$ rpki-client -vvvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft File: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft (raw, json) Hash identifier: HixbST+ietpNCwZ2YiNtznDAzXinvhuh8Uo2j+ByCdk= Subject key identifier: 35:7E:59:FA:7C:9B:06:27:6A:C3:A4:CC:D8:74:EA:A0:03:B2:7E:12 Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 43B17340E031F18EA7F0C64BBA89AA40D09661EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft Manifest number: 3E Signing time: Tue 22 Sep 2026 16:35:01 +0000 Manifest this update: Tue 22 Sep 2026 16:30:01 +0000 Manifest next update: Wed 23 Sep 2026 20:27:01 +0000 Files and hashes: 1: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer (hash: FDm4L+5NVe8xATmXPRgiT//oxPzu/kwHMzHJqsKYmNY=) 2: F3980A549A69CF361510BAE9C265FFA332C71DD2.cer (hash: A8ZB0SxCqy5q5x9k3TPOX4xZECn2XVWelF+IKGpMsfU=) 3: AS61574.asa (hash: xtX6/isSoWT0Gr+hTRI8s7Vk+YvbESbXFDufK+PpK6g=) 4: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl (hash: Wro9TBWm4d//226XrLtop14OdhxF8kt2G2hhdET+PzE=) 5: AS61575.roa (hash: gJ4KiijWqRwBS1vRojvsqbqCW4er0RZkMyEix5W8sSM=) 6: AS61574.roa (hash: jDEug8OGPUbGf+JoHShh0ozfa7KW0EJP0HXhqUjMHJY=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 20:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b1:73:40:e0:31:f1:8e:a7:f0:c6:4b:ba:89:aa:40:d0:96:61:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Sep 22 16:30:01 2026 GMT Not After : Sep 23 20:27:01 2026 GMT Subject: CN=357E59FA7C9B06276AC3A4CCD874EAA003B27E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:d1:12:9d:8e:41:e9:4b:a8:c8:a9:97:bf: 29:b3:f4:97:8b:20:7c:b9:b4:26:54:db:e0:f5:97: da:e1:15:e6:57:64:60:8f:1d:43:f8:f2:c0:2d:d4: 8b:db:1b:b3:e7:ab:fc:e4:b1:dd:94:a6:92:69:35: fc:cd:3b:32:49:d7:ea:96:a0:3a:29:75:54:ab:bc: 37:7e:cc:14:19:1a:1a:96:2e:ed:df:ff:6f:35:99: 34:90:ab:bd:f3:f5:ad:c8:5d:0d:92:ca:66:81:4c: a5:eb:d8:c7:d7:ef:34:bb:67:29:50:41:5d:0b:fb: 44:71:b4:44:e0:aa:66:71:dc:9a:1d:b8:d9:5d:0c: 85:01:e8:a5:67:20:de:56:41:cb:ba:f7:34:e5:52: 71:c0:8e:93:2d:de:1a:24:74:ec:f4:9e:e9:01:b5: b3:8a:5e:2d:4a:c9:b5:28:98:87:d1:19:c7:6c:42: 24:1a:c2:d7:ae:eb:92:cd:a2:f1:ae:da:39:b3:ba: 40:bd:75:aa:e5:b2:34:30:4f:de:00:ce:31:ab:27: 59:cb:d7:de:59:62:22:92:50:0e:f6:df:20:2a:bb: 1c:07:25:5f:cc:e9:04:f7:36:ab:f5:03:95:93:9d: 