
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
File: F79647511753842C2E53F2B5A8CA789825A09B7D.mft (raw, json)
Hash identifier: NBoDRQLih4XORq1bJhh//LctdVF/bQZljVdd8Aj++6c=
Subject key identifier: C8:1E:9A:37:93:51:58:A2:4A:DC:6B:2F:90:D6:01:17:C6:51:F5:61
Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D
Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D
Certificate serial: 4C33A4299F46380722DA159B9A3CE4FC1C0FC0D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
Manifest number: 1A
Signing time: Sat 27 Jun 2026 02:01:07 +0000
Manifest this update: Sat 27 Jun 2026 01:56:07 +0000
Manifest next update: Sun 28 Jun 2026 05:14:07 +0000
Files and hashes: 1: 0EE737362A63227799B760296110BD044DB7821A.cer (hash: 68B5Pxm5X6VvNuRyhsFneX/lzVkDsEhCvKtFQRVsI/4=)
2: F79647511753842C2E53F2B5A8CA789825A09B7D.crl (hash: UD5+ja1fBktblN3m1E/L/+xT/6FXpJFrpIw7vjQ5zyk=)
3: AS61574.asa (hash: 55wmqKUwsN4gfnCnS8UhCL9K3G7Q23oJcK5QReiY8x0=)
4: AS61575.roa (hash: zEw5aVoMUZLF+uF8932t0tJXOYy6Db0+urWp45CLqWM=)
5: AS61574.roa (hash: CFBwLo4WbnRrp19g4XPkrkdP3QMm3ER/UNyHMztnsaE=)
Validation: OK
Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 28 Jun 2026 05:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:33:a4:29:9f:46:38:07:22:da:15:9b:9a:3c:e4:fc:1c:0f:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D
Validity
Not Before: Jun 27 01:56:07 2026 GMT
Not After : Jun 28 05:14:07 2026 GMT
Subject: CN=C81E9A37935158A24ADC6B2F90D60117C651F561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:aa:d7:1a:65:a5:1a:f7:0c:9d:8d:27:f3:
1e:18:65:3e:6b:94:1a:bb:cd:99:bf:4e:2c:84:f8:
92:97:49:c5:4c:13:3c:59:6f:68:71:21:09:d1:65:
e7:38:08:f2:df:85:2c:95:af:5f:01:62:12:6d:05:
8f:a8:c7:e0:9d:ac:f4:01:1b:55:ec:fb:92:ce:04:
37:bc:0a:c2:50:c9:74:07:91:7c:2b:74:1a:d8:da:
66:49:ca:69:e9:ca:c6:cc:06:af:26:03:96:e1:87:
dc:2c:7d:8e:f8:10:b0:07:61:e0:e6:35:a2:59:92:
29:b7:e1:8e:2f:c7:ba:38:8d:a8:0b:85:1b:69:2a:
aa:f4:24:af:e9:68:43:bd:d7:77:f8:ea:4d:ee:22:
c5:79:9a:fb:2b:bd:b0:98:2e:14:7f:3e:e5:1a:75:
ed:05:c0:49:67:9a:b7:f6:82:0f:52:ed:20:ca:f6:
47:b1:32:cc:37:cb:64:e3:bc:29:cf:74:92:89:18:
af:b4:dc:0d:ae:86:0b:d9:87:ea:e8:11:13:81:a8:
1d:62:3f:57:f7:90:7b:3c:b5:cf:91:f7:d5:34:d4:
07:a5:30:7f:50:bd:75:75:e0:9d:90:1a:3a:14:4e:
c2:1e:c3:ce:23:72:d5:5f:ea:3e:8d:16:c6:d4:e1:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:9A:37:93:51:58:A2:4A:DC:6B:2F:90:D6:01:17:C6:51:F5:61
X509v3 Authority Key Identifier:
keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:e7:4b:f3:59:c1:b7:aa:d2:93:1b:79:95:aa:e5:e8:5f:
