$ rpki-client -vvvf rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft File: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft (raw, json) Hash identifier: b4j2orfeDToMfhQscQST9XcePT3B4GSvLIl5ZEYK3qA= Subject key identifier: 4C:36:39:25:18:6B:DA:5E:C1:D6:9B:C3:36:51:63:6A:D7:B3:69:49 Authority key identifier: 9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A Certificate issuer: /CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Certificate serial: 31C5C4870FAE11359493161642CC0CB7DB34D835 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer Subject info access: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft Manifest number: 24 Signing time: Wed 23 Sep 2026 08:44:32 +0000 Manifest this update: Wed 23 Sep 2026 08:39:32 +0000 Manifest next update: Thu 24 Sep 2026 11:32:32 +0000 Files and hashes: 1: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl (hash: dA9vpgpxSMlD2aQgGqQBje7YRXC0zx5SDjNdGuA4WZg=) Validation: OK Signature path: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Sep 2026 11:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c5:c4:87:0f:ae:11:35:94:93:16:16:42:cc:0c:b7:db:34:d8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Validity Not Before: Sep 23 08:39:32 2026 GMT Not After : Sep 24 11:32:32 2026 GMT Subject: CN=4C363925186BDA5EC1D69BC33651636AD7B36949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:3b:34:ab:fc:81:cf:79:19:cb:77:24:5b: 3f:fa:2d:ff:0e:0b:ae:2b:3e:a8:b3:32:61:d9:94: 12:77:84:a9:ad:39:04:bc:3b:c3:4a:85:d5:17:e4: 2d:7c:96:d8:a5:14:b7:1a:cc:10:de:34:ff:53:a9: 47:86:b5:61:f5:cf:d4:fb:cb:23:01:25:ae:aa:1d: e7:2c:47:a0:9f:cc:6a:47:9a:e1:ff:71:e7:b2:c9: 22:af:0d:41:09:50:2f:77:2e:8c:02:52:9d:ba:01: fc:b6:13:ac:52:32:c5:18:53:5a:a5:20:b0:b8:2a: c7:a8:b8:a1:26:57:17:f0:ed:c2:c6:1a:58:72:70: 13:7c:7f:ad:0b:01:5c:56:b4:5e:91:ac:15:19:35: 48:71:51:e2:81:f3:79:4f:96:ad:18:4e:dc:ae:55: f9:86:99:7f:02:eb:95:27:08:0b:d1:85:21:67:81: b8:20:5a:a3:e0:be:71:33:79:f1:0c:f3:d8:60:22: 05:dc:58:26:b2:24:f6:c4:98:7a:8c:a5:69:db:1b: 93:fc:fa:c2:43:49:5d:fa:36:a6:b5:ae:f0:75:5a: 58:25:e4:ed:f2:d0:54:72:de:63:d6:09:43:52:2b: 34:68:74:05:ae:b0:3b:fa:31:15:cb:f8:86:1c:de: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:36:39:25:18:6B:DA:5E:C1:D6:9B:C3:36:51:63:6A:D7:B3:69:49 X509v3 Authority Key Identifier: keyid:9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer Subject Information Access: Signed Object - URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:bd:8f:07:0a:95:ff:bb:90:4f:f2:71:b2:a6:f8:f3:a7:c8: 