29:c1: 20:4e:16:6f:9c:30:1d:95:81:ed:4d:6e:7b:a7:92:20:4f:d6: e6:38:2d:99 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUSZVXW6oemXzMRl/fMccIHVo5Y0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgy NUEwOUI3RDAeFw0yNjA2MjkxMjAxNTZaFw0yNzA2MjgxMjA2NTZaMDMxMTAvBgNV BAMTKDEzMTM0MzE2QTU5QTM0NjA1OTc3N0I0Mjc1MkM1NzE4MjlFRjgwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVOpkfvRn4VUBEXyInNf3+f02 CUFDtyDtQJtAKjIoMbjap+7qyZ69Rb0iC0CziE4Slq5QCC6SOmreeDBfNjFJtoXc OnZgEBK+0MNTptAtQl7ZM/zcy0iB1Zx7kOkn2GcIJFJZ7sZfO6tYuOJfaI50ZCxh HFVAUILRVmHg4lY3CVAjh/WnY/twnkP69qwjyAW24xDk6ZtNY16owOQSRs0peSeZ jINPwVPo6ESeVLckroGE4dmB5QNnE/81bBKuYjTO8wr/edU2NUuVPHIWGyZxDanr gzoXD1OmkD6yxjHmXH6rJF84OBixpfSu8pDrzSG7g0A3z4RyOdT/11uqF/8LAgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTE0MWpZo0YFl3 e0J1LFcYKe+ATzAfBgNVHSMEGDAWgBT3lkdRF1OELC5T8rWoyniYJaCbfTAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8xL0Y3OTY0 NzUxMTc1Mzg0MkMyRTUzRjJCNUE4Q0E3ODk4MjVBMDlCN0QuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThD QTc4OTgyNUEwOUI3RC5jZXIwgfMGCCsGAQUFBwELBIHmMIHjMDkGCCsGAQUFBzAF hi1yc3luYzovL2tyaWxsLmRhY3MudXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMC8w ZQYIKwYBBQUHMAqGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8wLzEzMTM0MzE2QTU5QTM0NjA1OTc3N0I0Mjc1MkM1NzE4MjlFRjgw NEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL2tyaWxsLmRhY3MudXR3ZW50ZS5u bC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEJpwAODAhBggrBgEFBQcB CAEB/wQSMBCgDjAMMAoCAwDwhgIDAPCIMA0GCSqGSIb3DQEBCwUAA4IBAQAaWaCa bz4Ozx/L/dLrrDnjDo9E1Re39pKW1gLjcI5e2qfbrGfsMiu2R/diytyojeyGceqH lB6luNDhyVtaNu4cazGat1TwLLJxw46mLv0RHd2ORQEjtxgn+VPUmCckQbQo/9b7 fLuhs3TBsTqbGeMiDjvrNSwH1HayCMAv+wlNxrXNcypj2K7uiOpeC+747MNrOlFz rVgLAXcE7RxumRayNIf0p7rdlKWCMvv/HuV9BMGJZmDYvFs3j7WASTnCsHxArqTa cF/HQFaZ7n4C4Y3pIW177Wl55c5F8OW/hetU5dkocWkHkcpGKcEgThZvnDAdlYHt TW57p5IgT9bmOC2Z -----END CERTIFICATE-----Generated at Thu Jul 23 19:57:24 2026 by rpki-client