5a:0f:6b:e9:5d:36:33:d1:1b:a6:d0:e0:4b:9a:5b: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7E:59:FA:7C:9B:06:27:6A:C3:A4:CC:D8:74:EA:A0:03:B2:7E:12 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d1:76:3a:50:c7:29:bc:13:20:ee:1a:e9:c2:b1:51:8c:71: 82:6a:e3:fe:47:59:77:f6:6c:25:aa:15:2e:2b:00:8a:b3:fa: 79:99:a2:46:df:27:88:a9:56:17:84:01:e5:e7:c9:9e:98:5c: 18:c0:0a:e1:ab:56:7b:91:73:64:03:58:75:05:c9:f3:94:6d: f5:2b:ac:54:8c:5c:a2:33:ea:26:ee:35:26:1c:0a:79:15:26: 13:dc:2f:03:40:9a:6f:2e:8f:48:0b:22:6c:70:a6:a6:84:a8: 79:d0:25:1b:01:1b:98:48:01:51:5e:29:db:e1:b5:15:85:83: ee:0b:a4:0e:ca:44:5d:22:e1:39:b6:2c:83:85:99:eb:f6:94: e4:6d:a2:20:63:87:a8:a8:5b:dd:17:ce:10:95:29:a9:59:bb: 7e:65:e4:3f:a6:22:0e:91:f0:c3:c7:79:9c:ab:34:dd:7b:37: f8:6c:d5:9d:17:06:7f:11:5d:26:46:6d:e9:f2:48:1a:ab:d9: 53:95:d9:f1:0d:4a:1d:2f:e8:45:c7:36:96:c8:7b:41:c8:4e: bd:fc:60:d4:ae:93:6e:4f:1e:5a:9f:e8:95:e4:06:a8:24:01: 74:d0:23:19:89:0d:e7:85:3e:d7:85:e5:60:38:0f:60:b8:ba: bc:bc:ea:ff -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUQ7FzQOAx8Y6n8MZLuomqQNCWYeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA5MjIxNjMwMDFaFw0yNjA5MjMyMDI3MDFaMDMxMTAvBgNV BAMTKDM1N0U1OUZBN0M5QjA2Mjc2QUMzQTRDQ0Q4NzRFQUEwMDNCMjdFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRydESnY5B6UuoyKmXvymz9JeL IHy5tCZU2+D1l9rhFeZXZGCPHUP48sAt1IvbG7Pnq/zksd2UppJpNfzNOzJJ1+qW oDopdVSrvDd+zBQZGhqWLu3f/281mTSQq73z9a3IXQ2SymaBTKXr2MfX7zS7ZylQ QV0L+0RxtETgqmZx3JoduNldDIUB6KVnIN5WQcu69zTlUnHAjpMt3hokdOz0nukB tbOKXi1KybUomIfRGcdsQiQawteu65LNovGu2jmzukC9darlsjQwT94AzjGrJ1nL 195ZYiKSUA723yAquxwHJV/M6QT3Nqv1A5WTnVoPa+ldNjPRG6bQ4EuaW6YRAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUNX5Z+nybBidqw6TM2HTqoAOyfhIwHwYDVR0j BBgwFoAUDXKZz+qLM5nrJI+mhRi2hizi6I8wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhG QTY4NTE4QjY4NjJDRTJFODhGLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcy OTlDRkVBOEIzMzk5RUIyNDhGQTY4NTE4QjY4NjJDRTJFODhGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA a9F2OlDHKbwTIO4a6cKxUYxxgmrj/kdZd/ZsJaoVLisAirP6eZmiRt8niKlWF4QB 5efJnphcGMAK4atWe5FzZANYdQXJ85Rt9SusVIxcojPqJu41JhwKeRUmE9wvA0Ca by6PSAsibHCmpoSoedAlGwEbmEgBUV4p2+G1FYWD7gukDspEXSLhObYsg4WZ6/aU 5G2iIGOHqKhb3RfOEJUpqVm7fmXkP6YiDpHww8d5nKs03Xs3+GzVnRcGfxFdJkZt 6fJIGqvZU5XZ8Q1KHS/oRcc2lsh7QchOvfxg1K6Tbk8eWp/oleQGqCQBdNAjGYkN 54U+14XlYDgPYLi6vLzq/w== -----END CERTIFICATE-----Generated at Wed Sep 23 07:11:35 2026 by rpki-client