20:b4:59:3b:dc:02:f1:57:62:d8:ff:00:f4:eb:5a:ef:e2:3d: b9:ac:fc:a2:4c:e4:25:99:5b:a5:9c:36:1c:60:b4:50:31:21: 9c:8a:a4:cc:8c:21:d3:5a:9b:3e:e4:a1:58:95:a7:04:81:34: aa:48:e3:ce:1f:22:6c:21:22:ab:18:70:4d:83:ea:37:19:fa: 43:f8:d0:b3:61:cf:8b:ba:09:04:65:03:1d:d2:54:cf:ac:5f: aa:2b:cf:8c:35:12:ea:fb:da:f4:34:d9:8a:59:1b:d9:e5:c1: 02:7f:ff:e1:e8:91:e5:fd:bf:9e:d0:17:98:98:05:4d:cc:27: e1:9f:47:08:34:1a:21:d4:cf:98:0c:49:a8:28:c2:0b:dd:32: f0:38:0f:a3:ad:ec:29:c5:6f:8d:cc:a2:52:c9:97:19:0b:d8: b7:1c:7d:87:77:9a:f1:d8:c0:03:d9:83:ac:d3:70:80:e0:9f: 46:bc:d8:ad:91:75:45:2d:63:1d:59:5f:23:43:de:6b:b0:50: f1:63:ee:c9:23:06:ed:c0:9b:bb:fe:b7:e5:8a:c9:93:e5:dd: 03:4a:72:32:ae:41:cd:e0:43:df:9e:66:eb:41:fd:b5:e8:09: 6f:95:a9:31 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUMcXEhw+uETWUkxYWQswMt9s02DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5MDVCN0U5MjA5Q0FCRUYxRTQ5RkZGRkRENEVBREVG QjlDQzc4QTAeFw0yNjA5MjMwODM5MzJaFw0yNjA5MjQxMTMyMzJaMDMxMTAvBgNV BAMTKDRDMzYzOTI1MTg2QkRBNUVDMUQ2OUJDMzM2NTE2MzZBRDdCMzY5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXjs0q/yBz3kZy3ckWz/6Lf8O C64rPqizMmHZlBJ3hKmtOQS8O8NKhdUX5C18ltilFLcazBDeNP9TqUeGtWH1z9T7 yyMBJa6qHecsR6CfzGpHmuH/ceeyySKvDUEJUC93LowCUp26Afy2E6xSMsUYU1ql ILC4KseouKEmVxfw7cLGGlhycBN8f60LAVxWtF6RrBUZNUhxUeKB83lPlq0YTtyu VfmGmX8C65UnCAvRhSFngbggWqPgvnEzefEM89hgIgXcWCayJPbEmHqMpWnbG5P8 +sJDSV36Nqa1rvB1Wlgl5O3y0FRy3mPWCUNSKzRodAWusDv6MRXL+IYc3hblAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUTDY5JRhr2l7B1pvDNlFjatezaUkwHwYDVR0j BBgwFoAUnJBbfpIJyr7x5J///dTq3vucx4owDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnN5bmMuaXAuZGVhbHMvcmVwby9pcGRlYWxz LzEvOUM5MDVCN0U5MjA5Q0FCRUYxRTQ5RkZGRkRENEVBREVGQjlDQzc4QS5jcmww gYUGCCsGAQUFBwEBBHkwdzB1BggrBgEFBQcwAoZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yLzlDOTA1 QjdFOTIwOUNBQkVGMUU0OUZGRkZERDRFQURFRkI5Q0M3OEEuY2VyMG4GCCsGAQUF BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9yc3luYy5pcC5kZWFscy9yZXBv L2lwZGVhbHMvMS85QzkwNUI3RTkyMDlDQUJFRjFFNDlGRkZGREQ0RUFERUZCOUND NzhBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkq hkiG9w0BAQsFAAOCAQEAGL2PBwqV/7uQT/Jxsqb486fIILRZO9wC8Vdi2P8A9Ota 7+I9uaz8okzkJZlbpZw2HGC0UDEhnIqkzIwh01qbPuShWJWnBIE0qkjjzh8ibCEi qxhwTYPqNxn6Q/jQs2HPi7oJBGUDHdJUz6xfqivPjDUS6vva9DTZilkb2eXBAn// 4eiR5f2/ntAXmJgFTcwn4Z9HCDQaIdTPmAxJqCjCC90y8DgPo63sKcVvjcyiUsmX GQvYtxx9h3ea8djAA9mDrNNwgOCfRrzYrZF1RS1jHVlfI0Pea7BQ8WPuySMG7cCb u/635YrJk+XdA0pyMq5BzeBD355m60H9tegJb5WpMQ== -----END CERTIFICATE-----Generated at Wed Sep 23 21:54:12 2026 by rpki-client