$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json) Hash identifier: owOJtB96/c1NjCWJCH6Hc30P7NNNcw/V78Ac20aGZyw= Subject key identifier: 97:E7:9D:66:34:C5:98:E0:EF:AF:75:72:FF:48:DA:3E:AF:F3:4D:B4 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 72E0307FD4CA5CE6AD1C0C379A9DDC65B17870DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft Manifest number: 0131 Signing time: Fri 03 Apr 2026 00:13:24 +0000 Manifest this update: Fri 03 Apr 2026 00:08:24 +0000 Manifest next update: Sat 04 Apr 2026 03:26:24 +0000 Files and hashes: 1: F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer (hash: RJ01XoOHPfWLkR8PwmFL+ze2TFvWzRhOgvRC4tKIXsw=) 2: AS61575.roa (hash: 28h1c2Unte9m6JfK2qV2CncYmTmTY54Ou2BLMXZE2TI=) 3: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: b9zwOMl+JI63y5EbShSJNzaAcqoGmGjrI7NTODaxlwg=) 4: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer (hash: 759JSWPMroO0sBWluFHTkhK9ORxLa6aiqvD62ap7QMU=) 5: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=) 6: AS61574.roa (hash: Ynl86BG//4yys2kNc3GrGh7DM2lbdYgU75T6KyljZYI=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 04 Apr 2026 03:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e0:30:7f:d4:ca:5c:e6:ad:1c:0c:37:9a:9d:dc:65:b1:78:70:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Apr 3 00:08:24 2026 GMT Not After : Apr 4 03:26:24 2026 GMT Subject: CN=97E79D6634C598E0EFAF7572FF48DA3EAFF34DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:5d:ea:65:85:57:5e:de:20:a1:a2:e1:3c: 80:a9:eb:85:22:7e:81:ee:86:3b:82:ae:54:a7:1e: 10:eb:25:c1:53:ff:3c:80:de:b1:4a:b3:92:08:40: da:c9:ed:84:74:55:98:8a:92:a7:7a:fe:4c:ad:7b: 4a:51:97:f5:0e:62:35:61:da:0b:f6:ab:8c:e6:37: 61:1f:93:a5:6a:e7:b7:3f:94:bb:9e:db:ac:4c:0f: 46:fa:85:d8:40:b8:52:3a:20:22:aa:c1:b9:53:ae: 2b:ed:c6:06:93:b0:3f:ab:b9:4d:23:0f:12:82:5a: c7:9d:c3:c8:86:19:40:c5:07:08:35:72:aa:18:04: 8b:bd:83:82:c5:ef:cd:f7:04:51:8a:9c:b0:05:55: 77:66:e1:79:f8:cc:59:7e:50:18:58:96:e7:bd:fc: b4:45:97:31:80:fc:5e:58:ca:07:84:13:cf:fe:aa: f0:20:41:46:67:a3:51:af:23:d1:d4:9e:b1:99:5d: 7e:3c:22:7e:42:ed:b3:7f:d2:c8:81:96:e2:d9:c8: c7:19:74:5c:b0:9e:d3:46:f4:b4:38:58:48:5a:e7: 44:26:68:b2:1d:c2:96:41:a2:3b:1b:66:c1:cb:7f: f7:45:d6:77:13:43:49:e5:ea:8c:2f:c6:d1:8b:d3: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:9D:66:34:C5:98:E0:EF:AF:75:72:FF:48:DA:3E:AF:F3:4D:B4 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5c:1b:0b:d0:5f:77:4f:71:36:1a:82:7e:4f:73:8c:1b:c9: a5:cc:d4:7f:25:29:4e:22:86:20:ba:9c:78:e3:20:8c:2b:0c: 2e:cf:b4:5f:a4:a2:2b:d3:2a:85:ed:f0:83:5f:9c:45:71:22: 42:85:13:c0:10:cb:a1:b9:7a:e0:11:8a:e3:3b:8e:80:3e:58: 13:26:04:1c:5b:9b:5b:d9:65:3f:bf:04:41:f2:12:93:40:c3: 0d:4b:3a:92:2a:c2:9f:06:c1:ba:60:49:bf:42:bf:23:80:1a: dc:62:ac:88:a2:9c:ed:20:29:3f:90:77:bb:6a:30:9a:71:2c: 99:ca:26:a6:83:6e:35:b9:52:2f:2f:41:65:b1:54:30:d7:a5: 19:4b:e6:d2:df:ae:c3:6e:d9:9f:7f:1e:8a:88:f8:d0:ff:60: 77:3c:67:1c:78:b1:f4:b7:c8:06:12:64:a4:ca:e0:38:79:3e: 8b:17:e8:be:0f:33:c3:76:2f:ce:50:e3:2f:05:20:d5:76:85: 3a:c2:21:e6:5b:c0:cc:6e:89:0f:ea:6e:14:d3:e2:e4:3c:e9: 54:61:a4:73:0c:df:09:ee:b8:47:ea:c1:a0:8f:eb:68:73:d8: c6:18:e8:a1:d8:de:1a:eb:e0:de:ec:3b:b5:a7:df:f4:52:e0: 79:52:d5:4c -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUcuAwf9TKXOatHAw3mp3cZbF4cN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjA0MDMwMDA4MjRaFw0yNjA0MDQwMzI2MjRaMDMxMTAvBgNV BAMTKDk3RTc5RDY2MzRDNTk4RTBFRkFGNzU3MkZGNDhEQTNFQUZGMzREQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5V3qZYVXXt4goaLhPICp64Ui foHuhjuCrlSnHhDrJcFT/zyA3rFKs5IIQNrJ7YR0VZiKkqd6/kyte0pRl/UOYjVh 2gv2q4zmN2Efk6Vq57c/lLue26xMD0b6hdhAuFI6ICKqwblTrivtxgaTsD+ruU0j DxKCWsedw8iGGUDFBwg1cqoYBIu9g4LF7833BFGKnLAFVXdm4Xn4zFl+UBhYlue9 /LRFlzGA/F5YygeEE8/+qvAgQUZno1GvI9HUnrGZXX48In5C7bN/0siBluLZyMcZ dFywntNG9LQ4WEha50QmaLIdwpZBojsbZsHLf/dF1ncTQ0nl6owvxtGL05fJAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUl+edZjTFmODvr3Vy/0jaPq/zTbQwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA nFwbC9Bfd09xNhqCfk9zjBvJpczUfyUpTiKGILqceOMgjCsMLs+0X6SiK9Mqhe3w g1+cRXEiQoUTwBDLobl64BGK4zuOgD5YEyYEHFubW9llP78EQfISk0DDDUs6kirC nwbBumBJv0K/I4Aa3GKsiKKc7SApP5B3u2owmnEsmcompoNuNblSLy9BZbFUMNel GUvm0t+uw27Zn38eioj40P9gdzxnHHix9LfIBhJkpMrgOHk+ixfovg8zw3YvzlDj LwUg1XaFOsIh5lvAzG6JD+puFNPi5DzpVGGkcwzfCe64R+rBoI/raHPYxhjoodje Guvg3uw7taff9FLgeVLVTA== -----END CERTIFICATE-----Generated at Fri Apr 3 08:54:57 2026 by rpki-client