b3:c9:43:df:3d:e8:45:a9:84:c5:e9:67:4e:5b:6c:3a:3a:23:
8c:98:bc:c9:2d:89:c2:92:23:c6:9e:ad:74:51:f7:3a:33:97:
f6:da:85:23:9d:88:41:31:d4:16:48:1e:b1:03:6f:3e:22:0b:
f4:ad:2d:06:e6:df:1c:25:73:3f:5a:72:0e:fa:37:4f:2f:73:
ac:62:9d:dd:ec:fe:45:a7:e9:e8:95:38:b9:b5:ca:ce:c7:87:
77:6a:df:96:5a:b3:80:ae:ad:2c:d8:22:14:c8:7e:20:3f:e8:
96:bf:36:ef:5a:86:37:87:d7:b6:ea:eb:9c:59:2a:22:77:9b:
61:ca:4e:bd:bc:db:44:92:e7:15:32:bb:89:8a:1c:d3:eb:5c:
31:22:9d:6d:9d:b4:21:9a:d2:dc:58:3c:9d:a2:86:98:6c:46:
d3:84:d6:a5:3a:10:eb:fc:ac:16:ff:96:82:1c:bb:6f:dd:85:
9d:fc:75:04:b6:f3:83:5e:40:4a:85:9e:36:1a:95:56:f3:cc:
18:e6:1a:ec:12:7a:d2:97:8e:e9:ed:e6:51:33:33:83:1f:bd:
85:9d:d9:c2:df:eb:a6:93:85:db:f3:ab:19:09:7b:14:90:07:
4f:bc:21:be
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUTDOkKZ9GOAci2hWbmjzk/BwPwNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgy
NUEwOUI3RDAeFw0yNjA2MjcwMTU2MDdaFw0yNjA2MjgwNTE0MDdaMDMxMTAvBgNV
BAMTKEM4MUU5QTM3OTM1MTU4QTI0QURDNkIyRjkwRDYwMTE3QzY1MUY1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIKrXGmWlGvcMnY0n8x4YZT5r
lBq7zZm/TiyE+JKXScVMEzxZb2hxIQnRZec4CPLfhSyVr18BYhJtBY+ox+CdrPQB
G1Xs+5LOBDe8CsJQyXQHkXwrdBrY2mZJymnpysbMBq8mA5bhh9wsfY74ELAHYeDm
NaJZkim34Y4vx7o4jagLhRtpKqr0JK/paEO913f46k3uIsV5mvsrvbCYLhR/PuUa
de0FwElnmrf2gg9S7SDK9kexMsw3y2TjvCnPdJKJGK+03A2uhgvZh+roEROBqB1i
P1f3kHs8tc+R99U01AelMH9QvXV14J2QGjoUTsIew84jctVf6j6NFsbU4bqJAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUyB6aN5NRWKJK3GsvkNYBF8ZR9WEwHwYDVR0j
BBgwFoAU95ZHURdThCwuU/K1qMp4mCWgm30wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud
HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l
ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMS9GNzk2NDc1MTE3NTM4NDJDMkU1M0Yy
QjVBOENBNzg5ODI1QTA5QjdELmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH
MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw
by8xL0Y3OTY0NzUxMTc1Mzg0MkMyRTUzRjJCNUE4Q0E3ODk4MjVBMDlCN0QuY2Vy
MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl
cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMS9GNzk2
NDc1MTE3NTM4NDJDMkU1M0YyQjVBOENBNzg5ODI1QTA5QjdELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
h8rnS/NZwbeq0pMbeZWq5ehfs8lD3z3oRamExelnTltsOjojjJi8yS2JwpIjxp6t
dFH3OjOX9tqFI52IQTHUFkgesQNvPiIL9K0tBubfHCVzP1pyDvo3Ty9zrGKd3ez+
Rafp6JU4ubXKzseHd2rfllqzgK6tLNgiFMh+ID/olr8271qGN4fXturrnFkqIneb
YcpOvbzbRJLnFTK7iYoc0+tcMSKdbZ20IZrS3Fg8naKGmGxG04TWpToQ6/ysFv+W
ghy7b92Fnfx1BLbzg15ASoWeNhqVVvPMGOYa7BJ60peO6e3mUTMzgx+9hZ3Zwt/r
ppOF2/OrGQl7FJAHT7whvg==
-----END CERTIFICATE-----
Generated at Sat Jun 27 12:03:46 2026 by rpki-client